Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E2F8EB9A4B8711F1B9DE31ACCE1D38B0.roa
File: E2F8EB9A4B8711F1B9DE31ACCE1D38B0.roa (raw, json)
Hash identifier: Qt7WIibRF2bus1YLUGFacROq+UuIBzDtcEa96WzThsY=
Subject key identifier: 8A:19:74:A7:8F:98:05:D2:D5:B7:83:30:2B:0F:A2:11:C4:62:CD:C5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B30E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E2F8EB9A4B8711F1B9DE31ACCE1D38B0.roa
Signing time: Sat 09 May 2026 09:17:23 +0000
ROA not before: Sat 09 May 2026 09:17:18 +0000
ROA not after: Tue 16 Jun 2026 09:17:18 +0000
asID: 40779
IP address blocks: 45.192.96.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111374 (0x1b30e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 9 09:17:18 2026 GMT
Not After : Jun 16 09:17:18 2026 GMT
Subject: CN=69fefba3-d738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a1:5c:3c:d5:a3:d5:73:fd:79:2e:87:3f:c8:
a6:ad:90:96:27:aa:69:0b:d3:c7:97:8e:ab:c4:df:
35:8e:5f:67:c4:77:e0:3d:5b:a2:77:54:08:77:aa:
c9:2a:20:aa:c8:9d:e8:31:c3:ca:36:38:09:96:b9:
c1:44:b7:51:f1:d1:30:8a:4d:c6:aa:7f:9e:30:d3:
07:0f:66:67:eb:b9:e2:74:64:45:91:07:13:aa:ef:
e6:dc:cc:b6:0e:bc:70:e9:55:94:ac:5f:3c:3e:57:
5e:ba:79:d3:bc:48:6f:f2:60:d7:cb:79:87:e7:b6:
c2:86:0c:59:90:6d:fb:8a:0d:cd:60:a6:a7:c6:26:
52:3e:e3:a5:d5:3c:73:c8:44:b8:f2:1e:78:1a:00:
54:b6:d1:d6:8c:3c:e4:f1:8c:c6:5b:f0:ae:53:38:
9b:a7:50:d9:e3:ae:f0:38:f9:41:8a:e6:9a:90:76:
b7:6c:44:d2:71:e9:6b:5d:00:22:12:ba:95:ea:e6:
2e:d5:59:52:96:ba:0a:a2:52:cc:9f:c3:18:ac:be:
7b:43:3f:30:38:aa:0e:4e:96:46:01:69:6a:2a:d2:
c8:a9:0e:cf:19:16:32:64:ed:8a:3a:5b:cc:b5:ae:
e7:69:99:4d:07:df:6b:89:50:c0:2a:47:35:3d:d8:
b6:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:19:74:A7:8F:98:05:D2:D5:B7:83:30:2B:0F:A2:11:C4:62:CD:C5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E2F8EB9A4B8711F1B9DE31ACCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.96.0/20
Signature Algorithm: sha256WithRSAEncryption
aa:b5:c1:ae:42:4a:76:a3:ce:3e:48:c3:dd:c4:56:17:ea:9e:
a8:a6:b5:88:5e:c3:47:00:3c:ca:ac:01:b6:4e:d0:ec:78:d9:
f5:93:59:83:22:d6:7a:60:58:a3:15:7d:aa:1d:0f:d1:51:8b:
0e:af:bf:89:14:5c:be:90:29:9b:7e:2a:2a:cf:2e:de:ec:ff:
a0:d1:12:f7:b7:33:21:08:aa:39:cf:6c:3e:bb:39:cc:c5:c4:
05:73:69:ec:a6:df:ea:16:70:2c:ac:e1:3d:de:01:03:d9:44:
f5:ca:49:04:54:ca:3c:3e:8b:24:70:f6:71:fb:9f:c8:6b:4f:
15:06:e5:55:83:ca:63:a8:73:fb:5c:01:9b:c2:63:70:25:99:
d2:31:a5:3e:01:96:32:ab:9f:0d:72:06:ac:ee:b0:f7:e0:00:
ae:35:c9:ed:08:fd:db:14:42:e3:e1:b2:ff:f5:b0:a6:e0:85:
83:48:41:22:36:94:1d:53:f8:01:18:74:ea:e3:03:04:04:b2:
b7:90:73:1a:61:2e:9a:e8:3c:14:52:2b:c9:aa:63:37:56:f9:
3a:b5:29:e0:8d:b9:e4:1c:1f:7a:ab:fc:57:a2:fc:0a:00:40:
4e:89:19:86:d2:61:1d:8d:32:67:23:bf:25:15:63:5f:14:d0:
f5:86:ca:11
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAbMOMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNTA5MDkxNzE4WhcNMjYwNjE2MDkxNzE4WjAYMRYw
FAYDVQQDEw02OWZlZmJhMy1kNzM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuaFcPNWj1XP9eS6HP8imrZCWJ6ppC9PHl46rxN81jl9nxHfgPVuid1QI
d6rJKiCqyJ3oMcPKNjgJlrnBRLdR8dEwik3Gqn+eMNMHD2Zn67nidGRFkQcTqu/m
3My2Drxw6VWUrF88PldeunnTvEhv8mDXy3mH57bChgxZkG37ig3NYKanxiZSPuOl
1TxzyES48h54GgBUttHWjDzk8YzGW/CuUzibp1DZ467wOPlBiuaakHa3bETScelr
XQAiErqV6uYu1VlSlroKolLMn8MYrL57Qz8wOKoOTpZGAWlqKtLIqQ7PGRYyZO2K
OlvMta7naZlNB99riVDAKkc1Pdi2KQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFIoZ
dKePmAXS1beDMCsPohHEYs3FMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9FMkY4RUI5QTRCODcxMUYxQjlERTMxQUNDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQELcBgMA0GCSqGSIb3DQEBCwUA
A4IBAQCqtcGuQkp2o84+SMPdxFYX6p6oprWIXsNHADzKrAG2TtDseNn1k1mDItZ6
YFijFX2qHQ/RUYsOr7+JFFy+kCmbfioqzy7e7P+g0RL3tzMhCKo5z2w+uznMxcQF
c2nspt/qFnAsrOE93gED2UT1ykkEVMo8PoskcPZx+5/Ia08VBuVVg8pjqHP7XAGb
wmNwJZnSMaU+AZYyq58Ncgas7rD34ACuNcntCP3bFELj4bL/9bCm4IWDSEEiNpQd
U/gBGHTq4wMEBLK3kHMaYS6a6DwUUivJqmM3Vvk6tSngjbnkHB96q/xXovwKAEBO
iRmG0mEdjTJnI78lFWNfFND1hsoR
-----END CERTIFICATE-----
Generated at Wed May 13 10:26:25 2026 by rpki-client