Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/84DFBAF0454911F1922EB2ADCE1D38B0.roa
File: 84DFBAF0454911F1922EB2ADCE1D38B0.roa (raw, json)
Hash identifier: NbsH491erLVkLVbr+ushMlum+FoS2SywxVU4UE0DlfE=
Subject key identifier: A3:FC:BE:9C:52:9D:D5:F7:DF:B0:C0:03:9E:55:1C:95:06:42:C2:03
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B061
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/84DFBAF0454911F1922EB2ADCE1D38B0.roa
Signing time: Fri 01 May 2026 10:35:49 +0000
ROA not before: Fri 01 May 2026 10:35:45 +0000
ROA not after: Mon 28 Sep 2026 10:35:45 +0000
asID: 267694
IP address blocks: 45.192.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110689 (0x1b061)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 1 10:35:45 2026 GMT
Not After : Sep 28 10:35:45 2026 GMT
Subject: CN=69f48205-265f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:56:d9:70:92:a7:08:d4:54:b9:33:3e:4c:37:
e5:99:51:6b:7d:40:81:11:fc:f5:a9:1d:7f:54:ff:
27:26:20:2d:39:a6:f1:03:39:86:60:7b:4f:0e:be:
87:0c:4e:89:8a:85:4d:3e:44:c1:24:8a:34:a0:4a:
38:82:13:07:9e:8b:eb:05:f5:02:46:bf:f4:55:e8:
54:6f:84:a2:22:10:50:18:59:cf:42:ec:bd:f1:ac:
22:e8:a9:33:ea:23:4c:fa:2f:9b:16:2c:37:6c:0c:
04:f4:94:f8:9f:ef:18:65:ce:32:9c:5d:47:5b:0b:
bf:f9:a7:5e:4f:75:38:67:80:af:0d:b1:bd:2f:e9:
91:29:f6:04:ac:9f:be:cc:7d:82:5f:e8:35:e4:88:
4b:49:9e:b0:cf:16:aa:a2:ae:61:9a:f3:f9:b0:97:
01:3b:ef:28:6e:e7:06:5c:76:f7:bc:19:99:ee:c5:
4a:a1:18:7b:00:f9:44:1e:02:02:24:2c:9b:e4:17:
eb:fa:d4:5a:70:94:d9:a7:22:81:9a:5d:f4:63:37:
aa:e5:64:c1:d9:97:cc:f0:97:87:0d:c6:ab:f4:bf:
37:79:d7:82:79:6b:3b:fe:5b:f6:4a:88:53:e5:3c:
8a:50:e8:d9:57:6c:5e:fd:9d:62:78:60:5e:d1:85:
e7:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:FC:BE:9C:52:9D:D5:F7:DF:B0:C0:03:9E:55:1C:95:06:42:C2:03
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/84DFBAF0454911F1922EB2ADCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.251.0/24
Signature Algorithm: sha256WithRSAEncryption
60:35:a7:05:db:c6:ef:ba:ee:89:d3:95:42:40:0d:8a:fd:bc:
03:7e:ac:37:9d:31:c9:1d:79:e3:da:6c:96:2e:ca:9e:c0:87:
86:3d:29:83:ea:02:6f:1c:0c:90:e0:b3:55:54:db:85:3a:a2:
93:66:0c:e6:22:66:79:1c:be:6e:1e:8b:26:66:05:0e:1d:c0:
8e:51:e7:ce:3a:16:0b:35:6a:44:c7:7c:99:fc:a2:d3:55:1b:
87:8d:8b:3c:6f:a2:ef:f2:a2:43:55:74:95:e2:bd:cd:a7:48:
48:66:72:fc:86:bf:b4:79:8e:74:19:d8:e6:1c:12:99:03:b7:
98:d5:9b:9e:01:e8:82:de:ab:56:56:9a:94:25:25:ea:bb:e2:
4d:3f:13:60:60:04:07:01:eb:9c:86:b0:82:ee:eb:5b:af:ef:
aa:05:4e:a4:10:5e:64:6c:21:58:d1:22:27:a6:f9:46:4e:6d:
92:7d:22:3e:d5:9d:8f:1b:90:77:5f:fb:c0:2d:35:fb:17:48:
d7:d1:06:a7:07:3b:64:7e:da:35:77:49:e6:d5:76:32:aa:30:
0a:ac:fe:59:00:04:99:c0:ca:5c:31:85:46:f9:3d:29:40:77:
a0:d6:bc:e5:fb:0a:0f:cf:2e:32:db:6d:70:35:0e:c7:a6:73:
dc:3e:48:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:46:40 2026 by rpki-client