Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36424BF/78129E3E3A6611F18F50121ECF1D38B0/C44FCAE03A7211F1A5096FE7CE1D38B0.roa
File: C44FCAE03A7211F1A5096FE7CE1D38B0.roa (raw, json)
Hash identifier: xEJghIW5OyFOsKG4blpGRisCXxWptUOWBTZ+Pd/MSR0=
Subject key identifier: 45:93:E9:2B:76:13:F4:59:30:B8:A3:D1:4F:9D:83:4C:6C:6C:7C:51
Certificate issuer: /CN=F36424BFAR/serialNumber=0EF926103BD0B07CE47C2970700AA04A9DD6095A
Certificate serial: 02
Authority key identifier: 0E:F9:26:10:3B:D0:B0:7C:E4:7C:29:70:70:0A:A0:4A:9D:D6:09:5A
Authority info access: rsync://rpki.afrinic.net/repository/arin/DvkmEDvQsHzkfClwcAqgSp3WCVo.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36424BF/78129E3E3A6611F18F50121ECF1D38B0/C44FCAE03A7211F1A5096FE7CE1D38B0.roa
Signing time: Fri 17 Apr 2026 15:33:22 +0000
ROA not before: Fri 17 Apr 2026 15:33:17 +0000
ROA not after: Wed 17 Apr 2030 15:33:17 +0000
asID: 37371
IP address blocks: 192.145.168.0/24 maxlen: 24
192.145.169.0/24 maxlen: 24
192.145.170.0/24 maxlen: 24
192.145.171.0/24 maxlen: 24
192.145.172.0/24 maxlen: 24
192.145.173.0/24 maxlen: 24
192.145.174.0/24 maxlen: 24
192.145.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36424BF/78129E3E3A6611F18F50121ECF1D38B0/DvkmEDvQsHzkfClwcAqgSp3WCVo.crl
rsync://rpki.afrinic.net/repository/member_repository/F36424BF/78129E3E3A6611F18F50121ECF1D38B0/DvkmEDvQsHzkfClwcAqgSp3WCVo.mft
rsync://rpki.afrinic.net/repository/arin/DvkmEDvQsHzkfClwcAqgSp3WCVo.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 07 May 2026 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36424BFAR, serialNumber=0EF926103BD0B07CE47C2970700AA04A9DD6095A
Validity
Not Before: Apr 17 15:33:17 2026 GMT
Not After : Apr 17 15:33:17 2030 GMT
Subject: CN=69e252c2-5586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9b:c5:58:06:f1:ba:6a:0d:66:99:71:03:18:
7d:c9:93:73:30:c4:0d:11:b0:6c:6b:6f:0f:70:e1:
5a:c4:22:a7:c2:22:5b:67:cc:d1:a8:d9:05:d2:45:
f8:a4:99:a9:31:48:43:70:4c:af:af:6c:58:0f:09:
52:76:aa:27:d2:b4:87:c2:14:61:37:4b:2d:b4:f0:
60:e2:75:db:1f:c4:ee:59:c8:69:db:ba:06:99:9c:
8c:61:fb:68:b5:23:16:7b:2c:07:d3:a2:f8:64:8d:
8f:af:ea:65:8a:31:9d:87:33:b6:a3:64:53:c2:7c:
46:0e:1d:af:92:51:12:e0:cc:25:dc:de:62:dc:ee:
fd:0d:ba:6e:d1:eb:4d:ef:98:6f:da:8c:91:81:dc:
34:68:14:40:ac:7d:bf:cc:53:b4:80:cd:7a:87:d9:
84:dd:f6:b9:bb:51:55:cb:91:62:72:09:19:83:c8:
49:5e:23:43:60:1e:e1:96:ef:6b:f1:01:44:27:e3:
6b:5c:b4:ae:de:e1:7a:a8:c7:7a:ab:41:25:40:86:
82:6c:f0:f9:0e:01:63:2f:71:fa:90:af:dc:d6:af:
22:70:c3:56:af:38:ef:de:70:9c:d8:af:17:e9:7c:
4d:c9:78:1e:53:34:12:6d:9e:a4:5d:1a:e1:1f:14:
e7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:93:E9:2B:76:13:F4:59:30:B8:A3:D1:4F:9D:83:4C:6C:6C:7C:51
X509v3 Authority Key Identifier:
keyid:0E:F9:26:10:3B:D0:B0:7C:E4:7C:29:70:70:0A:A0:4A:9D:D6:09:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36424BF/78129E3E3A6611F18F50121ECF1D38B0/DvkmEDvQsHzkfClwcAqgSp3WCVo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/DvkmEDvQsHzkfClwcAqgSp3WCVo.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36424BF/78129E3E3A6611F18F50121ECF1D38B0/C44FCAE03A7211F1A5096FE7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.145.168.0/21
Signature Algorithm: sha256WithRSAEncryption
c4:b5:7f:80:77:f2:71:e1:b4:fd:2c:27:c2:71:d9:9d:9c:14:
b7:f3:ba:92:20:a1:8f:43:53:e3:0b:ed:54:b7:54:c6:04:53:
46:42:c9:89:33:57:7b:1b:be:16:12:41:bd:92:2e:b4:91:b1:
29:71:89:1f:bb:49:32:bb:58:22:38:6d:9f:ac:ce:d6:1a:82:
9c:ef:8a:c2:21:3d:dc:5e:51:d7:9d:a9:ec:60:4c:63:10:d4:
39:c1:df:c4:d7:67:9d:7f:d8:4b:a6:76:f3:33:dc:d1:be:d2:
77:b6:8c:bd:fe:ef:25:43:e2:ab:24:fb:fa:b2:bb:1c:9f:e1:
48:35:49:cd:0b:1d:6a:39:f2:58:4b:bb:87:13:c5:52:1d:4d:
b2:4c:2e:27:2a:1a:30:8f:b1:0b:95:be:97:6e:a7:e5:81:89:
9b:f5:2c:84:9d:76:8f:5f:d3:91:a9:a0:fd:79:30:f9:f4:13:
46:91:cd:ce:94:33:fd:e0:41:7c:c6:3b:f4:88:fe:ac:c6:5b:
f0:44:da:21:22:2e:a6:70:ac:9b:e7:a6:a7:2c:68:d1:88:b2:
62:c6:9d:9e:7a:47:00:6b:a1:7d:a7:ba:29:7f:d2:0f:6e:3f:
8a:8d:d1:e3:9a:c4:a1:ea:0d:18:f6:89:df:e6:ee:af:84:4d:
e7:d6:82:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 23:15:56 2026 by rpki-client