Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EA9034FA454A11F1994EDEB5CE1D38B0.roa
File: EA9034FA454A11F1994EDEB5CE1D38B0.roa (raw, json)
Hash identifier: StbnC7ZU9a4151XB4X1ggM2lM/VZ8okaswfi2xD+IIw=
Subject key identifier: F8:DD:FF:DF:EB:D3:BE:CB:5F:00:FA:76:91:13:05:53:EB:51:DF:0B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B069
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EA9034FA454A11F1994EDEB5CE1D38B0.roa
Signing time: Fri 01 May 2026 10:45:49 +0000
ROA not before: Fri 01 May 2026 10:45:45 +0000
ROA not after: Fri 07 May 2027 10:45:45 +0000
asID: 13335
IP address blocks: 45.199.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110697 (0x1b069)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 1 10:45:45 2026 GMT
Not After : May 7 10:45:45 2027 GMT
Subject: CN=69f4845d-e6c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:26:a7:92:3b:6e:62:f0:12:83:ca:45:8a:b2:
a6:3f:80:d1:21:64:d4:e4:3d:94:85:3c:0a:b7:29:
87:81:6d:55:88:65:ba:b7:79:31:75:b8:21:72:70:
69:bf:0b:c1:b2:18:91:c8:30:2a:03:d0:20:0f:cb:
4b:6c:9e:86:bb:3c:92:8f:2a:73:d3:a9:f6:4c:75:
fb:ec:56:75:95:b2:83:d4:58:c1:bf:4e:71:1f:57:
75:4c:6e:83:03:87:49:dc:64:33:1b:b0:25:58:3f:
2c:17:9d:7c:9a:92:40:77:bb:95:df:de:a0:c5:70:
b1:f6:b9:99:7b:e5:78:6f:2e:22:01:49:be:2e:4f:
6f:fa:35:1d:60:d2:ec:1a:c3:13:f0:40:a6:49:fa:
01:08:db:35:03:3a:94:43:5c:48:ae:aa:91:90:a9:
42:1f:b3:eb:fb:19:d6:96:42:50:84:5a:90:10:f1:
d7:63:ca:53:11:3f:b4:58:b6:08:11:a4:ed:0f:34:
9a:da:f0:e1:8c:37:d1:31:b3:5c:d2:76:cd:f0:09:
a1:94:65:d7:b1:a7:b8:2c:de:52:94:23:3e:f2:da:
b2:77:72:38:4d:4e:9e:56:23:1c:6e:61:a9:aa:c1:
90:81:a7:1d:7d:0a:5d:ee:6e:03:bc:f9:ad:93:b5:
b6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:DD:FF:DF:EB:D3:BE:CB:5F:00:FA:76:91:13:05:53:EB:51:DF:0B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EA9034FA454A11F1994EDEB5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.188.0/24
Signature Algorithm: sha256WithRSAEncryption
05:06:18:44:94:3d:dc:f9:30:9a:13:ae:d0:51:7f:8d:a2:25:
21:9a:64:d6:cb:a3:0b:3b:16:9c:42:d1:4c:f2:96:5e:0a:18:
1d:33:c5:61:35:ce:0c:6b:69:5e:50:0c:1a:00:3f:9d:b1:ec:
58:60:a3:66:7f:0d:a2:4e:fd:d7:45:fa:2f:b2:3c:0c:8c:07:
3a:ba:5d:1c:f5:c8:74:ca:a2:3f:1f:f8:7f:e8:65:e3:e3:d7:
fd:a0:b7:b8:b9:08:62:a6:45:85:18:fd:eb:31:50:0c:d0:e2:
eb:94:49:c1:a8:de:db:ae:08:4e:6b:27:38:06:2b:22:3e:16:
30:7f:5e:82:63:8e:15:62:99:2a:dc:f5:06:4a:90:11:b2:40:
e5:0a:0c:e5:e0:4d:0d:61:60:b7:df:ab:ad:3e:da:4a:9d:1c:
1b:e6:6c:bd:d9:13:e9:e6:28:66:5e:1c:de:ea:eb:e2:97:b9:
50:18:96:86:b5:24:3c:a2:36:7d:3a:d4:05:f6:40:5b:fb:b8:
f7:43:0f:a9:77:1a:d1:9b:21:20:aa:c4:ad:71:84:1a:86:0f:
10:d8:ac:35:3e:21:39:c5:a6:17:22:84:80:89:c7:d0:b0:e3:
5e:b6:e9:7a:bd:e2:6d:06:38:31:df:cc:ae:49:a7:27:ca:bd:
42:da:58:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:06:17 2026 by rpki-client