Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/05DAF604579411F1A4C886F7CE1D38B0.roa
File: 05DAF604579411F1A4C886F7CE1D38B0.roa (raw, json)
Hash identifier: E8cnQhmG12bbqDdNMoR3PvIwVunngt1DMGmKVBuJaGE=
Subject key identifier: 2E:61:66:26:BC:B1:BE:C9:52:D5:65:3D:CA:66:82:71:AA:3F:AB:63
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B92E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/05DAF604579411F1A4C886F7CE1D38B0.roa
Signing time: Sun 24 May 2026 17:14:29 +0000
ROA not before: Sun 24 May 2026 17:14:25 +0000
ROA not after: Sat 29 Aug 2026 17:14:25 +0000
asID: 273034
IP address blocks: 45.195.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112942 (0x1b92e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 24 17:14:25 2026 GMT
Not After : Aug 29 17:14:25 2026 GMT
Subject: CN=6a1331f5-56d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6e:db:13:87:4a:b5:b8:76:66:07:98:d0:57:
70:86:a9:f1:31:86:cf:21:c5:1b:77:3c:55:37:2e:
a7:d9:7c:58:26:3a:d9:6a:21:39:4d:ff:6d:bb:af:
40:cd:43:76:76:86:c0:88:fa:17:b4:94:6f:10:9e:
89:68:ea:a7:76:24:3d:88:ba:52:6d:ba:40:aa:84:
f3:08:a1:b2:4b:bb:65:db:29:4b:83:ea:b0:2f:4c:
78:ff:c4:03:2f:0c:81:49:bc:4e:b8:ab:e8:30:6b:
bc:8e:df:18:73:c0:f0:68:0a:c4:4c:49:e5:d4:95:
22:82:8e:6b:36:d1:9b:12:00:c2:fd:7c:e4:93:c2:
84:2e:f2:e9:5c:63:b6:6c:b2:1d:24:f3:44:8c:d8:
5c:e5:d9:75:5d:36:7a:29:4f:85:1b:59:20:02:0e:
fe:17:3c:aa:40:7b:0c:04:4e:8d:ca:d8:29:76:2d:
98:d8:67:59:03:7a:34:20:eb:e5:8c:3c:72:e5:53:
8d:59:81:cd:98:51:2a:79:6a:36:04:9a:42:4a:a3:
fa:56:d0:a4:16:14:ea:9a:ea:8a:ea:93:a4:d3:09:
29:f2:49:c0:b5:7d:65:58:ea:39:3d:10:cb:7b:f8:
c6:ae:66:c7:6d:d7:46:60:06:1c:81:2f:aa:40:62:
68:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:61:66:26:BC:B1:BE:C9:52:D5:65:3D:CA:66:82:71:AA:3F:AB:63
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/05DAF604579411F1A4C886F7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.201.0/24
Signature Algorithm: sha256WithRSAEncryption
80:8b:b0:8f:dd:58:53:62:8c:d7:83:35:95:3e:87:94:2f:95:
58:d0:60:f1:59:1c:2e:32:60:8b:36:a1:f6:9b:87:e9:9a:86:
d0:8c:fe:18:b0:d3:76:32:69:68:ae:50:14:05:7c:7b:c6:de:
12:16:0f:01:be:dc:52:08:8b:a8:29:7e:19:45:b9:bd:2b:ae:
a3:fb:4a:74:3d:0f:38:db:09:d0:6c:4b:43:fb:8b:f8:9d:4a:
53:60:4c:dd:11:80:fc:96:59:8d:36:13:9c:f9:82:16:2d:4a:
af:19:cc:c1:90:79:5a:c8:4b:26:a3:81:6c:0c:8a:53:31:f9:
ad:08:ee:35:0c:ed:85:f8:ec:8c:39:06:d0:0f:70:c9:07:9c:
be:b5:94:99:18:c2:a0:97:13:ca:80:da:23:14:c5:d4:9a:3f:
f2:0d:49:2d:3f:da:d1:c9:18:c8:d0:80:33:ab:74:1c:40:e0:
f0:82:7c:9e:f9:88:cb:18:cc:12:ee:58:d7:b4:20:4e:60:5a:
6d:fb:cc:0c:82:41:90:a0:14:1c:4c:34:5e:d3:39:28:07:18:
88:a8:4a:a6:09:5f:f9:30:fa:22:f7:dd:af:35:2a:d7:3e:0f:
21:64:14:ef:b6:e1:a1:ae:84:c4:9b:0d:3b:95:10:b1:bb:1c:
a7:60:e6:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:13:58 2026 by rpki-client