Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AAAAD86C45E111F1AE9DBDD1CE1D38B0.roa
File: AAAAD86C45E111F1AE9DBDD1CE1D38B0.roa (raw, json)
Hash identifier: +ikPkC5etv7TqCdz7JCNKL7B4b10+fIvcNdQfxsxJcQ=
Subject key identifier: D9:12:04:CE:B0:0D:44:6F:0C:07:B0:2A:50:09:BF:42:7B:D5:E2:FD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B10F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AAAAD86C45E111F1AE9DBDD1CE1D38B0.roa
Signing time: Sat 02 May 2026 04:44:56 +0000
ROA not before: Sat 02 May 2026 04:44:49 +0000
ROA not after: Thu 11 Jun 2026 04:44:49 +0000
asID: 63023
IP address blocks: 45.196.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110863 (0x1b10f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 2 04:44:49 2026 GMT
Not After : Jun 11 04:44:49 2026 GMT
Subject: CN=69f58148-903a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:c8:2f:d7:75:da:ca:ec:e9:0a:00:b4:1d:91:
17:fd:29:7e:33:ce:6c:87:2d:5f:2d:d9:b9:75:d3:
a7:ad:dc:c9:e5:e1:4f:42:4e:ff:e4:7b:a5:0f:cb:
ef:50:68:2f:9f:69:4d:8c:d9:e4:46:31:b3:e2:7c:
92:29:84:bf:46:e7:02:77:b3:4f:5f:b3:ac:00:0a:
c6:d9:41:33:73:c6:4f:f5:4a:44:84:b2:96:50:ee:
d5:29:3f:06:c7:a3:37:d7:dc:6e:60:fc:4d:f0:22:
d4:4e:fc:15:60:28:ba:70:b8:b5:4c:96:60:63:e4:
76:ce:aa:37:ce:9b:70:18:8b:bf:a6:63:b1:37:a1:
50:9f:fc:56:1d:e4:37:78:98:98:03:71:bd:22:97:
54:fc:5a:9c:7e:97:e7:31:5a:1c:31:79:01:99:66:
2f:c7:da:32:6e:59:d3:a5:56:b2:0d:af:2d:89:23:
0a:54:c5:25:bf:86:dc:45:ce:23:fe:c5:0c:7b:a8:
50:0f:fe:a4:5a:a9:18:44:05:a8:6c:f1:f9:a6:c3:
84:20:c6:09:c9:35:e6:ad:d6:93:d6:3d:a9:e3:b4:
7a:68:c0:07:66:94:7c:e0:d6:aa:59:d2:3d:75:2d:
46:5b:48:45:89:d8:7a:13:d3:92:e4:c6:3b:05:6f:
09:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:12:04:CE:B0:0D:44:6F:0C:07:B0:2A:50:09:BF:42:7B:D5:E2:FD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AAAAD86C45E111F1AE9DBDD1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.224.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:05:81:64:f3:ba:13:2e:ff:27:c8:32:0d:3b:21:d4:5e:ba:
28:b0:48:00:f5:dd:9e:de:26:87:d1:46:65:e8:cc:44:a9:b1:
47:dc:14:9f:f2:e5:72:e2:9e:2a:1b:1d:84:26:3f:da:e2:31:
17:2c:fa:42:8b:0b:01:01:b5:7d:2d:a8:83:47:46:93:9b:11:
67:58:f0:55:25:c4:ac:76:fe:d6:92:55:47:98:7f:0f:9e:dd:
4f:d6:7a:6b:ff:0a:bc:ee:90:7d:67:d6:cf:6b:89:6c:4e:0e:
3f:b4:59:78:20:0b:ca:21:14:19:8d:b2:15:3d:6e:74:23:56:
25:fa:cd:8c:44:1c:6f:88:0b:58:d3:77:16:d5:21:2f:a2:47:
7b:8f:47:c9:8b:52:cc:ae:73:42:1e:96:85:71:88:5c:bb:2b:
37:32:3b:de:63:5f:d1:ef:08:79:7d:e5:77:47:65:88:0b:10:
07:3e:15:7d:46:b8:f2:2d:aa:1d:51:44:a2:1f:be:65:d9:40:
89:97:d8:53:06:06:87:2c:ef:b6:f0:02:55:e5:29:7e:31:8a:
d9:ce:ad:2f:31:0e:78:05:90:5d:3a:98:d8:55:16:b6:93:98:
f0:04:df:38:8d:41:d3:e8:62:3d:fc:2d:07:54:b2:90:b0:1d:
7e:e7:29:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:26:19 2026 by rpki-client