Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3CAE59B840B111F1BBEC60B3CE1D38B0.roa
File: 3CAE59B840B111F1BBEC60B3CE1D38B0.roa (raw, json)
Hash identifier: fje/E5UGZqpTPHINQQUIexdX21cdwV7r6FrkzK5PvcE=
Subject key identifier: 00:01:5B:08:E1:69:EC:66:F9:EB:11:E3:F9:5E:AD:BE:B7:3C:54:F1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AF45
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3CAE59B840B111F1BBEC60B3CE1D38B0.roa
Signing time: Sat 25 Apr 2026 14:15:40 +0000
ROA not before: Sat 25 Apr 2026 14:15:35 +0000
ROA not after: Sat 13 Jun 2026 14:15:35 +0000
asID: 20326
IP address blocks: 45.202.100.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 14 May 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110405 (0x1af45)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 25 14:15:35 2026 GMT
Not After : Jun 13 14:15:35 2026 GMT
Subject: CN=69eccc8c-6fd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c4:80:75:18:cd:fb:7c:d4:ce:52:c1:4f:d5:
f1:12:2f:31:ea:f4:46:75:52:43:59:29:fa:92:13:
1a:14:93:bb:17:2e:ff:98:8b:c3:ed:fa:1a:fb:d0:
34:d9:57:7a:74:02:3a:75:16:2b:19:f7:5b:ca:1a:
f0:64:9a:97:6e:4f:f4:1d:2a:b5:35:c5:1a:f5:ad:
01:34:17:39:53:44:51:a7:5d:86:e9:b3:c5:6d:f3:
cc:66:03:f6:10:fd:d0:0e:83:f2:e3:4b:c4:d2:76:
0e:27:58:21:6d:18:07:e8:b3:22:7b:e6:3b:20:a5:
dc:f9:81:c6:54:99:86:9d:04:22:b7:5a:6e:90:5a:
d4:01:37:d4:90:e0:c7:f6:d4:46:48:85:35:5b:08:
ed:54:b7:01:24:03:a7:3b:ad:93:3c:8e:77:54:33:
21:38:a5:84:8e:b3:00:51:53:84:77:b6:a9:22:50:
74:46:45:a4:9f:dd:5a:bc:cc:ee:3a:62:f8:88:67:
84:97:48:21:53:da:83:34:14:89:3c:7d:ad:2e:d2:
27:d1:25:a3:0d:d5:5f:83:77:2d:ae:cf:d6:9d:d4:
e0:74:f6:0d:ba:8b:5b:18:73:aa:94:71:6f:4f:a3:
6e:63:18:f9:78:c4:4e:82:f4:97:e3:65:f8:b8:fa:
77:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:01:5B:08:E1:69:EC:66:F9:EB:11:E3:F9:5E:AD:BE:B7:3C:54:F1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3CAE59B840B111F1BBEC60B3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.100.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:1a:b3:f6:6f:2f:0a:14:41:89:74:e8:08:2b:97:86:6d:69:
61:ff:e1:69:31:d9:d6:61:a5:06:76:03:b1:74:35:e6:6b:bb:
29:42:13:0e:f7:55:4a:07:98:85:5c:ad:87:ef:1d:72:21:d2:
b6:a7:ef:32:5b:bb:cc:21:1b:10:96:9b:2b:ec:73:44:b2:fb:
1c:83:92:37:07:e3:40:cd:fb:c2:cc:bc:35:95:17:04:da:a4:
39:d3:73:3a:4d:2e:ae:88:0c:0d:78:ca:15:91:84:01:cf:c7:
48:fd:6a:5c:c6:dd:4a:cb:a6:36:b2:ae:9f:17:ee:c7:54:99:
9f:8b:1e:d4:d4:a9:eb:43:0a:bb:4d:13:38:3f:01:75:83:2d:
40:44:72:51:47:1c:82:9d:0e:41:e6:e3:20:d2:41:ee:42:75:
7c:d3:ce:c9:33:e0:a4:d9:55:16:db:6a:f2:77:e3:fe:01:03:
18:ad:dc:14:c8:6f:92:af:39:6d:2d:8e:eb:18:e2:e9:00:78:
85:d1:e1:d2:9c:1e:f3:04:ee:ad:b0:38:b7:fe:d2:2a:9f:73:
22:95:e0:9a:b7:fe:1d:12:d2:7d:af:10:79:79:d0:b3:c7:c0:
8b:08:eb:d0:2d:fd:c5:ea:27:24:f1:87:4a:bb:27:73:a7:af:
eb:5a:9e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:32:13 2026 by rpki-client