Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/09A00E3E577411F1B3C78EB9CE1D38B0.roa
File: 09A00E3E577411F1B3C78EB9CE1D38B0.roa (raw, json)
Hash identifier: CQA0c9YnEoGOYmi/IGBB2VzAKF66DlKqC2hig+4vBpM=
Subject key identifier: AD:CA:90:90:C7:C6:FB:FB:7D:B1:38:46:0F:60:B8:2D:62:08:C4:96
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B8F0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/09A00E3E577411F1B3C78EB9CE1D38B0.roa
Signing time: Sun 24 May 2026 13:25:32 +0000
ROA not before: Sun 24 May 2026 13:25:27 +0000
ROA not after: Wed 08 Jul 2026 13:25:27 +0000
asID: 214049
IP address blocks: 45.194.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112880 (0x1b8f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 24 13:25:27 2026 GMT
Not After : Jul 8 13:25:27 2026 GMT
Subject: CN=6a12fc4c-46d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:04:4e:8a:8a:af:0b:21:09:41:2d:ac:26:62:
be:4f:3e:a1:ed:fa:b2:35:42:10:35:a2:67:0f:84:
6d:35:31:3b:2b:c0:0a:0e:d3:ab:cf:df:94:0c:a8:
d7:66:3e:2a:7d:43:70:3a:3b:8f:c9:35:74:53:d7:
4c:98:c8:79:45:36:33:05:4f:64:01:fd:bb:03:4f:
fd:3a:5e:70:d0:ea:af:13:f1:a8:84:8d:21:26:7a:
cc:c7:73:a4:e3:d7:ad:d5:41:bb:e2:5f:e4:c3:d3:
d1:c6:04:af:09:cd:9c:1f:82:af:45:fa:56:80:c3:
73:f5:17:53:96:de:2d:22:46:4a:38:50:2f:59:08:
5c:ea:0f:04:48:c2:cd:9f:e2:c5:59:8f:c6:0a:d2:
f2:7b:0f:79:0d:4b:1a:1d:c4:aa:64:fa:55:3d:b5:
13:10:48:98:20:e2:8e:18:d3:a9:f3:b4:00:39:15:
70:04:93:72:76:e3:1a:5f:08:d1:7e:af:8f:64:bc:
16:7f:83:a4:10:63:c5:69:22:64:14:07:8d:a1:a9:
b4:87:f5:9e:4b:cb:5e:4d:ff:f8:68:e9:6d:65:a6:
13:94:e7:3d:fd:98:41:41:87:0f:5f:3e:f8:28:d8:
51:56:ab:4d:88:2d:cd:d0:3b:85:30:23:bc:a9:ef:
1f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:CA:90:90:C7:C6:FB:FB:7D:B1:38:46:0F:60:B8:2D:62:08:C4:96
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/09A00E3E577411F1B3C78EB9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.6.0/24
Signature Algorithm: sha256WithRSAEncryption
51:f0:1f:35:b8:7c:82:54:4d:e9:46:98:e1:40:5c:ae:c9:f4:
18:bf:0d:16:37:43:ac:d8:69:72:63:11:9f:03:c5:75:78:73:
91:e3:dd:cd:99:e2:f5:1c:67:93:62:3a:df:7f:83:c8:f9:7f:
74:87:cf:e3:fa:7f:d8:1f:fa:49:2a:21:00:92:b4:67:94:b6:
99:c2:2f:d9:90:f9:da:a7:c7:b5:b8:1b:4a:a0:1e:de:2e:3b:
ef:7e:24:e3:cd:96:39:1b:53:1e:55:cf:b9:b4:ab:ff:be:6e:
f5:87:d4:3b:e4:0b:14:c2:bc:8e:1a:17:ba:af:f2:32:83:c3:
9a:b4:67:6e:64:f4:32:a9:3a:81:6d:3c:73:88:46:46:7b:a4:
cb:6e:98:0e:e1:05:c2:91:24:d1:40:aa:7c:4f:83:1e:77:c0:
84:14:9d:df:f3:a9:bd:fc:b3:d4:bc:05:8c:70:9b:fe:61:f7:
79:38:ea:34:c8:84:f5:73:5d:fa:52:4f:a1:55:ab:fc:9a:e1:
d3:2a:f1:8d:7d:d0:7e:e7:7f:ed:29:9a:c5:51:af:2f:86:15:
2e:1c:2b:05:41:8d:41:60:da:4f:9e:8e:ac:d8:3d:00:3a:01:
ad:74:8c:22:a0:b2:ad:03:2d:c3:0b:ca:11:a6:ee:41:01:f3:
c5:2e:d7:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:13:57 2026 by rpki-client