Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F4C0B242495F11F1AA6D0406CF1D38B0.roa
File: F4C0B242495F11F1AA6D0406CF1D38B0.roa (raw, json)
Hash identifier: 5vw9UyhJKxJctCG0JNVZ/UTH0fe2MM4TqAlRw7GaEQw=
Subject key identifier: 74:85:E3:A6:B2:57:48:27:FE:3E:5A:A9:7C:AB:1C:7C:73:CA:F5:88
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B1F4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F4C0B242495F11F1AA6D0406CF1D38B0.roa
Signing time: Wed 06 May 2026 15:26:31 +0000
ROA not before: Wed 06 May 2026 15:26:25 +0000
ROA not after: Wed 13 May 2026 15:26:25 +0000
asID: 401783
IP address blocks: 45.197.135.0/24 maxlen: 24
45.198.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 13 May 2026 15:26:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111092 (0x1b1f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 6 15:26:25 2026 GMT
Not After : May 13 15:26:25 2026 GMT
Subject: CN=69fb5da6-d523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:76:0f:1b:69:c8:9c:67:0b:12:17:f8:25:3f:
a8:0f:33:1a:99:e9:66:41:da:bd:71:15:2c:26:ae:
3f:0b:41:50:91:b7:d0:44:c6:0c:09:0e:72:84:01:
d9:46:14:85:c9:40:d5:e0:5e:47:12:d1:1d:06:a5:
55:1a:35:cc:8d:35:c8:9d:df:b5:e7:f1:af:9d:62:
1d:3a:be:ff:b9:6f:27:0c:f5:ab:35:3a:2e:3d:27:
6c:cb:28:95:e0:b9:45:ee:00:6d:3f:c3:8d:4d:51:
99:39:3a:ca:3a:50:cf:cb:35:eb:ef:f0:fe:8f:e4:
c0:48:e1:fa:9f:55:7f:ae:e4:69:3e:99:d8:cb:f7:
dd:60:67:75:90:71:3a:e1:92:45:36:fd:a9:d5:a1:
c6:b8:4e:78:0e:77:33:d7:4f:e2:c9:bd:f1:4c:1d:
d5:9e:c3:3b:99:b5:eb:cf:0e:18:26:f3:42:98:e1:
90:ac:8f:8b:b2:c6:88:42:c8:c2:e2:34:99:43:cc:
6c:98:87:e2:39:57:d2:40:3b:83:e4:49:0c:b8:fa:
38:ba:0e:0b:92:0c:64:3c:e0:63:bc:f9:56:61:9c:
cc:91:24:84:f4:3a:73:88:4f:9f:aa:51:a1:32:88:
09:69:a9:a4:8c:50:85:a5:b8:15:dc:be:1d:47:48:
fa:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:85:E3:A6:B2:57:48:27:FE:3E:5A:A9:7C:AB:1C:7C:73:CA:F5:88
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F4C0B242495F11F1AA6D0406CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.135.0/24
45.198.84.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:49:4c:c4:d9:db:94:f2:f7:07:6d:5b:f5:6d:95:41:d8:08:
a7:c7:e0:e2:ae:1a:f5:99:00:e2:fa:97:9e:c5:36:a2:47:8b:
44:7f:40:70:4d:b7:28:6d:a2:32:c1:a7:6a:e3:1c:ef:8e:88:
6e:d9:86:0b:12:f8:66:5d:c5:ef:b1:d6:75:f9:5e:16:8e:d2:
b9:77:e3:42:0b:c3:b0:32:bc:d3:54:71:4f:01:51:d0:41:c9:
ad:7e:6b:9c:d4:9a:0f:e8:00:96:db:34:10:d7:0a:0d:dd:eb:
0c:2c:b3:3e:04:68:88:e8:2e:91:8f:48:12:b5:55:68:1d:b2:
eb:25:60:0f:4f:ff:6e:3f:9a:cc:ff:c0:42:ea:f9:29:eb:cf:
2d:d9:88:ba:70:2a:8f:e1:70:d7:6a:32:59:e1:ee:79:da:02:
ce:96:71:d0:f3:68:f0:0e:ae:c5:0c:bf:14:1d:07:e6:a2:b5:
07:31:35:8d:2d:21:a2:73:cb:b1:fb:90:9a:df:12:6f:7f:48:
44:c5:3f:f7:3d:07:76:3c:41:96:43:19:26:84:f2:07:41:ba:
08:15:15:d1:ac:49:2f:9b:28:4a:2d:ca:05:d1:47:e9:22:8c:
3c:b0:e2:e7:8c:0c:01:47:e5:3e:c6:be:4d:95:b5:3d:1b:69:
16:ad:38:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:00:28 2026 by rpki-client