Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/840D995440B111F1A7D03FB5CE1D38B0.roa
File: 840D995440B111F1A7D03FB5CE1D38B0.roa (raw, json)
Hash identifier: B/xmfiubiaMm36Gt4WxsD5QssYLnB4jg3VW3Ud7qnPE=
Subject key identifier: 88:A2:A4:B0:5A:89:E0:3A:BD:3E:27:54:39:87:5F:55:03:8D:67:F5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AF47
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/840D995440B111F1A7D03FB5CE1D38B0.roa
Signing time: Sat 25 Apr 2026 14:17:40 +0000
ROA not before: Sat 25 Apr 2026 14:17:35 +0000
ROA not after: Fri 12 Jun 2026 14:17:35 +0000
asID: 20326
IP address blocks: 45.206.20.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 14 May 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110407 (0x1af47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 25 14:17:35 2026 GMT
Not After : Jun 12 14:17:35 2026 GMT
Subject: CN=69eccd04-e742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fa:e8:30:0a:54:a8:84:a8:4d:50:87:eb:69:
08:83:7c:d9:86:1c:45:4e:c8:db:c4:24:17:a6:c7:
59:0d:15:d7:77:e2:7e:44:a1:a2:2c:6f:dc:e5:f8:
24:d6:83:f8:62:21:c2:0e:b8:fd:cc:58:21:8b:c2:
04:1f:cb:c2:07:c3:ab:51:66:bb:2f:7d:04:97:de:
dc:72:1e:47:a1:cc:95:40:9c:1e:6f:50:a0:43:54:
24:e3:4a:05:6e:6c:21:a3:55:62:2a:19:f3:db:47:
3a:00:ab:cd:e4:d8:a7:91:93:0e:21:39:42:eb:8d:
0f:73:71:f9:d7:74:31:a5:82:e1:03:44:4d:0c:38:
1a:80:f6:bc:27:6f:c3:3f:c2:29:67:b8:00:94:45:
6b:a1:35:fb:f8:d2:04:96:b0:af:b2:2a:6b:60:03:
49:d6:cb:11:7e:92:cc:9f:9a:12:25:b3:d7:39:05:
fb:ca:93:5b:91:31:da:00:9c:e3:d3:1e:60:95:4c:
5e:80:eb:07:1f:ae:1a:7a:3e:ec:6c:d1:f3:07:ab:
40:9d:b1:28:56:41:1a:24:52:aa:05:c6:7e:7f:41:
2f:bc:33:da:05:66:a1:e5:d9:84:d5:13:9a:c3:55:
46:06:19:09:74:3c:c8:58:dd:37:e7:83:10:73:b6:
4b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:A2:A4:B0:5A:89:E0:3A:BD:3E:27:54:39:87:5F:55:03:8D:67:F5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/840D995440B111F1A7D03FB5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.20.0/22
Signature Algorithm: sha256WithRSAEncryption
86:f8:47:80:15:e1:31:7f:b1:64:7c:ec:b4:4a:1e:77:49:a1:
c8:61:f5:b0:54:60:24:56:22:02:68:05:da:58:27:22:ec:50:
e0:8a:63:ae:d7:a7:c0:5a:27:07:9b:79:9d:5c:4e:63:11:dd:
c6:ed:8d:53:00:77:12:4c:52:a5:77:89:2f:df:ba:9d:07:3f:
a7:3f:83:8d:c3:69:32:51:55:c9:50:55:8b:94:e2:e5:65:34:
4b:0b:b9:df:24:2a:e0:7a:73:4a:e0:ad:b4:fb:b4:ae:ef:3d:
2e:ff:ef:77:a5:1e:5c:df:c9:0c:2e:61:8b:dc:24:91:9d:bd:
db:04:24:0e:42:ad:d3:b7:3d:ca:d7:da:7f:14:47:76:c9:c3:
29:c4:8c:7f:d3:de:6a:d0:e9:46:6f:62:e1:b5:ee:b3:26:8d:
a4:29:3f:6a:2e:89:cd:a4:55:98:09:40:02:61:82:9f:da:ba:
5e:73:de:61:21:1a:00:26:c3:db:89:c6:5c:f9:d8:51:2a:d5:
6e:cf:27:45:42:d6:72:46:05:c1:61:94:d4:91:14:e8:e4:87:
fc:c2:40:a7:21:82:7d:3b:b5:cd:35:9f:7b:86:aa:bc:c8:4b:
6d:17:80:64:88:b1:a8:21:d1:d9:27:4c:08:de:a5:25:a8:db:
d9:51:31:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:32:15 2026 by rpki-client