Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0F21E052554011F1B5F4CDC5CE1D38B0.roa
File: 0F21E052554011F1B5F4CDC5CE1D38B0.roa (raw, json)
Hash identifier: pQVS1hbTJQ0HBoNFZlaJwZ0TZgQ28WY/qxUFNHZLLcg=
Subject key identifier: AD:94:7E:60:BC:E6:E9:83:82:01:40:82:07:93:80:2C:E6:C0:3C:18
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B78F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0F21E052554011F1B5F4CDC5CE1D38B0.roa
Signing time: Thu 21 May 2026 18:08:25 +0000
ROA not before: Thu 21 May 2026 18:08:20 +0000
ROA not after: Thu 25 Jun 2026 18:08:20 +0000
asID: 200758
IP address blocks: 45.192.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112527 (0x1b78f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 21 18:08:20 2026 GMT
Not After : Jun 25 18:08:20 2026 GMT
Subject: CN=6a0f4a19-1ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:42:b0:9b:86:d9:34:5a:0f:12:90:e2:d2:90:
96:b2:86:52:25:e7:c4:ce:05:24:42:ea:47:61:70:
84:20:b2:ff:2d:cd:93:26:b4:9d:f8:31:8d:57:b2:
6d:87:43:b9:9a:f9:04:4c:94:80:93:f6:e7:e9:a7:
59:38:ef:25:25:ab:09:fb:1f:5d:31:83:0d:f9:6c:
eb:4d:f8:71:07:a8:12:b5:b2:cb:de:cf:a6:a6:d4:
12:cb:79:66:13:ff:08:87:37:ee:2c:0e:2b:8f:01:
7d:73:dd:03:fa:ca:31:21:3a:50:cf:9e:e8:55:55:
b9:de:c5:ab:d9:90:80:22:46:38:4a:5e:e7:a1:1e:
26:7f:cd:42:12:40:c4:7c:47:ef:df:a4:03:77:ff:
39:a7:a1:a3:11:97:56:79:15:37:c4:2a:c3:0f:db:
be:f6:93:a2:e5:d5:05:5e:90:27:95:6b:64:5f:95:
b4:2b:3e:a8:6b:b0:26:55:da:ce:20:26:f0:05:da:
0e:43:7e:54:c8:33:06:6f:7a:0d:a3:11:9a:bf:3c:
df:13:af:2b:8f:f7:c2:8c:e8:e8:3c:a5:5a:50:f9:
30:d6:cd:fe:c5:f7:e7:4e:a7:95:ec:be:c1:42:e6:
88:f9:4d:38:8d:82:9e:56:66:46:0c:a8:f8:be:50:
dd:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:94:7E:60:BC:E6:E9:83:82:01:40:82:07:93:80:2C:E6:C0:3C:18
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0F21E052554011F1B5F4CDC5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.9.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:18:f9:cc:7d:ca:07:0f:a8:a8:c4:55:62:b4:dd:88:4c:72:
88:98:b8:a5:d7:87:4b:10:97:4f:18:d4:ec:41:f3:6e:d0:03:
25:2c:c7:90:00:0e:d6:19:08:a3:02:a2:f7:42:c4:ab:1e:69:
48:65:27:42:a0:4b:41:78:05:e0:c7:bb:14:8b:06:21:cc:8c:
64:cb:87:0a:24:bb:88:23:a3:b4:2f:79:0c:af:19:33:f7:4b:
da:b6:f1:55:76:ed:f3:a0:f9:37:8d:de:54:2c:84:93:7c:ce:
84:8a:ce:41:31:da:98:08:8e:4c:e5:99:67:1b:d2:f1:46:15:
bb:ea:f6:2d:e3:28:c4:f1:cd:79:72:61:c8:1f:60:a7:ab:e6:
16:81:14:a9:99:11:f0:98:67:49:ef:86:16:d4:d9:69:58:3d:
73:7c:4a:0b:b8:c5:59:14:27:3c:bd:0d:2e:ff:69:f0:58:3f:
fd:28:42:fc:9c:2e:2c:0d:7f:ce:52:b8:63:ff:2d:53:34:a4:
68:37:47:48:e9:5b:d0:b7:1b:b3:18:f2:7f:5c:cf:d2:c8:0f:
2a:c5:1a:ff:6a:54:1a:82:1e:e7:b5:b3:b9:96:62:c7:33:e1:
61:e3:5e:1d:56:ec:13:2e:eb:e9:34:68:8f:c2:78:42:3a:6d:
f9:a1:76:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:07:10 2026 by rpki-client