Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2A691E9A6BB411F1944C3AD1CE1D38B0.roa
File: 2A691E9A6BB411F1944C3AD1CE1D38B0.roa (raw, json)
Hash identifier: LMtjonbnZlHlXhjJAYUrXVx9CIaJhsOG8pDykjLAhlg=
Subject key identifier: 22:C3:AD:01:3D:1B:B9:65:92:B5:AA:17:3A:DD:CD:2F:CE:1F:96:EB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BF18
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2A691E9A6BB411F1944C3AD1CE1D38B0.roa
Signing time: Fri 19 Jun 2026 07:54:58 +0000
ROA not before: Fri 19 Jun 2026 07:54:53 +0000
ROA not after: Sat 25 Jul 2026 07:54:53 +0000
asID: 200758
IP address blocks: 45.192.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 00:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114456 (0x1bf18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 19 07:54:53 2026 GMT
Not After : Jul 25 07:54:53 2026 GMT
Subject: CN=6a34f5d2-d15a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:19:6f:69:35:36:b4:d8:52:d7:b4:70:bb:45:
40:77:0e:76:16:82:1b:9a:5b:84:34:0d:d1:d5:23:
f8:e1:cb:2a:ff:df:2c:de:6b:f2:43:f4:4c:6f:b1:
7c:fd:0e:d6:0e:69:e5:26:7a:d2:b6:f8:02:ff:d3:
8b:f0:5d:6f:70:7f:ea:96:9b:f8:a5:80:31:05:1a:
05:78:8a:64:60:29:de:8d:53:57:8a:0c:a4:6d:1f:
d9:6e:0e:89:b1:c6:f4:72:47:2b:f2:01:d4:34:22:
e8:12:b4:d7:7b:2a:df:86:93:03:f1:aa:ed:05:be:
bf:78:11:84:94:bb:8c:f4:1a:1e:1b:22:62:12:fb:
c6:50:0f:ec:5d:bb:cb:28:04:de:bf:3d:c3:5f:95:
3d:8a:09:56:4d:a3:72:b1:2d:f9:02:b6:b6:86:d1:
27:39:37:16:79:bb:3c:b0:79:98:41:58:e4:88:35:
9d:f0:d1:bf:ae:55:f9:ae:45:98:52:8b:c9:a6:90:
5f:bc:c8:3b:91:af:23:72:12:a4:2c:98:d5:2e:9f:
27:47:9a:2c:9a:8a:24:51:16:78:d5:fa:6f:3e:dd:
86:19:ad:6e:c8:2e:9e:ae:d2:9f:9d:c9:0a:62:13:
5e:e8:37:54:4f:30:20:81:69:33:19:e5:be:3d:4f:
ec:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:C3:AD:01:3D:1B:B9:65:92:B5:AA:17:3A:DD:CD:2F:CE:1F:96:EB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2A691E9A6BB411F1944C3AD1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.9.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:68:f6:f4:7d:ff:44:5e:94:4b:83:94:52:12:6a:80:dd:a1:
fb:f3:f0:ee:fe:04:e6:10:33:76:b7:8b:ef:03:4a:0d:47:57:
1c:8d:8c:b0:c0:7f:c1:09:a5:f6:4e:c4:3c:51:14:73:42:75:
23:d3:5c:19:a9:5d:c6:d1:01:aa:92:5e:41:8e:bf:98:d7:ee:
d0:40:99:44:eb:1e:7f:85:2e:27:0c:0b:34:39:94:ce:6a:36:
36:5f:3b:c6:9d:2a:7f:25:1c:bd:9d:01:70:8f:87:bb:c5:e2:
ef:50:f6:cb:f2:44:75:8e:fa:01:ae:15:fd:37:d0:06:8a:93:
bf:40:26:02:7a:79:a7:e4:1d:c3:80:3b:cc:22:1a:22:23:79:
6e:e5:05:2a:c7:8f:a9:b9:34:46:14:2c:7d:a3:e3:f6:fe:8f:
9e:af:1b:35:1b:b4:31:71:03:51:ba:c5:ae:21:11:50:7d:38:
b6:e4:10:48:19:c8:65:44:04:83:d0:83:35:30:8e:75:6b:c7:
e0:6a:0d:83:c0:8b:5f:f2:62:45:e1:8f:3d:40:33:94:ca:72:
e8:7f:91:ba:e1:a8:14:d8:25:7e:6c:41:60:f6:34:e5:c1:20:
e2:a0:9e:10:d0:7f:cf:6b:6e:7d:41:82:5c:b6:26:41:38:78:
1b:a1:f5:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 00:10:44 2026 by rpki-client