Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/605E650E479D11F19B3BFCD9CE1D38B0.roa
File: 605E650E479D11F19B3BFCD9CE1D38B0.roa (raw, json)
Hash identifier: AUaRQu9ZXVCgMleXn/H90zBSoL6icuOcpyMw1KflfBI=
Subject key identifier: 60:F3:E6:42:63:AF:C6:BC:1E:2B:7B:5B:02:70:29:E3:C4:44:BE:58
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B16B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/605E650E479D11F19B3BFCD9CE1D38B0.roa
Signing time: Mon 04 May 2026 09:41:08 +0000
ROA not before: Mon 04 May 2026 09:41:03 +0000
ROA not after: Tue 11 May 2027 09:41:03 +0000
asID: 133929
IP address blocks: 45.200.104.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110955 (0x1b16b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 4 09:41:03 2026 GMT
Not After : May 11 09:41:03 2027 GMT
Subject: CN=69f869b4-ea4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:68:69:a7:f3:de:04:29:a7:54:22:dc:ab:49:
3e:67:50:6a:01:5c:20:f0:05:96:12:ad:aa:59:39:
08:23:e2:16:bd:6d:7c:f0:29:df:f5:ff:4d:92:c9:
fc:f5:d2:0a:22:bd:d3:1f:f5:64:e9:85:8b:f0:7b:
cb:ca:f7:d1:1d:28:22:d7:b5:87:8b:7f:b7:fb:e3:
83:cf:6a:ce:dd:ed:c0:c7:db:1d:e4:b7:38:f7:3f:
2f:9e:fa:5a:6e:b3:bd:60:ab:34:ce:a2:5e:9e:47:
55:8c:15:10:c4:82:3c:17:23:2a:52:88:04:4a:48:
5e:30:05:15:13:65:58:9e:c8:ed:d5:8f:da:f6:77:
93:5e:15:9a:59:a9:ad:48:01:22:71:17:a6:cc:f4:
94:a3:1a:6d:66:4c:6b:3a:36:06:9e:de:3c:14:47:
2e:e9:f5:ea:b8:92:85:80:ca:35:fc:03:d7:05:46:
f3:d6:1e:4a:2b:35:66:03:ca:bb:04:f0:f9:f7:23:
12:b7:45:fa:2d:f4:5e:48:19:f3:9e:02:96:80:2b:
08:f4:cf:80:05:01:04:22:8a:7d:ba:f3:89:1d:f6:
36:0e:97:5e:ab:9d:47:93:10:5e:32:c2:c5:57:fe:
55:c5:df:bb:25:3c:5c:2a:25:cb:e1:47:ea:73:50:
ec:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:F3:E6:42:63:AF:C6:BC:1E:2B:7B:5B:02:70:29:E3:C4:44:BE:58
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/605E650E479D11F19B3BFCD9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.104.0/22
Signature Algorithm: sha256WithRSAEncryption
38:67:92:14:be:02:e2:84:cb:a0:94:b0:79:66:06:e3:8e:fa:
bd:5d:6e:3f:a5:2f:28:3f:fe:08:3c:fe:e5:c5:32:d8:b4:c0:
34:84:87:9b:c7:b3:6f:28:dc:e5:8d:3e:f6:52:68:91:3b:0a:
aa:99:11:d7:65:83:cf:87:1c:76:1b:66:4d:29:94:b6:de:84:
c0:66:4c:13:30:94:c0:a8:d0:7b:4c:c5:3c:58:26:7a:de:87:
5d:04:17:9e:dc:3d:d2:a9:2c:48:76:37:93:a2:fc:fb:46:8b:
21:9f:31:db:77:6f:7b:84:63:25:50:02:ec:06:34:14:00:e3:
09:e7:89:66:4b:16:79:8f:23:8d:40:98:49:10:f5:be:54:48:
51:67:a1:9f:04:2c:f3:32:94:e4:26:ab:51:1b:c2:0a:88:dc:
b8:1a:a3:a9:c4:92:d3:ea:62:54:23:00:95:82:1d:05:5a:30:
1a:8d:34:d7:df:70:16:d5:ba:46:20:b0:91:5e:9c:3d:8f:45:
e8:b0:74:c9:fe:ec:66:7f:af:77:42:4f:69:fd:c7:c2:4a:82:
19:b7:43:30:69:5e:dc:d3:4a:b7:02:2b:08:a2:60:20:f2:15:
66:80:2c:91:f6:a5:9f:b8:66:22:73:58:a6:c5:0b:6c:ec:07:
ec:0d:bd:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:36:14 2026 by rpki-client