Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D2BDA04246B211F196985CCECE1D38B0.roa
File: D2BDA04246B211F196985CCECE1D38B0.roa (raw, json)
Hash identifier: IGKnxy7KwAE8VdT8J2XIF3VfW3jTIVH5tg0Qf8rN100=
Subject key identifier: EC:6D:A3:9F:05:FF:AB:44:27:AB:76:D3:33:1A:88:CB:BC:BC:E9:7B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B15E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D2BDA04246B211F196985CCECE1D38B0.roa
Signing time: Sun 03 May 2026 05:42:08 +0000
ROA not before: Sun 03 May 2026 05:42:04 +0000
ROA not after: Wed 10 Jun 2026 05:42:04 +0000
asID: 274273
IP address blocks: 45.194.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110942 (0x1b15e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 3 05:42:04 2026 GMT
Not After : Jun 10 05:42:04 2026 GMT
Subject: CN=69f6e030-f179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:90:7f:56:47:14:39:82:f1:58:8d:f2:ab:ce:
7a:b7:65:14:22:8f:d4:84:82:54:8f:4d:32:22:3d:
cf:19:10:49:1b:39:dc:83:49:bc:fe:42:88:d5:54:
d0:5b:0a:6f:bf:67:a8:cc:35:e5:91:cd:86:33:19:
56:8c:b1:26:92:24:e2:41:e5:5f:b1:f2:3e:9e:8f:
dc:6a:e6:73:fb:09:55:c2:b8:02:f3:35:79:0b:52:
72:e3:d9:bb:09:e1:08:e7:60:6e:bb:9b:c4:6a:0e:
eb:36:b4:8c:a7:60:7b:cf:5b:0d:cd:45:b9:30:e6:
e7:e8:6e:e2:d6:c0:91:2a:71:b6:de:f7:31:02:b6:
0a:fb:a9:6e:e4:55:53:ad:a2:87:01:1c:28:7b:c7:
ee:f6:97:bf:b9:91:b9:85:af:5f:f9:b5:13:b3:75:
45:15:46:80:32:6a:33:15:a0:70:a2:f7:7f:0c:db:
18:2e:09:9f:76:1e:1d:ca:27:6c:0a:e8:82:ca:19:
5c:7d:0f:ae:63:af:ce:94:2a:df:6d:f8:fd:30:31:
dc:70:99:43:e1:b1:6f:9f:93:06:51:49:0f:5b:fb:
6d:7e:97:e3:58:b8:99:a2:5b:09:1e:d9:fd:b9:ac:
1e:b8:e0:45:12:c7:27:4d:d5:b2:df:ef:ab:b7:30:
87:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:6D:A3:9F:05:FF:AB:44:27:AB:76:D3:33:1A:88:CB:BC:BC:E9:7B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D2BDA04246B211F196985CCECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.52.0/24
Signature Algorithm: sha256WithRSAEncryption
90:5c:a7:95:f2:35:5a:bf:71:b7:62:ff:ca:92:ab:0e:ef:df:
53:4e:50:17:66:61:d7:b5:8b:a1:4d:9d:d4:b4:03:6d:ec:fd:
09:0c:cf:a3:ea:2d:a7:a7:75:39:12:0d:0b:58:d4:f5:8c:2c:
40:20:b8:15:9f:4e:1d:da:54:36:e0:68:6c:7b:13:72:de:41:
09:fb:59:e2:36:66:68:b0:ab:12:5c:7d:4d:4c:5f:21:ef:26:
af:5b:57:82:8c:14:18:9e:bd:62:08:3f:12:56:68:d4:6c:c7:
a2:f2:12:90:fd:04:76:c3:bd:18:83:b1:6c:d0:c9:d7:bb:5a:
67:5f:01:ba:17:e7:03:4c:fb:94:f7:19:56:98:14:05:eb:2c:
99:f1:c7:72:b1:fc:61:fd:a6:15:67:68:dc:17:e3:d5:77:53:
cc:cc:30:d9:a9:92:f4:2b:48:a6:3c:b9:13:85:f1:78:29:db:
c8:7f:76:83:21:ec:cb:70:70:d2:83:26:44:7f:33:82:a0:c9:
dc:51:41:a1:7b:1c:66:c1:af:d4:cf:65:ee:cc:50:3f:bb:c4:
97:17:af:7b:fd:47:a7:41:9a:44:48:f8:85:65:2d:16:a0:d5:
da:13:45:23:ca:7f:89:fc:51:5d:04:b5:16:35:39:e0:d8:03:
82:ff:13:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:46:35 2026 by rpki-client