Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9D4F8B604B0C11F1841F54B5CE1D38B0.roa
File: 9D4F8B604B0C11F1841F54B5CE1D38B0.roa (raw, json)
Hash identifier: 2d9CnCeVx+BO1EDz3S5QjO3YQkX/MiRgFmLmnUS2rOg=
Subject key identifier: 02:50:EC:7F:CC:B7:4F:66:E7:AD:03:CE:54:3D:20:AA:80:F2:67:D2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B2EC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9D4F8B604B0C11F1841F54B5CE1D38B0.roa
Signing time: Fri 08 May 2026 18:34:58 +0000
ROA not before: Fri 08 May 2026 18:34:53 +0000
ROA not after: Mon 18 May 2026 18:34:53 +0000
asID: 63787
IP address blocks: 45.192.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111340 (0x1b2ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 8 18:34:53 2026 GMT
Not After : May 18 18:34:53 2026 GMT
Subject: CN=69fe2cd2-4571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:5d:8d:f3:a7:ba:45:f4:de:28:12:dc:df:a6:
1b:f2:6d:45:b7:af:c9:e3:4e:22:a0:91:c5:da:d0:
7a:26:ae:be:3b:f7:c4:8b:68:7b:06:83:c8:2e:9c:
f6:20:3d:89:7a:5c:aa:1a:c7:5d:80:bf:07:84:55:
e9:dd:06:7c:c9:71:39:27:18:50:e5:23:b7:f1:ec:
07:48:ee:8a:1f:21:67:2b:8f:80:85:78:0f:b7:54:
69:e4:bd:d2:f4:0b:67:66:cb:4f:36:d3:0c:ba:2e:
41:96:4f:1d:1e:d5:4f:24:0b:58:df:3f:dc:af:04:
82:91:c7:04:b7:95:5d:22:ac:1d:66:de:f3:bd:17:
c2:32:de:d9:61:63:67:e0:6c:2c:89:0a:04:d0:c9:
86:a1:97:2c:e3:ba:19:2d:af:39:ef:97:ee:93:54:
8a:ff:88:c6:6c:3c:74:78:e1:e5:40:63:a2:2e:77:
f1:e9:1a:cc:51:25:a7:fa:67:ad:b3:79:2f:4b:a6:
25:0c:9f:a8:9f:22:84:09:bb:5a:e0:74:1e:4e:22:
c9:78:ee:89:6f:b2:18:c7:70:80:02:c8:7d:09:9f:
2c:2f:b5:85:49:0d:74:2d:1a:bf:85:bd:67:13:54:
4c:b7:48:89:ce:20:12:c1:62:ec:36:a1:d4:44:2b:
ac:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:50:EC:7F:CC:B7:4F:66:E7:AD:03:CE:54:3D:20:AA:80:F2:67:D2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9D4F8B604B0C11F1841F54B5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.180.0/24
Signature Algorithm: sha256WithRSAEncryption
06:3a:b8:19:a1:3c:07:36:39:9b:a3:10:9c:65:0a:ee:4a:e8:
15:97:7d:99:cf:41:de:0d:0e:2b:b7:24:e7:ea:6d:dc:38:ea:
d8:5c:8c:39:f5:63:20:1b:f3:e5:34:38:9c:23:1b:e4:b7:c8:
e1:84:0d:05:a0:8b:04:14:f1:2e:23:24:9a:8b:22:b9:b0:73:
67:be:07:0b:17:5c:da:f8:62:87:da:46:ba:bc:d5:6d:9d:ed:
d1:ce:d2:5c:44:cd:f7:b5:47:31:d7:3b:35:f8:34:f4:37:15:
5c:12:e1:d1:1a:54:6b:30:2a:40:cf:7a:23:c8:5a:71:85:cc:
ba:bd:0e:d2:43:6a:fa:03:02:60:7b:ed:1c:8e:c6:f3:d4:80:
13:c2:cf:9e:84:d1:85:47:2b:14:de:e0:51:87:d0:79:19:c4:
f4:3b:9a:6d:fd:e3:0c:71:b7:a3:fe:88:f4:fb:4e:5d:c4:61:
0b:01:3c:e4:ba:c5:72:97:84:5e:7c:7e:c9:2b:bf:fa:2d:94:
34:06:3e:ad:fa:a1:78:4a:18:ac:e0:4e:a9:ee:fc:c3:17:a0:
e6:dd:e5:45:66:14:88:e5:b8:2f:87:54:ac:f5:4f:20:69:16:
7d:f3:dc:03:d9:e6:c5:56:c3:1a:98:32:2a:91:01:d3:f5:ba:
b2:a3:cd:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:10:32 2026 by rpki-client