Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/31F51666506411F1B3A9A3B4CE1D38B0.roa
File: 31F51666506411F1B3A9A3B4CE1D38B0.roa (raw, json)
Hash identifier: WAF6OSI9GUTyAz0YYRjJIDRtoRgQ/Tl+g50wKr/UVU8=
Subject key identifier: 9A:31:E9:79:4E:F4:5C:10:7C:3F:24:52:FE:80:C0:22:F7:2B:82:75
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B4A8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/31F51666506411F1B3A9A3B4CE1D38B0.roa
Signing time: Fri 15 May 2026 13:44:29 +0000
ROA not before: Fri 15 May 2026 13:44:25 +0000
ROA not after: Mon 22 Jun 2026 13:44:25 +0000
asID: 401701
IP address blocks: 45.205.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111784 (0x1b4a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 15 13:44:25 2026 GMT
Not After : Jun 22 13:44:25 2026 GMT
Subject: CN=6a07233d-ea7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0d:cb:8b:c3:01:56:8f:cf:8b:c9:3f:56:5c:
88:0e:08:8a:e7:00:cb:6f:2b:ba:c2:44:04:3c:44:
5f:40:1c:06:30:89:f3:05:ae:24:31:d1:ed:a3:c4:
d4:47:5d:d8:01:13:42:b5:43:41:b5:8d:77:ba:7b:
df:36:a1:6c:f7:93:8e:96:d9:c3:6a:09:4f:4f:0b:
18:89:68:e1:d3:84:4f:98:83:2c:ca:58:da:da:cb:
86:6f:85:9d:38:16:6e:96:3e:f8:cf:ce:8b:fd:c4:
5a:81:28:24:21:0f:ea:0c:30:10:89:d9:c0:e6:7a:
6b:08:4a:b0:5f:0e:ad:54:bb:fb:4e:ee:2d:8a:5c:
08:fa:dc:35:bf:18:51:b7:78:d1:1c:e2:c8:19:2c:
63:97:76:72:bd:47:7c:74:6c:73:2e:a7:d4:3e:12:
d7:8a:ed:df:7d:71:0a:c7:40:0a:f7:23:a9:96:c3:
3f:ef:2a:89:49:87:4d:1c:a0:16:6a:e8:64:32:97:
80:3f:02:af:c8:09:e0:e0:46:e8:06:13:d9:43:06:
a5:a9:f0:18:8d:b0:9f:8f:88:bb:62:75:0b:42:5e:
3b:5f:58:09:cc:ba:51:da:74:cf:54:8d:82:8b:d9:
31:41:16:fc:29:f0:bc:3d:95:c8:67:31:cd:76:88:
df:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:31:E9:79:4E:F4:5C:10:7C:3F:24:52:FE:80:C0:22:F7:2B:82:75
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/31F51666506411F1B3A9A3B4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.16.0/20
Signature Algorithm: sha256WithRSAEncryption
0d:6e:dd:93:7c:3b:c5:00:90:2c:c9:a7:42:f4:79:ed:40:a2:
38:28:24:42:14:f7:84:1a:df:32:69:86:90:8f:1d:42:69:85:
ab:c0:09:ea:7a:07:21:09:69:a7:e4:a0:05:c3:0b:5b:96:74:
72:5f:ca:21:51:ab:c2:e5:e1:7c:7f:9d:c7:f6:48:9c:0f:ae:
0f:69:4a:91:4e:24:90:09:de:9a:48:dd:67:bb:62:55:4b:96:
2b:20:c7:29:08:5e:a5:56:c7:79:50:26:20:aa:7b:c6:a8:6a:
22:d8:69:55:c8:80:01:f2:a0:cc:dc:17:39:95:00:50:40:9a:
ac:ca:9d:08:35:22:4e:e1:2b:53:d8:11:2d:e9:22:b9:d7:65:
6a:59:33:3c:ac:58:1e:fa:de:fa:07:81:f9:6a:98:45:55:d9:
f3:e4:26:8d:4d:72:93:0f:15:f7:3f:00:04:8c:49:64:2e:3d:
4e:0f:d1:98:b2:08:70:5b:06:bb:fd:35:dd:89:6d:96:50:da:
2a:bf:04:c4:6e:be:22:35:da:6b:ea:e8:fb:4d:47:22:e6:2b:
b6:c7:e1:67:15:67:f0:48:82:de:fe:52:50:05:52:10:38:f4:
3c:9a:33:06:dd:c7:8a:d5:4b:aa:26:ed:fd:c6:c2:2d:58:04:
67:30:8f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:14:33 2026 by rpki-client