Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4063B1F04B8A11F1A9130BBCCE1D38B0.roa
File: 4063B1F04B8A11F1A9130BBCCE1D38B0.roa (raw, json)
Hash identifier: 0E2rzdVc004vWw7KetLU4EMYjqsLUTBgpqhNRpDTu2I=
Subject key identifier: CD:84:0A:E8:FA:36:94:90:7E:83:D7:A0:D7:62:44:00:00:0A:20:74
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B314
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4063B1F04B8A11F1A9130BBCCE1D38B0.roa
Signing time: Sat 09 May 2026 09:34:19 +0000
ROA not before: Sat 09 May 2026 09:34:14 +0000
ROA not after: Sat 04 Jul 2026 09:34:14 +0000
asID: 21859
IP address blocks: 45.197.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111380 (0x1b314)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 9 09:34:14 2026 GMT
Not After : Jul 4 09:34:14 2026 GMT
Subject: CN=69feff9a-8466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9a:e5:01:91:cb:99:ee:8b:1e:f3:77:ae:de:
2b:f2:8b:3f:04:6d:45:32:d3:59:0f:ef:8f:91:3b:
ae:03:9b:29:18:38:fc:71:68:3f:1f:e5:e7:91:8e:
61:1e:0e:e4:0d:32:d1:2d:cc:a7:7c:f5:0a:40:c7:
56:42:86:b8:f5:98:68:19:ca:6b:04:5a:14:61:0c:
97:6d:cb:92:cd:74:dd:3b:64:41:8c:82:99:0b:3a:
7f:36:2b:70:43:4c:c6:08:56:28:be:76:e2:52:d1:
b8:8d:c6:c3:cf:82:39:68:f4:fb:b9:e7:a3:e1:80:
01:38:f7:a4:f2:28:1b:b0:77:95:ce:e3:9f:82:5a:
8f:c9:e1:1e:90:7d:33:40:c7:48:29:4c:52:ef:62:
3a:50:dd:b9:a7:6e:96:3a:0e:a2:65:f6:61:3e:67:
01:dd:ec:91:ac:d7:09:2e:4c:9d:f9:d1:17:5c:42:
6b:5a:34:3a:a0:d6:8f:8f:aa:29:35:0f:c7:26:61:
dc:92:06:2f:b5:86:f3:84:70:68:2b:4f:38:95:27:
f8:9f:07:4d:a5:8e:a7:37:60:a4:64:06:ca:94:ac:
b3:71:72:88:75:37:2b:29:19:50:46:54:6d:2e:cc:
8c:94:51:52:1a:a4:03:2f:5b:78:94:cb:ab:c3:b1:
05:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:84:0A:E8:FA:36:94:90:7E:83:D7:A0:D7:62:44:00:00:0A:20:74
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4063B1F04B8A11F1A9130BBCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.9.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:da:df:4f:b5:0a:a3:b2:81:8f:b4:23:c7:46:09:ed:e3:87:
ad:bb:6f:3a:cc:79:f3:da:26:72:ab:d0:ed:4e:f2:7f:36:e0:
40:74:9f:18:71:69:9e:03:a0:5b:f4:01:3e:e8:11:70:61:42:
19:76:7a:c3:c9:d8:e0:ad:32:a1:da:6a:cb:79:7e:ef:56:5c:
8f:4f:24:54:99:48:f1:4a:ea:3c:99:3f:e2:39:79:1d:60:4a:
7f:5b:c2:a9:16:8f:b9:e5:ae:ba:df:86:dc:f1:1b:64:41:6b:
ba:fc:a1:4e:5a:1b:95:19:ad:77:cd:d4:9a:a3:01:98:ab:60:
4e:9c:bb:18:65:9b:c6:2d:40:2f:3b:fc:d6:c7:a0:8e:2a:4e:
ec:97:12:84:4a:0a:70:87:e0:5d:ee:eb:49:db:1b:dd:87:a1:
cc:b1:23:89:29:1f:9f:fe:1b:b6:b6:3d:f6:23:e6:18:5e:c6:
67:d9:7f:98:ae:3d:a3:be:49:36:08:75:66:83:1c:9c:8e:f3:
ed:a2:b8:b7:f6:74:ce:24:1e:f8:cf:49:82:79:7d:af:48:92:
de:c9:7a:2c:e6:9b:aa:85:a7:05:42:ac:4d:d5:f9:47:8a:ce:
f1:ce:36:53:e9:d9:da:93:3a:b7:89:30:ea:5b:66:49:b6:7d:
4f:75:91:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:57:57 2026 by rpki-client