Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6D9AAA444D0A11F1B85D02DDCE1D38B0.roa
File: 6D9AAA444D0A11F1B85D02DDCE1D38B0.roa (raw, json)
Hash identifier: E8PqCVGoHo/N1mth7E8559yThpvGGbMmW/dW1rHN+9o=
Subject key identifier: 2F:BC:68:4E:FF:3E:81:BB:48:EF:C4:C4:90:E5:8A:5E:6E:67:0D:D8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B3B1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6D9AAA444D0A11F1B85D02DDCE1D38B0.roa
Signing time: Mon 11 May 2026 07:24:22 +0000
ROA not before: Mon 11 May 2026 07:24:16 +0000
ROA not after: Mon 18 May 2026 07:24:16 +0000
asID: 9294
IP address blocks: 45.197.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111537 (0x1b3b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 11 07:24:16 2026 GMT
Not After : May 18 07:24:16 2026 GMT
Subject: CN=6a018426-d709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a9:77:18:e1:d3:12:eb:6a:0e:45:cf:ab:b0:
49:eb:cb:20:00:ce:df:e3:e1:12:04:ce:06:c2:3e:
bb:b9:f5:ec:f5:39:31:99:5f:98:a8:05:07:29:bd:
56:5a:dd:d6:0d:ec:ff:ff:3c:4f:c6:f0:62:5c:3e:
7a:a9:48:53:0b:34:69:7b:9f:8b:07:9f:b8:67:93:
20:75:ac:03:57:b8:98:95:64:b5:99:0c:c6:aa:8f:
f8:ab:80:13:a7:f5:92:15:fc:24:9c:5c:b1:f3:43:
b2:9c:47:f2:00:f6:24:9e:88:7a:0e:6c:eb:6d:b2:
62:f5:81:e5:2f:ad:5a:0e:82:b0:26:f3:85:4a:4e:
c5:3c:1d:1b:77:31:0f:54:75:2e:f7:0d:17:32:45:
2c:ef:1e:3e:18:09:e2:f8:65:93:00:23:62:92:2c:
6c:75:16:fa:36:e0:48:41:97:2c:e3:0f:3b:94:83:
1a:c4:0e:89:b9:fe:80:50:0e:13:cd:6a:37:f2:5e:
bc:1d:76:4f:04:99:28:33:9c:ac:18:c3:39:95:f2:
77:58:cc:0f:5e:63:6e:20:ce:19:1f:a9:0f:76:45:
1e:ba:ea:2e:93:ba:2a:68:4e:42:6e:a7:b0:6f:a8:
66:bf:25:c4:16:04:b8:90:6a:02:a9:da:3e:8d:83:
fc:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:BC:68:4E:FF:3E:81:BB:48:EF:C4:C4:90:E5:8A:5E:6E:67:0D:D8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6D9AAA444D0A11F1B85D02DDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.32.0/19
Signature Algorithm: sha256WithRSAEncryption
9c:3d:69:e1:c8:d9:e6:3b:49:89:e9:f5:82:e0:92:97:29:48:
01:9e:74:eb:e4:ea:36:03:94:6b:83:44:b0:6c:5c:d1:1c:7e:
80:a6:8b:b0:80:55:21:23:2b:b5:62:ed:0b:3a:9b:0b:bd:38:
ed:49:85:90:10:cb:5a:96:82:94:99:c2:0c:d8:9c:43:72:42:
59:2e:46:27:39:fa:fa:95:a1:88:98:d0:48:fb:6c:c7:7a:cf:
72:22:87:28:7f:1a:8f:bb:5e:6b:9d:0d:cd:11:18:9f:4d:40:
46:d6:b0:d5:8a:23:81:f0:67:ad:d6:02:d3:9c:65:68:9e:fe:
3b:1a:05:ff:0c:f4:04:27:ca:b8:52:cf:58:2e:a1:94:75:36:
fd:98:39:60:3d:93:05:0d:81:37:b7:bd:8e:3f:a2:3f:02:bd:
76:2e:9d:dd:64:f2:5a:d1:a9:3c:c8:54:f0:d9:c5:3c:c5:83:
3a:9f:fc:ed:81:17:d6:8b:c5:f3:1b:e6:13:56:1a:36:7c:46:
57:d7:04:2a:68:40:e7:48:3e:31:ee:f3:0c:86:ee:80:1a:6f:
12:3e:5e:fa:8b:37:bd:86:e4:21:9d:09:3a:32:df:ee:69:56:
5c:61:b5:71:ec:82:5e:9d:5e:29:8f:29:0d:96:4f:dd:38:4e:
b9:4b:e1:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:21:12 2026 by rpki-client