Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B58BB2023D6611F183712406CF1D38B0.roa
File: B58BB2023D6611F183712406CF1D38B0.roa (raw, json)
Hash identifier: WhbQJAYZrwG18DqgyMjIQ1+k/2Sw9da7RuFgUVqB+SM=
Subject key identifier: C7:77:D9:9B:A6:08:06:3E:6A:E4:25:9F:95:C1:82:EC:95:14:BC:0F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01ADD4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B58BB2023D6611F183712406CF1D38B0.roa
Signing time: Tue 21 Apr 2026 09:44:37 +0000
ROA not before: Tue 21 Apr 2026 09:44:32 +0000
ROA not after: Thu 17 Dec 2026 09:44:32 +0000
asID: 215208
IP address blocks: 45.198.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110036 (0x1add4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 21 09:44:32 2026 GMT
Not After : Dec 17 09:44:32 2026 GMT
Subject: CN=69e74705-e9d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:20:f9:fa:36:6c:eb:47:dc:45:f6:aa:d5:3a:
41:30:4e:21:71:d8:30:0b:78:4c:1d:2f:74:c4:81:
56:35:43:ff:2f:76:5f:67:18:83:f8:61:01:2a:53:
2d:7d:46:d4:c1:8a:07:98:38:0c:40:98:29:43:db:
98:4d:db:0f:22:64:bf:e6:f0:8f:ef:9d:a8:d1:54:
29:98:cd:5b:ba:bd:1b:c2:33:93:7d:b5:39:b0:47:
a9:c6:d4:df:98:7b:e9:a1:89:56:ed:60:d4:9e:a7:
53:29:cc:9e:e3:52:ba:7c:4d:34:72:72:7e:61:43:
48:2e:fb:fd:81:f0:2e:a5:d8:30:69:53:e2:83:55:
b8:ef:5a:ec:60:27:66:9b:67:57:8c:eb:a3:9c:86:
3e:61:0e:3d:3a:83:5c:9a:df:33:db:f5:31:ff:6b:
05:c2:e3:33:23:9b:79:42:1b:fc:b9:51:e4:59:76:
3c:d8:9e:01:0c:4d:8c:d4:a3:a0:3e:ae:0c:f0:91:
71:4e:bf:28:60:32:8c:51:4d:bd:d5:b4:c8:84:4a:
61:4b:03:2e:00:2f:ca:25:49:3f:86:8c:ee:89:c4:
f0:1b:0e:83:8e:ec:b4:0f:40:3f:f8:c3:ac:02:c1:
bf:36:6b:4e:0b:22:c2:88:df:2b:25:2d:db:f3:e4:
8d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:77:D9:9B:A6:08:06:3E:6A:E4:25:9F:95:C1:82:EC:95:14:BC:0F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B58BB2023D6611F183712406CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.8.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:48:5d:cc:6a:39:9b:2d:ea:10:b4:cc:3a:a2:cd:0c:cc:17:
51:a0:dd:cb:2b:4c:eb:c9:73:11:09:f7:4f:83:9a:4f:8b:e3:
04:93:c1:39:55:5c:36:44:0d:49:8d:19:86:3f:aa:0e:1f:4a:
a3:22:63:ad:fc:79:f7:3f:61:e2:c9:03:3b:37:7d:20:18:0c:
1d:aa:09:66:ae:7d:83:4d:a3:d7:56:9a:c1:f4:85:8d:e2:ac:
59:cf:f7:b3:11:7d:52:ee:9b:1c:03:77:29:f0:44:77:c1:24:
83:34:be:bc:9e:60:24:16:83:f3:d4:62:e5:2f:88:77:b2:bc:
07:84:ee:fc:2f:4f:19:2a:2f:60:8c:27:37:31:fd:a4:1e:67:
52:6a:b3:78:7a:29:9a:0d:5b:d4:be:49:7a:da:c3:9f:77:7d:
07:d5:8b:96:be:7e:57:5f:b2:93:88:31:b4:36:f9:82:31:23:
99:9a:f5:09:63:21:16:0b:9a:de:b0:b4:ca:74:31:6a:6e:47:
66:e2:40:5f:6f:e9:61:0a:ab:0c:1f:ec:4f:61:c6:28:9c:e0:
bc:1b:e1:23:a1:31:80:93:66:35:a3:f9:01:77:16:90:09:5b:
e3:f0:ca:5f:83:f5:09:bf:01:83:5d:39:d8:d2:17:3a:53:3f:
e4:66:08:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:57:52 2026 by rpki-client