Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2859CA184DD811F1B2C34BBCCE1D38B0.roa
File: 2859CA184DD811F1B2C34BBCCE1D38B0.roa (raw, json)
Hash identifier: g4IWrSgVC1B72iWWMOhLLe0B13xg7UWrJxqhYurHxEQ=
Subject key identifier: 4D:12:C3:96:DA:54:2C:E2:B4:81:C6:BE:BD:EC:42:AE:C6:A5:83:42
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B3DD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2859CA184DD811F1B2C34BBCCE1D38B0.roa
Signing time: Tue 12 May 2026 07:57:01 +0000
ROA not before: Tue 12 May 2026 07:56:57 +0000
ROA not after: Wed 17 Jun 2026 07:56:57 +0000
asID: 397423
IP address blocks: 45.194.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111581 (0x1b3dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 12 07:56:57 2026 GMT
Not After : Jun 17 07:56:57 2026 GMT
Subject: CN=6a02dd4d-84cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:59:e2:d6:66:a8:04:3f:4a:40:27:61:aa:30:
84:47:04:d0:0e:c8:a1:a2:85:25:39:9e:f8:76:8b:
12:62:87:0e:42:a2:1a:7f:d5:13:b1:39:e6:0f:d6:
b1:ac:86:d5:9c:8c:79:99:d7:97:bf:07:f3:ea:5d:
12:f3:8c:86:99:4c:c0:d2:93:5c:80:68:f9:22:f3:
8b:c9:7f:11:96:5a:27:eb:3f:ae:6e:d1:f6:6f:40:
93:bb:2f:c3:ca:0d:f8:05:bb:c4:ba:5a:fd:46:b4:
7a:73:77:ae:c8:2a:76:55:a2:80:76:c6:a9:ff:4e:
ed:9f:4a:cb:dd:9f:30:93:29:15:73:57:fa:56:35:
4d:71:b9:10:98:2d:5e:32:ac:1e:9c:9f:87:c6:db:
bc:54:d9:59:dc:4b:d6:4f:a3:32:b7:b7:84:52:9f:
88:15:30:f5:57:1e:1c:2c:34:27:42:85:44:a4:fd:
21:71:2a:6e:bc:55:fd:6a:7b:a8:dc:8f:1d:b7:f9:
f6:96:b6:1a:e2:cd:bc:85:42:e5:68:c2:9a:f0:a7:
83:b7:89:86:07:a0:e5:f8:2e:eb:b2:ad:62:68:ec:
84:b4:b0:d9:c0:44:a5:21:bf:78:59:c4:51:2a:7e:
4a:dd:f5:9d:9c:50:c5:61:84:f3:6c:a7:a5:3c:2e:
ca:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:12:C3:96:DA:54:2C:E2:B4:81:C6:BE:BD:EC:42:AE:C6:A5:83:42
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2859CA184DD811F1B2C34BBCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.28.0/24
Signature Algorithm: sha256WithRSAEncryption
77:ba:30:2f:f0:e8:03:18:74:83:97:50:86:66:9a:b1:ad:0b:
e8:0c:0a:4e:ce:a7:8e:27:a6:9c:80:f0:e1:4e:30:f1:0e:fe:
f6:f4:2b:f9:1d:63:c3:0c:cc:6f:d4:1c:ca:93:bf:2c:be:d7:
1c:3d:ad:2a:d3:3c:08:82:92:66:2f:de:0c:79:f9:1f:10:0b:
77:d9:ab:45:0f:f5:a7:8f:34:b7:e7:af:7b:7a:a6:3c:c3:d3:
d8:ab:ac:93:b9:c1:66:55:6d:16:25:9a:97:93:9d:76:d8:35:
89:dd:e6:56:b1:5b:20:85:de:14:b3:23:74:91:01:59:24:f6:
f1:3e:3c:f5:0f:f7:9e:24:67:62:99:6a:65:03:1f:0d:89:52:
19:3c:40:b1:13:37:ee:8f:a5:40:05:6c:6b:2d:02:2f:b7:e4:
1a:85:0e:68:76:cc:ff:8a:d6:82:43:68:0c:5b:06:31:d0:2d:
7f:00:21:68:58:9c:e6:64:5b:5b:26:32:05:1c:13:18:3e:da:
f7:bc:39:cd:3b:0c:f3:91:53:02:70:79:e7:c8:c1:52:fe:0f:
d5:6c:7c:9b:f5:67:62:35:f9:93:ff:e7:11:c2:4f:c4:a6:20:
2b:49:21:5a:78:57:ac:a0:81:f9:0f:c0:38:c7:b2:87:8f:7a:
e1:78:70:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:28:19 2026 by rpki-client