Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AE79EB5E4B4F11F187181DCCCE1D38B0.roa
File: AE79EB5E4B4F11F187181DCCCE1D38B0.roa (raw, json)
Hash identifier: FxOr+W3QDJErsnRLwKaUjjNXEyugTR2+7InDbmM4hI4=
Subject key identifier: 84:16:43:4E:96:80:30:3C:33:B1:E4:82:A8:E4:FD:37:9C:CE:E3:30
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B2F1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AE79EB5E4B4F11F187181DCCCE1D38B0.roa
Signing time: Sat 09 May 2026 02:35:03 +0000
ROA not before: Sat 09 May 2026 02:34:58 +0000
ROA not after: Fri 15 May 2026 02:34:58 +0000
asID: 137263
IP address blocks: 45.195.16.0/21 maxlen: 24
45.195.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111345 (0x1b2f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 9 02:34:58 2026 GMT
Not After : May 15 02:34:58 2026 GMT
Subject: CN=69fe9d57-5fb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b9:24:e3:48:c1:b5:6c:21:23:80:96:3f:41:
35:00:0b:92:28:7a:a6:68:32:7e:0e:78:c7:20:9f:
8f:89:42:6b:41:e0:3c:09:aa:4e:36:cd:61:8d:c0:
92:7b:a3:4a:45:c0:ce:08:1e:f7:c3:ba:fb:b0:db:
f6:b6:eb:6f:36:3a:7c:a2:b5:23:c0:df:5f:b4:6f:
81:81:0c:ee:2f:64:0a:22:2f:86:6a:2e:3f:1f:16:
2a:b8:f5:15:6c:16:e0:9d:90:00:f7:24:e6:f7:f2:
c5:f7:c2:43:1c:f2:bd:3b:17:77:3a:ff:99:5e:bf:
64:74:b5:3f:00:d5:53:e2:c8:34:f4:4c:09:ac:b6:
2d:2f:95:e0:25:e7:c3:27:ab:88:11:dc:06:5a:8e:
d8:a0:62:b8:19:70:df:7b:11:2a:7b:1d:4d:a6:ef:
39:e7:12:bd:e6:d3:fa:21:33:0a:b3:37:b4:7f:17:
47:c4:1e:3d:ca:4a:3c:84:b1:64:39:d0:ae:c0:8c:
c9:2e:9b:c9:c7:9e:48:d3:51:a3:f2:96:68:bc:85:
f2:e2:ca:70:5e:f4:04:58:4d:e4:28:4b:26:51:07:
f8:95:63:2f:bb:4b:7c:8e:a3:79:76:06:db:65:3e:
3b:da:00:73:ad:f5:49:dc:50:f7:a7:38:ca:be:ee:
8d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:16:43:4E:96:80:30:3C:33:B1:E4:82:A8:E4:FD:37:9C:CE:E3:30
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AE79EB5E4B4F11F187181DCCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.16.0-45.195.24.255
Signature Algorithm: sha256WithRSAEncryption
72:8b:19:f2:8f:1e:2c:4c:8e:1f:ed:25:b0:e4:ef:f3:a0:36:
78:9c:8d:66:01:13:01:84:d7:5f:65:2e:7d:d7:20:f6:2b:4d:
36:f5:e7:01:1b:6a:ba:30:0a:ca:c2:2f:75:6b:db:28:ca:44:
cf:83:3a:6c:3b:a5:30:aa:02:a5:4b:32:71:cf:07:78:d3:49:
0f:2a:12:39:89:d0:01:be:90:ab:59:d4:35:2c:f3:fa:75:67:
ab:c3:1f:c3:58:ec:a3:3b:e9:c6:8b:46:8d:e2:34:83:3a:81:
15:f3:ab:83:74:90:66:ee:d1:8e:54:2c:b1:0b:b6:10:76:74:
c4:82:a1:a2:64:10:d5:7c:93:37:b5:5d:f9:0c:75:b4:7f:f0:
aa:4e:d3:62:83:03:6d:5a:15:a6:05:c1:b2:c1:59:26:c9:03:
f1:74:37:13:e1:a8:c6:97:82:32:11:46:6d:3a:0c:4a:28:e1:
91:a1:73:14:d6:0d:38:60:39:d0:7c:0d:ee:5b:26:ab:29:38:
e2:4f:39:41:fe:a3:4c:88:45:38:2d:7b:f7:39:d0:ac:c1:59:
63:94:43:da:71:26:de:3b:57:d4:d4:c8:34:3d:6a:df:bf:84:
7c:a5:e5:03:0a:c0:13:58:74:0f:db:e4:13:c8:a5:8d:9e:61:
8a:ba:d4:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:48:20 2026 by rpki-client