Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA3796F6479C11F1AE9ADED5CE1D38B0.roa
File: AA3796F6479C11F1AE9ADED5CE1D38B0.roa (raw, json)
Hash identifier: S5F4KJiB9vDse0wTWEoWH6iL4bBUTAn9Ng0TMrsckDY=
Subject key identifier: E4:C8:0D:69:07:8E:86:D5:84:77:6D:8B:97:A6:6B:4D:9B:9E:67:7D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B169
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA3796F6479C11F1AE9ADED5CE1D38B0.roa
Signing time: Mon 04 May 2026 09:36:03 +0000
ROA not before: Mon 04 May 2026 09:35:58 +0000
ROA not after: Mon 08 Jun 2026 09:35:58 +0000
asID: 215691
IP address blocks: 45.198.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110953 (0x1b169)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 4 09:35:58 2026 GMT
Not After : Jun 8 09:35:58 2026 GMT
Subject: CN=69f86882-a08a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:d3:75:a3:73:bc:61:18:e8:77:21:12:6f:aa:
b9:42:1f:66:83:25:de:25:5c:17:69:f3:69:af:53:
13:43:6f:33:78:9b:27:34:da:c4:b7:02:bd:b5:09:
27:e0:2e:52:38:16:c7:53:1e:5c:27:27:74:21:97:
a8:a0:59:76:12:d7:12:d4:b3:51:12:ae:c1:d7:17:
76:9d:c7:07:67:6e:0a:79:51:c7:f6:71:9d:dc:9f:
fc:d7:ee:c6:cf:e3:c2:25:b9:60:dc:4c:a2:4a:07:
41:70:38:f9:d9:2f:ee:5a:44:30:e8:89:fb:33:d5:
26:3d:ec:04:9b:b3:67:fa:11:02:12:26:bf:ff:36:
25:8c:6b:ff:90:89:78:5e:d1:b8:a5:7d:8d:43:9f:
91:83:a6:e5:16:51:6c:a9:cd:ec:31:0c:29:ff:b7:
25:83:45:e4:c3:32:9d:24:53:fe:02:09:8c:8e:14:
e3:fc:4d:fc:8f:35:97:1d:fe:c2:0a:ba:f0:67:aa:
e0:10:79:d1:15:2c:b5:0b:dc:43:5c:1b:4e:91:02:
27:92:2d:90:5a:18:61:33:03:08:85:c4:6b:12:89:
1c:db:da:bc:a3:85:ae:f0:0a:9f:b8:a2:d9:56:78:
e3:a5:e3:4b:2b:9e:ff:18:31:cc:c7:e0:98:25:e9:
2e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:C8:0D:69:07:8E:86:D5:84:77:6D:8B:97:A6:6B:4D:9B:9E:67:7D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA3796F6479C11F1AE9ADED5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.54.0/24
Signature Algorithm: sha256WithRSAEncryption
06:36:18:03:ba:36:05:e5:95:d3:05:a3:d6:94:26:83:a9:5d:
f6:e3:0e:3f:6e:d0:c7:2b:db:51:80:54:db:d2:69:9c:77:f9:
01:f2:f0:35:e6:0e:8a:29:68:47:47:80:1b:a6:d6:44:5d:62:
3e:4a:41:f5:dc:44:84:04:c3:b2:ef:12:20:53:21:ed:62:84:
0e:ad:f9:3e:e5:c9:ea:4c:b3:d5:0a:83:f5:8c:76:f8:cb:4b:
7d:1e:20:0c:d0:e1:4a:e9:56:a9:fd:9a:8f:5f:78:39:f9:48:
af:dc:98:92:1e:2b:cf:5b:e2:29:3d:e8:59:66:de:e2:c0:b8:
8f:80:21:1e:00:d6:e0:ea:b4:37:ff:72:f2:fe:66:d1:b1:50:
ec:00:5c:db:d4:a0:d7:05:f4:9b:1d:86:83:86:b2:00:3c:50:
cf:23:dc:4f:c2:43:3c:ed:3d:c7:c8:3a:ac:e0:b5:48:a5:ad:
39:5c:82:4d:d9:4d:e5:b6:5b:2c:46:5a:b8:bf:b2:8c:1c:4b:
b1:7c:97:de:70:51:f8:ed:3b:7f:73:4d:d9:8e:3a:59:de:ac:
59:7b:5f:e1:42:43:b4:8c:d9:bd:5b:d1:0d:d1:70:9b:2d:71:
55:d5:85:92:4b:0f:15:4e:9e:49:bf:9d:13:c8:6d:3b:4e:1a:
75:b1:63:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:39:13 2026 by rpki-client