Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7141D6F4414311F1A95419B9CE1D38B0.roa
File: 7141D6F4414311F1A95419B9CE1D38B0.roa (raw, json)
Hash identifier: CZF3G5z0XR+tBCs8Wfd/7C6kEIvODTAKvKklOuaTGFk=
Subject key identifier: 1D:B6:DB:29:90:6C:C7:F4:84:93:15:71:5A:5D:BD:92:88:3A:BE:04
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AF53
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7141D6F4414311F1A95419B9CE1D38B0.roa
Signing time: Sun 26 Apr 2026 07:42:15 +0000
ROA not before: Sun 26 Apr 2026 07:42:10 +0000
ROA not after: Mon 01 Jun 2026 07:42:10 +0000
asID: 17561
IP address blocks: 45.198.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110419 (0x1af53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 26 07:42:10 2026 GMT
Not After : Jun 1 07:42:10 2026 GMT
Subject: CN=69edc1d7-8a63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:cd:1d:6d:5d:00:d8:60:86:7a:77:d9:75:47:
96:85:84:53:a2:56:f4:83:1e:97:d1:6a:41:ca:8f:
4d:1a:89:14:48:d2:00:6c:e3:8e:d2:9c:ad:c4:f7:
f1:23:85:f7:3c:62:32:2d:50:38:fc:72:88:c9:b2:
ca:e5:a1:94:6a:8c:90:b1:ef:0b:8b:5e:b1:a3:f8:
43:62:be:3b:df:07:31:d4:af:33:fc:55:9f:8b:05:
b3:dc:78:f9:60:39:0e:68:b4:86:a1:19:1a:e3:b5:
48:85:19:a6:62:b0:0f:44:31:96:41:a9:86:c7:7b:
16:21:97:98:ad:92:59:4f:a2:01:4f:49:c4:c5:4d:
27:cc:11:90:c9:a6:1e:45:2b:58:0f:da:79:1e:d0:
9c:db:e6:32:30:0c:fe:4b:47:b1:90:27:9b:32:09:
31:40:e6:cc:37:b2:82:26:b1:bc:fe:da:fb:08:ec:
b0:56:47:6a:cb:41:e6:01:50:f9:94:fd:49:41:cd:
d7:bf:db:d0:3d:a4:d6:0c:2c:5f:98:00:f4:c4:93:
eb:2b:b0:c8:5b:50:d4:3c:1a:63:cb:65:45:c8:38:
24:3d:84:36:c4:96:46:9b:23:f7:71:c9:5c:8f:58:
9c:77:8d:39:54:64:f4:a8:29:d3:a0:7e:9f:0b:57:
f5:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:B6:DB:29:90:6C:C7:F4:84:93:15:71:5A:5D:BD:92:88:3A:BE:04
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7141D6F4414311F1A95419B9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.62.0/24
Signature Algorithm: sha256WithRSAEncryption
15:0c:14:07:b6:c1:7d:92:52:33:5c:04:1f:38:65:28:18:16:
71:ab:c0:60:7c:c8:a0:60:f1:68:82:ce:76:d5:7d:15:94:da:
37:db:3e:a8:3a:42:f1:20:0a:5e:53:a3:64:8c:43:b8:dd:c9:
1c:04:15:f0:3f:49:bf:0c:3c:10:31:9b:ec:88:4c:26:19:b7:
13:64:0d:1e:5f:ab:ca:1e:1c:5b:3e:87:c4:3d:d6:00:7e:ea:
87:d5:e0:72:49:7d:80:2a:c2:14:ff:03:08:52:11:fe:5f:27:
5a:7c:c9:cd:1d:6a:3e:bc:4b:25:93:a1:c4:fc:b6:bd:f9:c3:
af:ea:65:6b:c4:77:80:d1:f5:1b:a7:96:4e:c6:13:fb:fe:1f:
0a:de:02:ce:a6:f7:48:79:0f:19:73:ff:dc:f1:85:21:2f:5d:
6d:6d:f7:bf:9e:bd:1b:75:ee:55:48:f6:b7:71:3b:ae:7c:8d:
8c:97:37:e5:e2:a0:95:88:0f:ef:03:8e:24:69:f0:82:1b:5b:
69:d6:6b:d0:38:ca:2a:fe:80:53:c2:d5:a1:08:9d:33:cc:13:
95:eb:27:a6:e2:56:84:3b:84:92:11:89:1d:28:01:40:82:5d:
c6:25:a4:fb:40:f9:f8:57:cd:4a:df:7c:c6:72:71:89:03:40:
c6:84:55:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:03:57 2026 by rpki-client