Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/66B6B0D845A311F1A97AC2C6CE1D38B0.roa
File: 66B6B0D845A311F1A97AC2C6CE1D38B0.roa (raw, json)
Hash identifier: +Km2sUVFOT4cmkbhCLPb565St6uOPG0EMP0Yn4xxfh8=
Subject key identifier: 1D:6A:C2:8E:96:E0:C1:2B:03:4C:74:21:D2:44:3C:C0:2C:EB:78:70
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B0FC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/66B6B0D845A311F1A97AC2C6CE1D38B0.roa
Signing time: Fri 01 May 2026 21:19:13 +0000
ROA not before: Fri 01 May 2026 21:19:09 +0000
ROA not after: Wed 10 Jun 2026 21:19:09 +0000
asID: 215691
IP address blocks: 45.198.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110844 (0x1b0fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 1 21:19:09 2026 GMT
Not After : Jun 10 21:19:09 2026 GMT
Subject: CN=69f518d1-a7cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0b:04:c2:40:f6:2f:6c:17:6e:a0:6c:1e:b8:
e9:dc:3d:9e:de:4a:8d:b8:14:86:e3:6e:4a:c7:76:
cc:e9:37:66:b7:a7:6d:7b:44:5b:02:3a:cf:b3:d5:
a5:e6:fc:e8:08:3a:52:0c:e9:18:2c:c8:dc:8b:d0:
36:b6:f7:b1:6a:81:3b:ef:6c:07:b0:59:f0:f4:3f:
f4:de:75:0e:eb:e6:c4:2e:cf:f7:68:5f:b0:c2:af:
8d:46:8c:40:52:91:9c:b0:49:a8:cb:6a:39:5c:c9:
27:59:c1:16:fc:23:06:81:d7:87:c1:96:fc:f5:89:
9a:a1:c7:82:0b:9e:63:0c:da:b0:3b:aa:49:78:92:
1c:a8:ca:ca:60:50:60:c5:2c:5d:97:10:cc:f4:4f:
d8:0f:c9:80:e0:c6:f8:d4:ac:93:2c:ca:5a:2d:72:
72:93:ad:43:a1:c7:91:70:1e:02:42:b5:51:37:3a:
1e:03:d9:fc:7f:2c:33:24:fe:8a:13:b3:09:36:0c:
b6:e0:62:35:b5:32:94:3e:7a:66:50:a6:ce:36:f6:
b3:27:e4:0e:36:c2:69:23:15:87:43:e8:35:1f:2a:
23:ed:a4:e0:bd:78:99:ef:08:e3:5a:7f:e0:3e:f8:
c0:4b:48:c1:fb:95:e5:15:35:7c:26:35:48:ac:01:
0a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:6A:C2:8E:96:E0:C1:2B:03:4C:74:21:D2:44:3C:C0:2C:EB:78:70
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/66B6B0D845A311F1A97AC2C6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.55.0/24
Signature Algorithm: sha256WithRSAEncryption
49:fe:8e:77:c3:fd:b5:42:c0:e5:d6:1e:49:cd:c5:46:c4:5d:
77:fa:35:f4:39:db:2e:b1:69:7c:22:e3:84:bd:0c:dc:20:64:
30:ee:c6:f0:21:45:3b:5f:a2:10:f5:f7:79:61:d9:ca:c5:7b:
b5:b2:92:cf:20:82:4b:b7:b1:96:eb:dd:6a:3c:f4:a0:e5:27:
30:73:77:e9:fc:2d:0f:d4:9c:bc:43:d4:e2:11:4a:0d:16:6f:
b8:f3:6b:5a:5a:99:35:f0:cb:bc:3f:43:bb:a1:f3:e6:18:a5:
88:fa:c4:63:a1:c3:f4:25:c9:c2:98:d3:da:b5:4d:27:28:d9:
c6:a3:0f:fe:f0:ef:87:79:2c:44:85:8b:9a:c1:d2:74:24:85:
b2:e2:38:30:1a:3e:41:79:43:d8:67:41:b6:78:cf:80:19:9c:
88:5b:21:4a:fa:7b:d1:c5:e3:f9:23:6a:8b:06:21:ae:ec:8c:
fb:5a:1d:be:de:75:e2:62:c2:91:c8:45:ee:0a:e6:d6:da:24:
74:d2:25:80:62:01:0e:b6:a0:f6:9d:10:d3:cf:81:53:95:d4:
df:a8:19:c4:ae:59:d8:21:94:f1:11:e0:be:78:68:b6:3f:71:
e7:5f:3f:46:a9:be:68:68:d0:bf:bf:0b:68:a8:28:eb:69:f2:
9e:3b:f0:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:18:36 2026 by rpki-client