Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/745C2A5E4B7C11F19B5952E9CE1D38B0.roa
File: 745C2A5E4B7C11F19B5952E9CE1D38B0.roa (raw, json)
Hash identifier: PPsm6rTxn0RA3/L0GNe9zg/9ySHCTIZb1dfl6GT3WSM=
Subject key identifier: C7:F7:9A:6C:91:F9:E1:03:C5:0F:01:2B:48:C1:53:6A:F9:88:AC:62
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B300
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/745C2A5E4B7C11F19B5952E9CE1D38B0.roa
Signing time: Sat 09 May 2026 07:55:33 +0000
ROA not before: Sat 09 May 2026 07:55:27 +0000
ROA not after: Fri 29 May 2026 07:55:27 +0000
asID: 273034
IP address blocks: 45.195.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111360 (0x1b300)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 9 07:55:27 2026 GMT
Not After : May 29 07:55:27 2026 GMT
Subject: CN=69fee875-40f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ad:38:b4:00:5f:0a:f1:8c:d3:7a:6d:14:84:
4a:31:45:30:0c:6d:aa:6c:2d:66:40:71:cc:10:28:
97:be:f7:91:95:92:2e:0c:51:0e:08:23:66:61:9f:
7f:04:5d:2b:42:b0:88:bd:24:84:b4:1c:e1:9a:95:
45:74:51:48:cb:35:ba:a5:ac:de:cf:cb:00:61:4b:
6f:1c:96:c7:6b:e6:37:de:7e:70:64:4f:f6:7e:b2:
16:54:e5:6c:89:2f:18:d1:08:8b:16:41:2b:99:a5:
e3:46:c9:b3:1f:3e:22:81:65:63:d7:53:a3:9f:13:
22:7a:31:d9:40:78:ec:75:f3:d2:f9:c7:35:c8:1c:
3a:09:79:11:69:ab:29:8b:c6:e8:69:17:54:43:09:
45:f3:24:ec:86:5d:d9:ef:ca:53:2a:31:9b:a8:eb:
f9:62:e0:cf:cf:36:fd:c0:66:12:09:60:ed:5d:64:
56:7c:a7:b3:02:14:a1:23:bd:b9:fa:cd:a5:62:c7:
f6:2e:11:26:37:f1:54:b8:11:67:5e:45:57:e7:bc:
f1:84:e6:e6:8a:1e:b5:0f:dd:06:74:aa:fc:ac:3b:
e4:80:f2:8d:9d:8c:92:a8:37:7c:73:f8:69:c5:d1:
bb:10:1c:b3:18:93:af:28:d2:4b:b1:aa:c9:d0:be:
0c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:F7:9A:6C:91:F9:E1:03:C5:0F:01:2B:48:C1:53:6A:F9:88:AC:62
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/745C2A5E4B7C11F19B5952E9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.201.0/24
Signature Algorithm: sha256WithRSAEncryption
25:22:80:cd:db:02:30:74:3a:0e:0a:94:ac:fe:3d:bc:e8:4b:
f3:18:38:1a:ef:6f:bc:2b:53:7f:af:c0:57:ef:45:b0:cf:ba:
f8:52:f8:94:fd:a8:e1:c1:ba:e7:14:08:fc:61:71:08:ae:20:
3c:98:96:5f:42:5d:2f:56:da:ca:75:e2:8b:6d:d1:5a:01:c9:
de:71:83:40:fc:40:32:df:23:b7:36:33:2b:13:2a:24:e9:a0:
c3:cc:6a:6f:b2:5a:39:63:a2:37:c2:af:55:ec:19:da:81:d1:
bc:c6:26:4c:bf:02:91:48:a4:28:35:7f:a7:9b:f9:0b:5a:b0:
d0:94:a5:d2:e2:6e:fa:39:88:49:cf:b0:01:61:af:75:ec:26:
56:00:e6:df:0f:1a:93:34:b7:ab:d5:93:5a:98:19:12:c9:8e:
ff:9c:29:64:07:76:7e:33:18:95:1f:52:c7:c3:0a:ed:d0:c6:
c8:34:06:c4:bd:35:63:f9:85:36:20:b0:c7:76:94:b2:5c:81:
bd:81:27:d9:2c:12:31:d9:5e:e7:39:10:09:84:ee:eb:00:82:
4e:24:59:cf:40:13:ea:9f:96:d4:cc:e0:ac:ff:12:2e:c5:be:
0d:ad:bb:ae:20:88:71:ad:b5:49:96:03:2d:1c:3e:58:c7:c5:
d3:44:cf:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:34:39 2026 by rpki-client