Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3407E1EA46B411F1AC366ED6CE1D38B0.roa
File: 3407E1EA46B411F1AC366ED6CE1D38B0.roa (raw, json)
Hash identifier: YALqEP2owNQarx0qo3qixe78lmXBOpGI2mP0kjy/yJ0=
Subject key identifier: 78:25:CF:95:59:10:18:BA:21:53:AD:0E:F6:C0:61:95:5A:98:7E:E4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B160
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3407E1EA46B411F1AC366ED6CE1D38B0.roa
Signing time: Sun 03 May 2026 05:52:01 +0000
ROA not before: Sun 03 May 2026 05:51:56 +0000
ROA not after: Sun 14 Jun 2026 05:51:56 +0000
asID: 141718
IP address blocks: 45.194.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110944 (0x1b160)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 3 05:51:56 2026 GMT
Not After : Jun 14 05:51:56 2026 GMT
Subject: CN=69f6e281-a630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:97:3c:99:ba:27:c7:7e:61:74:55:81:56:a4:
43:d7:c8:ab:60:69:64:e4:41:ec:22:43:cc:aa:62:
0a:ec:ea:05:a1:00:28:57:ed:13:d1:3f:72:d5:bb:
95:2e:46:64:cc:cb:d7:b8:73:ba:c1:c4:3a:f0:e6:
40:27:e5:d7:bd:49:d7:87:83:e2:a0:90:35:62:49:
05:f0:24:4a:ab:3a:0d:d1:5c:ee:da:25:b9:ed:d4:
14:45:94:62:7f:51:8e:22:e1:e1:1a:f0:51:0e:8e:
e8:8b:b8:0e:8a:5c:f5:5d:6e:8c:9e:5b:d4:cc:48:
21:0b:14:42:eb:ca:8e:69:04:d6:55:4c:18:af:a3:
6c:3f:7c:56:4d:4b:c8:39:e7:bf:1d:86:b5:5a:cd:
40:e5:f0:e3:d0:0f:68:a7:e2:ef:04:c8:57:04:5d:
e8:0b:4a:e8:6b:67:58:eb:27:63:07:9c:f7:42:aa:
63:7c:12:3f:b6:03:89:77:79:d0:40:be:bb:4a:d1:
88:14:15:51:ef:2b:cd:06:cd:38:47:b3:fe:7b:5c:
a1:c5:f0:c8:f1:e2:6b:50:52:21:f4:97:2b:05:49:
50:da:6f:ec:6b:e3:2a:18:b9:c6:c3:76:e4:a9:91:
71:5f:85:d6:e5:1a:39:46:b0:fe:bc:15:15:35:a5:
c3:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:25:CF:95:59:10:18:BA:21:53:AD:0E:F6:C0:61:95:5A:98:7E:E4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3407E1EA46B411F1AC366ED6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.86.0/24
Signature Algorithm: sha256WithRSAEncryption
57:d2:2f:b6:97:9c:c4:4a:44:37:50:ad:69:0d:54:0c:f2:ac:
61:0b:c9:31:a4:a4:95:65:78:a9:c6:44:46:c7:9c:fe:57:49:
9e:af:d0:56:23:2f:6b:1a:18:af:b3:9f:00:a2:c6:53:e6:4e:
ed:56:7e:4c:19:a8:6a:a3:02:5b:04:2e:b5:3c:3b:e7:b7:40:
98:e1:4e:1c:09:d6:10:8d:1f:00:c9:4f:1c:c9:5b:7e:fb:ee:
12:eb:57:7c:86:ff:03:92:f1:cc:15:fa:1b:86:70:a0:8f:d5:
a7:e8:2f:e2:d2:ae:97:b5:17:3a:d1:12:69:e0:e8:d4:c4:29:
2c:1a:e6:cd:31:3d:c7:09:6b:d7:61:a4:c5:2b:3e:18:53:cb:
a0:4c:f5:98:a8:bb:99:14:a7:e0:ef:de:80:69:3a:9f:83:bb:
a5:16:a9:7e:33:83:6e:d5:0f:38:74:c6:ca:c9:11:c6:82:6c:
b2:af:63:08:93:0c:eb:f2:b2:41:2e:b2:a4:ae:ee:48:d2:89:
44:89:1d:9d:65:f2:7f:d1:2a:f3:32:b5:36:65:d9:23:72:7f:
9c:58:5c:69:16:54:45:c6:c3:eb:c4:bd:28:5d:e5:08:2b:64:
03:ea:f6:5c:1a:40:2d:76:86:69:9c:94:be:c5:d2:d9:41:6f:
8d:9a:8b:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:18:51 2026 by rpki-client