Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/89BFC2C2455811F1B7811308CF1D38B0.roa
File: 89BFC2C2455811F1B7811308CF1D38B0.roa (raw, json)
Hash identifier: w2kouoO7kHvAarje1pitTyDtrFz7rnWYDVIAWj5crDo=
Subject key identifier: C3:0D:67:3D:16:D0:CB:40:AF:EB:77:6E:B7:01:42:D0:16:38:72:19
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B096
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/89BFC2C2455811F1B7811308CF1D38B0.roa
Signing time: Fri 01 May 2026 12:23:20 +0000
ROA not before: Fri 01 May 2026 12:23:15 +0000
ROA not after: Sat 06 Jun 2026 12:23:15 +0000
asID: 202505
IP address blocks: 45.199.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110742 (0x1b096)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 1 12:23:15 2026 GMT
Not After : Jun 6 12:23:15 2026 GMT
Subject: CN=69f49b38-9a8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c2:6f:1b:52:e0:fe:8f:27:6f:87:8c:f5:d7:
81:13:95:52:70:78:b9:7c:60:de:e9:f8:b6:12:4f:
5f:52:7c:10:da:fa:22:26:ff:86:c5:a7:ef:c8:6a:
5a:ca:fa:7e:08:3c:a1:b5:88:b3:f2:72:04:dc:f7:
4e:da:b3:9c:70:c0:f1:3f:e3:20:01:67:19:0f:c0:
d2:7e:d3:c0:ac:fc:3b:65:85:5c:96:c3:b3:6a:80:
81:c1:c3:3e:b3:d4:a5:2f:bf:ce:8d:d1:d6:4b:0c:
b0:40:1e:f8:6e:82:bc:a7:cb:e7:83:30:12:5d:34:
87:bf:d4:31:3e:d5:dd:e3:11:fb:52:9a:6e:12:6c:
75:10:4a:93:ff:fb:5f:9f:de:81:53:ac:7a:64:52:
fb:00:0e:a7:7d:4c:f0:01:63:0e:66:c4:90:5f:15:
46:07:5f:7c:5d:8f:9c:64:27:c8:3d:df:d4:fb:fe:
88:bb:13:8f:72:91:94:2b:92:1c:2d:8c:d2:a6:ef:
fa:3e:fc:c3:19:1f:0e:7f:0a:64:d6:db:85:74:86:
87:43:ec:f4:b2:f1:4c:8f:c2:54:35:1b:e3:31:fa:
e2:27:92:92:d9:f7:dd:a0:e0:bd:e4:1d:26:2f:a5:
61:ba:de:b4:29:1a:b6:aa:3c:65:1a:ca:0a:25:7d:
18:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:0D:67:3D:16:D0:CB:40:AF:EB:77:6E:B7:01:42:D0:16:38:72:19
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/89BFC2C2455811F1B7811308CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.190.0/24
Signature Algorithm: sha256WithRSAEncryption
78:73:05:d6:d2:f1:31:c4:ad:6a:31:a8:c0:d2:cf:66:1c:ab:
03:a7:da:d9:2e:08:89:ad:f3:2d:0c:a0:d0:17:62:fd:8a:73:
2e:c0:d7:ba:7c:66:3c:2f:98:5e:dd:bb:bb:6c:55:0d:f3:97:
49:c9:13:50:23:32:65:81:72:2c:8a:0d:42:20:ac:30:e6:ee:
e9:b8:fd:1d:cb:a7:fa:70:66:eb:1e:dd:0c:37:32:76:46:82:
3b:c1:a5:34:8b:1a:a9:ee:38:d3:d1:fc:9f:1a:3d:bc:36:c0:
ce:05:27:19:ec:57:61:a6:c9:c7:58:cc:4c:b0:6b:48:93:18:
3e:06:79:c6:b5:e8:4e:7a:62:97:1d:08:8a:3d:8e:82:3f:d0:
51:63:70:17:4e:98:67:09:fc:f8:bc:fd:ce:f7:ec:6d:02:70:
6e:3a:8f:94:9e:ba:ab:30:1e:c1:17:07:72:6d:29:1e:05:ee:
2b:28:9c:af:41:89:b8:79:37:db:d5:dd:db:cc:be:7b:78:12:
6c:76:64:a5:93:6a:bf:c9:fa:02:68:6b:af:54:6b:79:c2:a8:
fd:5e:33:a8:b0:8b:d3:eb:7d:a1:5e:b0:49:1e:0d:93:e8:09:
00:ff:ef:17:30:c6:e3:70:99:ed:59:76:43:da:e4:72:54:94:
77:16:a8:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:16:50 2026 by rpki-client