Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9859CC1E4C8911F1AFFC21C2CE1D38B0.roa
File: 9859CC1E4C8911F1AFFC21C2CE1D38B0.roa (raw, json)
Hash identifier: +FZV7XQUoobdi1guMihR+wIv4Jr3vtq/yR47HrPKpJ8=
Subject key identifier: 23:F8:A9:B7:F3:53:2D:F7:98:2C:6F:79:B9:2D:97:2D:09:3A:0F:B1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B36D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9859CC1E4C8911F1AFFC21C2CE1D38B0.roa
Signing time: Sun 10 May 2026 16:02:08 +0000
ROA not before: Sun 10 May 2026 16:02:03 +0000
ROA not after: Wed 10 Jun 2026 16:02:03 +0000
asID: 213169
IP address blocks: 45.192.240.0/22 maxlen: 24
45.202.252.0/23 maxlen: 24
45.202.252.0/24 maxlen: 24
45.202.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111469 (0x1b36d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 10 16:02:03 2026 GMT
Not After : Jun 10 16:02:03 2026 GMT
Subject: CN=6a00ac00-ddc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f9:4a:b2:4a:4b:9a:e4:93:c9:59:8d:dd:73:
e0:b3:a6:fd:e3:fe:8f:68:19:93:63:fd:e7:bc:4e:
0a:db:aa:5f:35:ae:8b:c3:ee:b6:f5:7d:c4:f7:4e:
95:26:d3:a9:9e:ba:72:ce:51:7d:e5:ae:9c:b6:3a:
77:45:6a:19:f6:f8:7f:00:c4:6c:7c:85:8c:52:aa:
06:3d:5c:c1:92:c0:a1:29:70:96:3d:8b:fd:66:a8:
1a:7f:ca:fa:d3:b9:63:93:f3:94:30:7f:d7:3d:83:
64:f8:3f:b8:72:39:0a:ad:dd:25:48:52:2d:86:26:
11:2a:84:47:b1:33:b8:29:44:5e:38:8e:ae:57:7e:
f3:93:ab:5f:8e:7c:9e:f4:a0:5d:b2:bc:e5:2e:77:
ed:3f:57:f5:52:f9:2f:db:1f:bc:50:34:31:87:7e:
46:cc:6e:5d:8b:b0:4e:7d:40:6c:bb:74:6d:2f:7c:
66:8e:27:8a:d7:74:75:90:d2:df:a0:81:21:23:40:
6c:d6:f6:5f:89:5d:be:0a:f5:f9:31:2f:25:69:3d:
19:e0:bc:56:d4:3c:14:33:dd:93:e7:a4:8c:bf:0c:
f8:e8:aa:92:9c:da:ba:94:c1:25:9d:b1:f4:6f:5c:
fc:e2:19:08:ea:b5:2c:a1:60:4e:e7:94:7d:17:a2:
67:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:F8:A9:B7:F3:53:2D:F7:98:2C:6F:79:B9:2D:97:2D:09:3A:0F:B1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9859CC1E4C8911F1AFFC21C2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.240.0/22
45.202.252.0/23
Signature Algorithm: sha256WithRSAEncryption
46:76:b6:b5:a8:1f:4a:41:ad:5b:3b:2e:b7:72:96:79:8f:b9:
d5:b1:c8:28:a3:dd:91:a9:80:16:24:db:c5:df:28:bd:76:61:
47:e6:c7:dd:71:fa:62:88:82:09:dd:cf:5f:e4:4c:9e:3c:65:
2c:99:3b:26:5b:ad:a7:b1:68:c1:9d:ba:a3:a3:c8:ba:e0:a9:
24:11:f2:bc:46:c0:6c:10:d4:9a:22:e8:ac:b5:5f:0c:39:fd:
c0:de:de:ff:93:ea:b8:09:43:d9:3b:5c:ee:5b:bc:9d:f0:62:
f2:3c:2f:14:65:92:a7:9c:9c:30:ab:4e:a9:25:7e:ca:da:54:
2c:2f:c7:bc:68:1a:43:3e:4c:55:ee:3b:40:ac:f7:ba:0f:53:
3b:21:67:8a:17:d1:83:e1:c3:52:8c:2c:7e:65:e8:09:49:45:
a6:29:6d:32:c3:0f:48:52:d4:7f:06:22:9d:c3:84:63:21:3a:
16:6e:a6:eb:62:38:d9:fb:98:15:18:90:93:a0:96:60:1c:5d:
07:33:bf:19:83:2d:d3:e6:f3:2f:85:88:83:5a:61:d5:44:da:
20:7e:66:01:9a:c3:16:23:1a:d5:6f:db:92:85:ac:78:c2:5b:
a3:85:54:80:e3:0d:98:96:26:e7:b9:ec:45:9b:e1:70:d2:93:
b7:e4:5f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:45:27 2026 by rpki-client