Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ED6105F047A311F18F5939FFCE1D38B0.roa
File: ED6105F047A311F18F5939FFCE1D38B0.roa (raw, json)
Hash identifier: d99fIjKxq9mlEfQz22KWQYyk69+/dybBK7XlGZ1ut+Y=
Subject key identifier: 55:FC:99:2D:17:FE:21:BA:02:7E:14:AF:61:5B:7C:79:0C:EE:13:AA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B16F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ED6105F047A311F18F5939FFCE1D38B0.roa
Signing time: Mon 04 May 2026 10:28:01 +0000
ROA not before: Mon 04 May 2026 10:27:56 +0000
ROA not after: Sat 06 Jun 2026 10:27:56 +0000
asID: 13335
IP address blocks: 45.198.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110959 (0x1b16f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 4 10:27:56 2026 GMT
Not After : Jun 6 10:27:56 2026 GMT
Subject: CN=69f874b1-0855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bd:ce:27:2a:26:8b:98:f7:6c:7f:f9:b9:b5:
2a:e4:4e:ec:bc:40:8f:04:33:82:3a:04:c4:be:d0:
0e:b8:71:23:3f:ab:8e:1c:9e:ce:c4:3f:94:14:94:
50:3e:c4:40:90:ef:28:e7:41:db:bd:76:74:56:d5:
28:24:01:b4:61:19:08:d2:ff:c3:f0:40:7c:f5:7f:
7c:e7:45:57:82:b0:b5:3a:77:38:51:a4:23:40:6e:
d8:bd:f5:04:f7:e3:9d:b6:25:c6:fb:c5:e5:37:9d:
0c:42:93:04:66:00:11:55:f8:10:ae:83:52:6a:71:
32:ca:e7:2c:89:40:39:eb:f0:f7:fe:58:f1:df:02:
2b:c8:29:bb:24:d1:6f:45:ed:2e:3d:f6:1d:72:36:
1d:e0:ad:6d:3e:46:61:ac:a6:7c:de:78:6e:fe:41:
64:bf:09:06:67:e6:cf:08:69:66:f1:96:30:4c:70:
ca:ec:b3:c5:df:d9:8b:11:32:e5:99:ae:c3:4c:bb:
df:6d:9e:5c:52:1b:53:7b:93:f2:16:87:05:0b:e0:
95:2a:03:0a:38:29:fb:d4:25:a0:dd:9d:eb:3a:6e:
09:5c:12:4f:b4:48:cc:a1:80:a0:34:a6:51:0f:fa:
2b:9f:b6:66:ad:4c:b2:8d:4b:c2:29:96:75:f2:e0:
93:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:FC:99:2D:17:FE:21:BA:02:7E:14:AF:61:5B:7C:79:0C:EE:13:AA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/ED6105F047A311F18F5939FFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.116.0/24
Signature Algorithm: sha256WithRSAEncryption
97:b3:0c:5a:b7:f4:e7:79:52:70:b1:59:e9:6f:6f:3f:f8:6c:
1f:fc:e5:d8:6b:9a:43:c1:0b:69:17:aa:4e:af:96:13:23:9c:
34:2a:5c:c9:a0:c7:98:90:f9:68:68:34:72:9a:06:77:b5:24:
fb:4f:92:45:8d:ee:ce:d0:e7:55:47:84:ba:bf:1a:af:9a:a4:
77:4a:bc:e4:5f:fa:e9:c8:bd:77:28:3b:fc:10:43:1d:92:e2:
eb:a5:6c:2e:3e:08:8b:18:76:e8:4b:c6:8a:ae:e8:b8:55:90:
ca:c6:64:80:40:64:0c:24:4d:01:0f:6b:82:46:0f:08:01:6a:
9c:9b:b7:6b:52:69:ad:a4:2f:0f:77:d3:be:87:15:03:6e:96:
55:64:c5:e9:5a:2a:2b:c7:ad:18:62:97:cd:14:de:a7:2f:e8:
a8:65:ca:f7:6f:21:97:ce:04:c6:a6:8d:5e:76:84:bf:06:4e:
a6:95:a8:0f:d2:4b:04:dc:9b:8a:7e:d5:46:60:62:57:8b:60:
22:82:bc:fb:e5:41:98:60:4f:2e:ab:db:e8:8f:bb:7c:91:2e:
b0:d4:70:df:9b:84:2b:e8:4d:04:81:e4:27:a1:db:af:93:8f:
6c:8a:37:fe:e7:d0:ca:11:d9:41:ed:3e:d0:95:6a:8f:15:04:
65:5c:5e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:20:56 2026 by rpki-client