Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C2C7483445A711F1AE21C4E0CE1D38B0.roa
File: C2C7483445A711F1AE21C4E0CE1D38B0.roa (raw, json)
Hash identifier: IWwohQVP29tIfKKCgQp8DoTHU+MvpBrbjoD35qFLWWw=
Subject key identifier: B3:EB:A2:82:01:2B:0C:D0:7E:45:03:6B:DA:6C:EF:EC:6F:F8:9F:18
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B106
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C2C7483445A711F1AE21C4E0CE1D38B0.roa
Signing time: Fri 01 May 2026 21:50:26 +0000
ROA not before: Fri 01 May 2026 21:50:19 +0000
ROA not after: Wed 17 Jun 2026 21:50:19 +0000
asID: 273824
IP address blocks: 45.194.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110854 (0x1b106)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 1 21:50:19 2026 GMT
Not After : Jun 17 21:50:19 2026 GMT
Subject: CN=69f52022-c60b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2b:8e:27:6d:82:b7:eb:10:44:be:48:1f:8f:
ed:14:ed:0a:78:fa:92:4b:e6:7d:cc:f8:14:50:f0:
a7:f4:87:22:c4:d4:7a:47:5e:30:5f:8d:48:ba:fe:
10:37:fe:ab:71:75:1d:ef:84:ce:31:16:b7:aa:1c:
4b:55:05:04:66:06:36:ab:09:85:49:5b:e0:dc:06:
fb:9b:4c:80:00:25:b6:ec:59:1e:3e:84:db:6e:dc:
dc:c6:7b:85:57:59:e7:1b:ff:27:c9:c5:53:5a:72:
18:c7:30:49:8b:33:b0:ac:f4:5d:a4:ca:fb:25:84:
c0:d3:15:59:ed:0e:94:9a:cc:2c:6c:9b:65:cc:6b:
3b:dc:94:25:5d:95:50:28:1d:9e:ff:40:28:77:db:
96:cd:d0:5f:b1:92:11:3f:96:45:35:14:c7:7b:88:
bf:1e:ba:db:db:26:86:8b:6d:66:4b:a4:f5:62:71:
66:9a:3a:da:56:d8:8b:8f:0e:55:68:4a:61:f6:6e:
60:3e:3b:1c:35:6c:c6:a8:0a:db:c9:8b:3f:a7:6b:
bc:fe:3c:fa:94:6d:3c:86:9a:c1:df:f8:b5:3c:62:
0e:56:75:46:6a:f2:f9:f6:34:b3:11:81:a1:0a:3d:
75:77:80:74:d6:80:e9:4c:2a:a7:a7:7e:46:2e:29:
a7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:EB:A2:82:01:2B:0C:D0:7E:45:03:6B:DA:6C:EF:EC:6F:F8:9F:18
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C2C7483445A711F1AE21C4E0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.123.0/24
Signature Algorithm: sha256WithRSAEncryption
30:bc:e8:4c:22:9e:1b:c9:1b:62:e0:9d:57:4f:f2:66:91:78:
e9:8b:47:fd:a7:77:5f:02:af:63:c4:cc:54:81:87:f7:d3:e2:
1e:e0:3c:22:1f:ff:39:2e:c0:bc:f7:2c:0a:5c:00:93:04:0d:
28:98:ab:e7:63:1a:db:ee:2e:83:08:90:ac:9b:a0:d3:2a:be:
11:6e:bb:5f:ee:56:b5:3f:98:1a:40:ed:7e:e8:82:1d:eb:a2:
b5:0e:b8:c2:ed:26:cb:48:b0:51:f4:f2:c4:56:03:57:4a:59:
f0:66:80:56:fd:1f:15:a3:5e:d0:1d:77:dd:65:41:50:13:a3:
fe:4b:a2:8e:d2:f4:74:2b:d9:33:c3:b4:a9:b1:0d:42:de:69:
7a:7d:71:76:3d:0c:1b:a1:ec:8e:8c:e5:cf:b1:7b:d1:c7:49:
4e:42:05:91:ef:d6:ac:3c:8e:d4:ae:14:9e:e2:cb:72:58:1a:
6c:5d:53:db:40:d8:d3:26:fc:9a:31:52:8d:ca:3e:55:68:3d:
b5:2c:44:c8:22:e3:d4:ab:02:61:35:0e:83:16:39:07:16:7c:
23:d1:2b:83:4e:27:b7:7a:75:2f:4c:e9:f6:c2:4f:c3:9e:19:
e0:45:a7:c4:88:33:c7:6b:72:dd:e2:7b:01:ce:ed:e8:84:e5:
ee:38:58:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:24:00 2026 by rpki-client