Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3F4342F84DFC11F1816FF611CF1D38B0.roa
File: 3F4342F84DFC11F1816FF611CF1D38B0.roa (raw, json)
Hash identifier: IRfvUtsEmIb0mNuBmhYc/8Je5sM5D+vGeVyscL99ez0=
Subject key identifier: 2C:0E:13:A9:9F:B6:DA:57:02:A7:68:20:44:7F:2F:21:F3:E3:F9:6F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B3FB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3F4342F84DFC11F1816FF611CF1D38B0.roa
Signing time: Tue 12 May 2026 12:15:22 +0000
ROA not before: Tue 12 May 2026 12:15:17 +0000
ROA not after: Tue 20 Jun 2028 12:15:17 +0000
asID: 10753
IP address blocks: 45.199.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111611 (0x1b3fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 12 12:15:17 2026 GMT
Not After : Jun 20 12:15:17 2028 GMT
Subject: CN=6a0319da-0ec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3d:c1:6f:0d:22:33:63:d6:1e:e7:c5:4f:44:
71:4c:64:fb:16:08:ed:97:2f:7e:2c:84:8c:1b:fc:
db:ee:4f:f7:a1:0e:4c:7b:43:59:98:51:22:17:bb:
cb:92:16:a4:17:f7:fe:a2:47:55:3e:b9:b4:15:a1:
ad:3c:35:81:69:7f:7b:57:e7:50:5e:4c:e7:80:c4:
f1:23:95:cf:ef:41:59:80:b1:3d:c3:ae:26:9e:6d:
b2:8a:ad:93:e8:f8:f0:64:15:54:de:a4:be:6b:6c:
f6:fb:56:a5:75:37:61:09:6b:74:1d:88:b8:74:e0:
8b:00:c3:25:d0:ea:c1:8e:c2:4d:64:07:a7:c7:b0:
f8:f5:8f:81:2a:9c:b0:34:26:e5:b8:48:c3:ed:db:
77:3e:d5:9d:d4:e5:7f:af:a7:24:af:0c:72:65:41:
89:5c:bf:61:01:6d:90:e4:c3:35:bd:19:6c:22:a9:
ff:3f:2f:da:74:55:af:96:54:41:62:80:32:8a:66:
1c:b3:52:45:b7:20:1b:9b:57:45:15:96:1b:c7:75:
1f:25:1f:a0:49:c5:78:21:ed:9f:3c:34:74:19:32:
e2:99:e1:a0:b0:7b:ce:b5:2a:db:77:0c:47:98:40:
4a:23:a4:fc:60:4b:3b:1e:85:2e:9f:bc:c4:ec:c7:
cb:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:0E:13:A9:9F:B6:DA:57:02:A7:68:20:44:7F:2F:21:F3:E3:F9:6F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3F4342F84DFC11F1816FF611CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.178.0/24
Signature Algorithm: sha256WithRSAEncryption
99:4a:02:7c:4e:e7:c8:2f:ec:9a:d9:b7:a5:15:85:8d:01:f1:
a4:72:7d:a9:15:07:a2:25:75:57:c6:d7:6e:5c:72:54:82:57:
8d:c0:7d:2c:f4:f2:d0:f6:ff:12:22:f0:98:30:b1:ff:e7:61:
9c:9b:16:ca:bd:4f:bf:9b:a1:82:6d:e4:e0:d7:de:d6:1a:d2:
8a:d6:f1:e6:3e:ea:a7:a1:fe:dc:19:eb:7e:8e:27:ad:aa:63:
c7:6b:f0:01:5d:83:23:3a:9d:8d:58:7f:10:de:28:27:91:82:
ad:6b:eb:58:18:6f:65:51:a9:51:a8:66:0d:e0:e8:04:4a:35:
58:24:76:e9:ba:b1:8c:7c:04:ed:18:55:5d:60:21:b2:be:a9:
a5:19:13:51:3a:80:5b:ca:67:18:21:f1:4c:7f:60:4a:09:b4:
54:bc:04:7a:f2:13:5c:f4:bf:89:8f:b9:b2:c7:f3:60:4e:00:
49:be:78:6f:83:b6:46:eb:bb:aa:8f:1b:d6:5e:03:ca:bb:ec:
5f:69:9b:03:59:c4:61:87:03:0a:a8:e6:c5:e3:90:20:1b:ef:
59:8e:8d:d7:8a:2c:99:f3:e8:a6:6b:c7:2e:fc:c5:72:db:50:
80:2e:88:ab:10:a3:bc:21:b0:b5:71:c9:47:87:e6:03:55:b2:
90:2a:b4:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:47:28 2026 by rpki-client