Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C9C9F7A4AB111F19AE61214CF1D38B0.roa
File: 3C9C9F7A4AB111F19AE61214CF1D38B0.roa (raw, json)
Hash identifier: gPPKTlX60B9OzpUbRQRKuNMsobbSU9VaGgA2ULw3MuE=
Subject key identifier: 3F:8D:1A:39:57:01:2D:7C:F1:E0:30:F1:AB:A8:A1:CB:12:26:27:F5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B2AF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C9C9F7A4AB111F19AE61214CF1D38B0.roa
Signing time: Fri 08 May 2026 07:40:51 +0000
ROA not before: Fri 08 May 2026 07:40:42 +0000
ROA not after: Sun 14 Jun 2026 07:40:42 +0000
asID: 199707
IP address blocks: 45.194.124.0/22 maxlen: 24
45.195.64.0/22 maxlen: 24
45.195.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111279 (0x1b2af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 8 07:40:42 2026 GMT
Not After : Jun 14 07:40:42 2026 GMT
Subject: CN=69fd9383-5b8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:90:33:0a:07:f9:b4:1a:4f:5e:a2:34:2a:47:
f4:77:f5:17:dc:0d:14:2d:39:03:6a:51:89:7c:69:
f6:90:f4:3f:82:b3:47:c0:49:d6:7f:fb:92:81:6b:
a4:04:c2:81:bf:73:d0:66:ab:ba:d7:06:bb:2b:df:
ae:63:89:a5:6e:91:ec:f1:2e:03:59:48:9c:8f:16:
69:5b:71:3e:65:26:6f:35:71:51:d2:f8:a1:38:cb:
08:91:00:4b:27:c6:51:5d:b7:44:8f:84:a9:4a:6c:
f6:79:84:35:6c:e4:06:1f:51:08:b1:d6:01:39:98:
5c:ee:17:1e:dc:0c:ff:11:78:cf:dd:59:de:18:2a:
30:d5:4f:3f:18:87:7a:83:55:bd:44:c8:89:7d:2d:
5d:a1:48:17:82:ee:f1:78:60:85:c5:c8:1c:22:72:
21:d2:c6:7f:b1:fa:6f:0f:77:8c:bf:75:0c:83:5e:
6d:6f:3f:3c:59:68:d4:2d:51:65:2d:dc:5f:d4:81:
3d:5a:47:e0:0b:06:3e:fd:78:9f:77:91:75:b3:24:
fd:9a:b8:c5:8d:fd:74:58:ad:e8:68:90:d0:a4:a2:
da:55:eb:ae:61:b9:17:0f:17:27:4f:d0:ab:d0:f0:
8b:ff:60:c4:33:64:02:37:a6:5f:d3:a0:e7:8f:c3:
f2:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:8D:1A:39:57:01:2D:7C:F1:E0:30:F1:AB:A8:A1:CB:12:26:27:F5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C9C9F7A4AB111F19AE61214CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.124.0/22
45.195.64.0/22
45.195.229.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:e1:f8:ac:38:f6:e2:30:fb:46:3c:2b:1a:d9:8f:bc:71:a1:
b1:1e:8b:1e:d1:e0:66:0b:a9:29:a7:d0:75:58:70:9d:d3:ce:
a9:4b:48:68:51:8d:d5:a7:3a:07:67:a1:71:78:86:35:6d:13:
0d:29:0c:6a:44:ab:a3:a2:24:56:a7:40:09:6c:db:2b:d8:6d:
9b:15:0c:5e:0a:bb:3c:a9:a2:e1:b4:bd:b7:c0:b1:c1:35:2c:
6d:0c:9d:f1:ac:5a:02:01:de:3e:8c:4f:29:2e:14:5d:e7:1b:
a8:73:f4:41:6e:85:63:31:e3:43:b7:9e:92:a0:01:4e:f5:c4:
3b:61:4e:47:fb:0d:56:25:25:ec:05:bb:40:4e:e6:9a:8d:db:
a9:d9:6f:9e:2b:cc:4b:36:5e:92:bc:9a:b4:6c:a0:16:24:e2:
2c:c8:dc:1d:73:21:0c:e6:50:2c:3e:34:c6:b1:53:0a:8e:e9:
c7:19:79:c1:e9:51:d4:79:85:8b:55:0c:2a:a5:c3:37:16:5c:
7f:73:00:88:a0:03:52:08:f8:c6:9a:3a:52:a9:d3:0b:41:05:
c1:06:96:75:9c:a3:22:59:50:54:05:a5:fc:eb:b1:1f:dc:c2:
80:ca:f9:18:08:59:a6:6b:c7:38:68:07:3f:53:17:eb:61:ed:
e4:15:f4:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:09:10 2026 by rpki-client