Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/309375EE508F11F18B0E8EB1CE1D38B0.roa
File: 309375EE508F11F18B0E8EB1CE1D38B0.roa (raw, json)
Hash identifier: xzULxQrVD0gOXnBtsYCji5KB/xwNgur8deI2i1KPLLs=
Subject key identifier: 62:02:47:4D:C3:87:5B:C1:00:57:74:94:FE:E6:9B:13:AD:21:FC:C6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B4E2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/309375EE508F11F18B0E8EB1CE1D38B0.roa
Signing time: Fri 15 May 2026 18:52:15 +0000
ROA not before: Fri 15 May 2026 18:52:10 +0000
ROA not after: Mon 29 Jun 2026 18:52:10 +0000
asID: 133073
IP address blocks: 45.196.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111842 (0x1b4e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 15 18:52:10 2026 GMT
Not After : Jun 29 18:52:10 2026 GMT
Subject: CN=6a076b5f-8945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a8:1f:f6:fb:ba:4c:d9:87:1c:73:5d:08:e9:
b4:87:70:87:dd:87:f0:c4:ed:53:5e:b2:30:2b:ca:
22:42:79:12:87:0d:78:22:19:0b:38:e1:65:90:dc:
7a:8d:4f:ed:98:28:5a:a9:75:4f:4b:d3:8f:03:3f:
a9:cb:97:49:4f:bd:e6:ef:c1:19:03:9d:ce:8b:d0:
89:a7:a5:ba:2d:0b:19:3e:9a:a1:8a:81:98:08:95:
b9:8a:5b:48:3d:d8:9e:ac:2c:d0:94:24:29:7c:f4:
cc:59:82:81:b6:35:55:a4:83:8f:3d:56:e4:9f:af:
15:6c:ac:94:b4:28:f1:8f:e8:44:c1:b0:f1:1d:78:
35:a3:81:75:97:cc:8c:f2:17:63:2c:1f:43:a5:bc:
01:f5:5f:bf:cc:bb:27:b6:52:e2:5e:52:4a:56:6e:
41:8f:f3:8d:f8:18:43:36:af:fc:7a:29:0d:7c:97:
95:69:7f:64:74:08:3b:5f:ae:da:5f:9a:25:b1:63:
8c:44:92:24:b4:e0:42:bf:12:bb:31:6c:df:39:08:
31:e4:75:6a:51:6d:3a:64:ab:c7:32:f3:ae:fb:64:
6f:fe:cb:60:99:81:d8:86:4f:2c:03:fc:72:ae:a8:
0a:48:90:2b:d5:af:3c:50:4f:06:ba:29:f0:de:73:
9e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:02:47:4D:C3:87:5B:C1:00:57:74:94:FE:E6:9B:13:AD:21:FC:C6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/309375EE508F11F18B0E8EB1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.100.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:ab:13:df:de:1e:77:a9:74:7c:24:b1:92:26:e6:2b:49:32:
3f:77:60:04:14:8f:5b:f9:da:ab:8b:c8:0a:46:46:d6:e4:ed:
ed:d7:dd:61:aa:91:12:1e:03:13:6b:e6:f9:55:da:e3:01:28:
87:21:c1:db:8f:82:3b:d3:2a:f5:ef:d8:a5:67:f5:cf:a6:72:
5d:f8:f0:15:91:97:94:be:e2:a4:b4:df:a8:ba:6a:28:9c:fd:
4a:38:4c:12:0b:d8:9c:75:85:10:a5:00:87:2c:40:f5:c2:27:
bc:86:e4:f7:f0:f0:98:cf:94:9e:fb:7d:87:30:a8:c6:d0:47:
71:a1:df:c2:ef:84:1b:ac:e4:b5:b0:ae:ba:dd:f8:8c:1f:09:
e0:4c:80:11:40:7e:e7:83:d4:2c:47:8b:bf:0e:bc:cb:aa:de:
b7:83:45:28:f2:69:95:72:5c:b8:2a:4a:67:0d:b9:a9:70:f4:
1d:84:13:55:2b:29:82:a9:91:68:1d:fb:63:18:e5:32:f3:fa:
6a:22:0d:0b:b0:8f:a6:4d:b0:6f:8e:35:c4:5e:24:17:e1:63:
ef:c6:7d:b4:99:5f:ea:39:cd:dc:8a:25:f0:84:82:7d:c9:1b:
c0:f7:9c:6f:dc:79:76:44:54:55:b9:55:17:29:21:c5:b0:35:
3d:ba:d2:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:13:58 2026 by rpki-client