Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D66C7D00455711F18AFE0304CF1D38B0.roa
File: D66C7D00455711F18AFE0304CF1D38B0.roa (raw, json)
Hash identifier: ocHsxLS8nCLenWXZD2XM8Wu2gxKaEpaDIMhFvWC/u/A=
Subject key identifier: E5:FE:6F:0A:CA:B4:BC:1D:F9:32:D2:8F:49:99:B8:E6:4F:B1:06:61
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B094
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D66C7D00455711F18AFE0304CF1D38B0.roa
Signing time: Fri 01 May 2026 12:18:19 +0000
ROA not before: Fri 01 May 2026 12:18:14 +0000
ROA not after: Sat 06 Jun 2026 12:18:14 +0000
asID: 272865
IP address blocks: 45.198.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110740 (0x1b094)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 1 12:18:14 2026 GMT
Not After : Jun 6 12:18:14 2026 GMT
Subject: CN=69f49a0b-53d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:42:2a:91:4f:f6:53:d3:e9:05:a3:57:38:91:
13:6a:53:4b:68:a6:bf:e2:f1:af:a0:0a:4e:b4:61:
30:2f:04:d4:33:8e:25:25:82:da:4d:6d:c3:ef:78:
ab:f7:03:aa:94:88:86:35:db:74:bc:c4:3a:24:0e:
bb:56:54:e7:17:c9:0a:8a:24:9b:48:0d:1e:df:45:
c6:97:40:d6:ac:a9:50:21:c9:4b:13:ec:2c:e2:fc:
d7:93:41:70:44:aa:37:94:e8:36:b0:45:84:81:9a:
40:cf:23:05:a7:5b:0f:76:d6:39:16:eb:3e:22:95:
78:b6:e3:92:67:0b:ce:05:ca:b6:06:1b:ea:0d:d9:
54:9d:0f:23:d9:90:fb:d4:b9:40:d6:f9:af:43:09:
50:22:2d:26:9a:67:2e:46:96:1b:0a:ea:1d:5f:42:
b1:f2:bd:64:6d:19:eb:8e:3a:ca:e2:d7:51:d9:8a:
82:86:14:0e:cc:bd:e0:7f:8b:6c:a2:0d:44:d4:1c:
60:24:94:9e:71:2e:ff:7e:a3:66:7b:b7:37:44:96:
f5:2a:a8:9e:6d:8f:db:67:d2:c3:b8:c1:a6:49:95:
54:c2:76:9f:9b:69:ae:05:9b:b0:5d:6f:4c:d7:9f:
65:10:b4:1e:37:9d:88:ae:ae:27:7c:95:08:c4:76:
8b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:FE:6F:0A:CA:B4:BC:1D:F9:32:D2:8F:49:99:B8:E6:4F:B1:06:61
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D66C7D00455711F18AFE0304CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.107.0/24
Signature Algorithm: sha256WithRSAEncryption
40:cb:d2:e1:51:09:22:7a:9e:9e:d3:24:19:c4:31:59:d6:7c:
67:d2:cb:5c:2d:8a:ab:82:f7:de:92:1f:de:f0:7e:b1:5b:ac:
29:17:5a:e5:13:e1:59:12:6b:30:10:68:1e:83:bf:a1:b1:23:
f1:5d:e0:70:8c:24:37:d5:8a:1e:0b:8c:43:b3:3a:1a:b7:1e:
de:58:e9:52:20:50:38:9f:c0:97:ae:b8:05:99:78:26:e1:f4:
e0:34:f3:1c:e7:e0:8b:02:d3:4e:37:92:c6:57:8f:9d:e7:63:
e1:5a:f6:0e:98:f8:bd:54:9b:44:13:96:39:a6:2d:31:21:73:
78:19:cf:11:ed:f9:8d:4b:a2:59:40:88:5b:be:70:71:a8:b2:
f2:6f:1c:df:d6:a5:34:0f:19:b6:1b:8a:36:dd:38:43:d5:80:
8b:39:c0:3d:94:40:b8:95:3b:38:da:58:67:8e:56:a1:33:04:
1c:c3:d5:e0:cc:53:29:da:87:da:82:8c:f6:91:31:d1:36:4c:
e0:bc:13:b2:1e:e8:d8:3f:93:7c:db:3d:2f:36:34:c5:53:c2:
7a:e3:f0:52:89:67:69:bc:58:61:20:13:7a:10:cc:43:7b:93:
43:84:a3:a9:bc:0d:14:a9:cd:ec:7f:e3:73:8c:11:04:e6:80:
e8:41:84:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:43:59 2026 by rpki-client