Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2F49E13C5F2B11F1AA10CEA3CE1D38B0.roa
File: 2F49E13C5F2B11F1AA10CEA3CE1D38B0.roa (raw, json)
Hash identifier: 2RZRvu7wHbnYbKoMaFwlN2ajLWCPZVhCVJXMyZgutxA=
Subject key identifier: 00:82:9E:4B:89:F2:7A:4C:09:E5:94:F4:24:25:33:B0:33:38:F9:49
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BB99
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2F49E13C5F2B11F1AA10CEA3CE1D38B0.roa
Signing time: Wed 03 Jun 2026 09:04:11 +0000
ROA not before: Wed 03 Jun 2026 09:04:07 +0000
ROA not after: Tue 14 Jul 2026 09:04:07 +0000
asID: 141718
IP address blocks: 45.194.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 14 Jun 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113561 (0x1bb99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 3 09:04:07 2026 GMT
Not After : Jul 14 09:04:07 2026 GMT
Subject: CN=6a1fee0b-a3af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b9:a4:74:92:e7:1e:fc:1d:c3:55:7e:5f:1c:
f2:62:27:1f:a1:d6:5e:9d:12:3b:4f:0f:e3:e0:df:
e0:76:fa:5f:af:f0:06:79:1c:cb:ee:f5:99:d8:3d:
e5:97:c7:8e:fa:b2:66:bf:ed:c3:8b:e7:b7:26:0c:
1b:eb:ff:eb:29:62:f9:f7:86:bd:ab:13:b6:72:21:
a0:06:9d:ec:23:57:75:ec:3b:62:4f:44:50:01:f4:
45:48:64:79:b1:d8:55:7d:92:25:33:54:f2:d5:f7:
e9:51:7f:58:8d:a4:dd:a9:55:23:3f:79:02:bd:1f:
be:5a:33:7f:37:c3:1c:54:3b:12:1d:d5:40:d0:5b:
f2:42:1e:76:c6:02:58:f0:41:d4:f8:03:b0:21:1b:
2f:fa:6e:11:a1:11:40:69:ef:58:d6:67:9d:47:58:
63:46:6e:a4:b8:38:01:08:cb:d8:5d:5c:67:eb:d1:
28:a3:9e:bb:21:fe:39:21:0e:9e:06:d1:a9:17:9b:
30:60:6c:f1:e0:40:16:46:eb:81:6f:1c:ee:12:66:
c7:de:89:f1:43:a7:57:3f:e0:1f:58:e2:a3:1d:59:
45:00:e7:d9:6c:5c:33:04:8e:28:4b:c9:f0:3e:ca:
e1:41:e0:86:be:2b:4c:c4:9c:20:85:4a:9f:d5:8b:
a1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:82:9E:4B:89:F2:7A:4C:09:E5:94:F4:24:25:33:B0:33:38:F9:49
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2F49E13C5F2B11F1AA10CEA3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.86.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:48:55:64:6d:58:fe:df:36:92:e9:88:a2:76:69:08:7b:03:
b5:67:fe:f5:0c:14:a9:d4:fc:79:a0:a5:f4:4c:d7:1a:a2:79:
d6:02:33:d5:72:aa:dd:e3:8e:d0:45:f8:a3:12:90:9e:a9:08:
9e:89:ca:a3:54:e6:16:ea:2a:82:a0:40:7e:e1:a7:33:05:15:
16:94:8d:e8:ca:79:58:47:78:ff:f4:d0:c3:a8:43:8f:54:86:
ee:97:1f:9a:9c:a7:7d:af:81:c4:d8:96:d9:7c:c6:af:4c:35:
fd:cd:11:88:cf:42:49:19:85:56:5c:d0:51:f6:48:35:9e:77:
3a:8f:17:60:7e:70:cd:87:36:7a:62:d1:b4:fd:2d:77:88:a5:
a2:ff:7c:2d:2f:04:49:86:26:31:0b:f5:91:75:12:db:0b:a6:
bf:6e:7d:f6:91:0b:63:7a:d9:95:1b:7a:b0:e0:fc:67:b4:f5:
06:8f:f8:e4:a3:6d:ea:24:65:9a:6d:6e:e4:0e:7a:d8:38:5c:
c4:b8:32:e2:9a:13:d8:6e:ee:34:b4:42:98:2d:6a:21:50:ce:
58:fa:8a:05:c9:dd:0c:9e:97:e9:93:ed:4d:96:99:ee:92:03:
6f:80:bc:ec:36:56:85:be:74:dd:c3:f1:62:73:8a:3d:58:8f:
31:36:b2:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 01:17:29 2026 by rpki-client