Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/108BB7883F1511F19EB71ADCCE1D38B0.roa
File: 108BB7883F1511F19EB71ADCCE1D38B0.roa (raw, json)
Hash identifier: iJ9iGVwffdvOUIAMfSS1uOr14Op+0iQ0GFpVpyd2T0I=
Subject key identifier: 32:EC:AD:06:89:70:77:EC:95:60:DD:3E:AA:6F:CD:32:7C:5F:EA:C9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AEB7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/108BB7883F1511F19EB71ADCCE1D38B0.roa
Signing time: Thu 23 Apr 2026 13:05:13 +0000
ROA not before: Thu 23 Apr 2026 13:05:08 +0000
ROA not after: Mon 08 Jun 2026 13:05:08 +0000
asID: 32043
IP address blocks: 45.195.148.0/23 maxlen: 24
45.195.202.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Apr 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110263 (0x1aeb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 23 13:05:08 2026 GMT
Not After : Jun 8 13:05:08 2026 GMT
Subject: CN=69ea1909-7860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:f4:f9:66:34:16:df:7b:2a:e0:1d:d0:17:11:
6d:64:83:a1:bb:41:7c:f0:69:a8:f4:2b:e7:b4:d6:
0e:8a:10:8b:6b:b2:bf:19:e7:c8:11:c2:52:58:92:
da:e1:b6:dd:07:f5:59:a1:03:9f:da:85:a9:e8:1c:
a2:b7:4a:bd:2d:c0:59:fa:da:a8:84:fe:33:8f:6a:
92:8e:c5:e9:ec:ec:11:ba:06:40:f1:11:83:2d:d6:
09:8c:87:21:ca:6d:00:f9:1c:a1:b9:37:26:26:b5:
0c:3c:63:a5:25:5e:a9:2b:8b:57:c7:9b:e8:29:3e:
81:12:df:1f:83:1e:e3:37:b0:00:ad:d0:dd:33:4b:
8c:18:72:b3:d4:f3:10:d9:4b:29:be:c7:a3:7d:37:
b3:a1:2b:de:05:93:66:14:1a:1f:02:20:1a:1e:6f:
39:45:a0:ff:fb:a8:f8:b0:19:f1:f8:4e:d8:35:ed:
5a:00:f9:f6:cd:82:a0:bd:c7:0f:06:8c:fd:aa:ea:
be:f2:6a:c1:92:5e:c7:fe:1f:7e:71:78:22:aa:64:
46:29:36:b0:33:c8:12:20:fc:33:4d:ed:00:32:bb:
38:51:2b:36:54:85:b8:c2:06:9b:e9:0f:2b:72:65:
95:ae:b2:9d:14:c3:6b:bd:ae:c1:93:05:5a:b5:da:
a8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:EC:AD:06:89:70:77:EC:95:60:DD:3E:AA:6F:CD:32:7C:5F:EA:C9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/108BB7883F1511F19EB71ADCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.148.0/23
45.195.202.0/23
Signature Algorithm: sha256WithRSAEncryption
ba:5a:18:ee:57:92:14:29:f0:56:77:81:c3:2c:27:92:9b:3d:
d2:57:eb:25:c8:25:64:5c:89:1e:00:94:e8:e7:21:75:1b:12:
45:0a:61:4d:35:69:ac:bd:30:76:17:e2:84:6f:6f:51:8d:18:
74:30:0b:7a:b5:cc:6e:ab:dd:ba:f9:47:e4:7f:6c:5f:58:fb:
92:ab:e4:db:e7:de:76:e3:ba:69:46:c6:41:6c:b3:42:c5:1e:
da:3c:2e:57:d4:9a:a2:b0:ef:4a:40:3b:13:a1:84:2f:ad:6b:
75:1e:8d:ee:3b:8e:b7:be:a7:1d:95:32:7f:7e:86:ea:aa:09:
6c:d9:71:0c:d1:d4:78:8f:bc:82:ed:62:a9:ca:1d:17:9b:41:
0f:b9:9b:41:86:9b:18:92:35:ca:02:0e:b3:ab:3d:d3:98:7e:
82:09:40:da:83:05:fc:92:f1:15:e5:16:4c:3a:90:26:37:1c:
f6:86:af:fc:bc:14:47:79:54:7c:a7:c4:9b:09:17:8f:65:e8:
ae:ad:87:87:7a:9b:b2:7c:bc:ee:34:24:19:fe:0d:02:2d:7d:
bd:53:98:1d:86:5c:91:b0:08:a1:98:e7:8c:03:6d:c5:15:d4:
e4:f5:8a:c0:1d:87:95:71:94:de:d9:83:4c:f2:9c:72:c3:98:
7c:62:cb:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 24 18:37:06 2026 by rpki-client