Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B8380921F9B11F19D2D9696DAE4EC9C.roa
File: 6B8380921F9B11F19D2D9696DAE4EC9C.roa (raw, json)
Hash identifier: UM2NYHmFlpMH0jMej8dXpol1KucVrwMSTBqMrFqomw8=
Subject key identifier: 13:33:0F:54:21:21:5E:F6:88:04:5B:A6:73:B6:A3:AA:E2:C1:E9:2D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A522
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B8380921F9B11F19D2D9696DAE4EC9C.roa
Signing time: Sat 14 Mar 2026 11:46:21 +0000
ROA not before: Sat 14 Mar 2026 11:46:16 +0000
ROA not after: Tue 21 Apr 2026 11:46:16 +0000
asID: 273020
IP address blocks: 45.195.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107810 (0x1a522)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 14 11:46:16 2026 GMT
Not After : Apr 21 11:46:16 2026 GMT
Subject: CN=69b54a8d-06c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a2:0c:cc:5e:66:b8:7a:90:5a:07:85:6e:b4:
55:8d:6f:60:10:99:6e:6f:28:d3:04:59:b3:45:2e:
46:4b:e7:92:4a:53:3c:a2:13:1a:b9:c7:3d:73:c7:
c8:ee:2c:d5:ae:19:2a:bc:dd:f0:f4:ff:53:75:d9:
74:b2:cd:6c:89:3c:6e:76:35:62:cb:fb:a5:cd:bc:
71:fc:14:9b:e1:dc:27:b2:9a:dc:88:8b:76:ec:ee:
65:85:3d:7b:ff:82:ba:54:be:81:46:5c:6b:cc:16:
33:fa:11:da:ee:de:1e:65:93:2c:4a:73:b8:2f:86:
14:f6:99:81:d3:f9:07:90:59:d9:fe:30:6b:60:dd:
d4:35:c6:0d:95:6c:92:32:4b:47:71:b5:a8:d5:e8:
98:85:b2:f8:3e:54:d2:0f:dd:19:3c:4f:22:bb:ad:
ea:db:a1:9f:fe:5d:12:ff:3e:b8:b5:23:92:8b:de:
f3:09:f4:1c:ac:46:cb:ad:3c:3b:e6:86:11:c1:5d:
b2:0e:25:05:82:53:a4:af:6c:ac:1e:54:1f:91:d6:
47:99:d8:0c:9f:f9:2f:82:7e:d9:58:fb:fa:43:42:
00:96:13:c7:56:88:45:0a:8a:a8:c2:fc:0d:e0:56:
3c:f7:d3:ec:63:9f:c2:08:d2:b3:06:c5:fa:12:f1:
c7:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:33:0F:54:21:21:5E:F6:88:04:5B:A6:73:B6:A3:AA:E2:C1:E9:2D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6B8380921F9B11F19D2D9696DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.104.0/24
Signature Algorithm: sha256WithRSAEncryption
02:34:5a:75:c9:76:81:39:72:fb:64:0e:04:87:d9:fd:b2:df:
50:9f:3f:96:fc:5c:28:b7:1f:6a:6c:12:90:d3:b8:30:22:48:
e6:30:68:66:21:bf:41:8c:76:a3:89:3f:e0:76:b3:ad:52:ba:
e2:86:8b:ab:e9:d0:5d:6f:2b:61:dd:35:6b:75:b0:6f:f8:f6:
98:0a:65:50:ca:f3:07:eb:bf:6d:c3:bb:b0:e9:d7:30:13:ab:
43:88:e4:93:5b:6f:c0:e1:00:b9:73:71:02:53:57:ec:dc:e2:
b4:c6:d3:57:6c:e5:57:a4:e2:ca:49:c6:2c:d2:0f:f5:4c:97:
77:92:a0:69:da:d0:57:c7:56:03:2b:42:7c:a1:0d:46:2a:f9:
86:d4:7a:88:8e:3e:62:67:0c:e9:02:fa:ea:ea:2c:33:89:86:
c0:a7:5f:2a:6d:5a:c1:89:44:86:8a:e6:1f:31:c9:2f:df:c9:
44:7b:6d:f7:87:db:e3:4a:f1:e9:af:dc:7c:a9:89:9e:61:d2:
a3:c4:58:8a:c3:84:69:7e:48:b9:c2:58:86:d0:d1:55:6a:7a:
95:6b:31:8d:07:57:95:b1:cf:dc:fe:a2:e6:e6:c4:37:03:f2:
fe:dd:17:e8:5b:a4:ba:84:06:8b:5f:2b:d9:14:13:5a:43:ad:
91:1a:66:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:10:26 2026 by rpki-client