Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3EE4C350582311F1A711A5E7CE1D38B0.roa
File: 3EE4C350582311F1A711A5E7CE1D38B0.roa (raw, json)
Hash identifier: ElUJQwlpeeHRnFKWFglBhirxsZLXyI9CKFLInF7WPfw=
Subject key identifier: 67:CB:4B:16:79:BB:D6:03:CE:F9:0E:DF:8A:F2:FD:E4:CC:FC:09:BF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B980
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3EE4C350582311F1A711A5E7CE1D38B0.roa
Signing time: Mon 25 May 2026 10:19:43 +0000
ROA not before: Mon 25 May 2026 10:19:38 +0000
ROA not after: Mon 29 Jun 2026 10:19:38 +0000
asID: 36352
IP address blocks: 45.202.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113024 (0x1b980)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 25 10:19:38 2026 GMT
Not After : Jun 29 10:19:38 2026 GMT
Subject: CN=6a14223f-8ae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ff:22:af:25:09:e5:ad:f1:44:f9:db:a2:09:
4a:90:5a:30:60:f3:1b:62:4a:bc:19:49:a8:f6:40:
3f:d1:a2:c4:e6:8f:08:5a:07:60:a6:48:e6:3e:f6:
9e:a1:32:5b:bd:a3:79:38:95:cd:2a:6a:c2:95:fe:
29:97:9a:37:a2:65:6c:00:b9:dd:8e:4d:17:92:1e:
28:5f:62:c2:d0:c6:69:f2:3c:fb:04:c8:98:66:32:
9d:e9:0b:5b:be:a0:13:e7:e7:3b:75:b8:00:f2:04:
36:8e:8e:6e:9e:a5:ad:8d:8e:51:7b:cb:6b:8e:59:
ca:9d:94:51:22:31:29:1e:51:22:96:9a:3b:33:fe:
4c:1c:49:de:52:bc:54:27:1d:73:60:a1:12:dd:0d:
f5:60:5a:fb:91:c7:15:5e:10:96:8a:b4:14:1d:4e:
4f:97:f3:8f:9e:35:10:50:db:dc:b4:0b:a1:0d:59:
54:e6:3f:08:2b:31:4c:e5:39:37:d9:4e:ea:09:81:
94:da:d7:75:1d:7d:f4:82:34:21:ae:94:7d:64:79:
be:e4:8c:12:b7:38:41:5a:23:51:7a:75:1b:ef:1a:
3f:5e:13:b0:6b:58:3a:b2:80:92:64:c3:a0:1d:7c:
40:87:80:10:c3:a8:32:d1:3f:66:ba:93:95:80:d6:
ce:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:CB:4B:16:79:BB:D6:03:CE:F9:0E:DF:8A:F2:FD:E4:CC:FC:09:BF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3EE4C350582311F1A711A5E7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.114.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:03:9a:2b:a0:0d:5e:b4:0d:88:d3:c8:37:27:e6:f1:8e:2c:
ea:93:6c:f7:b0:d4:2d:80:0d:25:4d:e1:be:09:39:a4:ef:42:
c8:80:53:7e:98:d5:96:e2:7d:b5:ea:65:a8:57:f1:20:f7:f8:
85:57:c2:03:b8:57:2b:41:c0:9a:b9:6a:00:4d:56:eb:21:52:
1e:80:94:10:34:51:15:b7:d1:67:71:01:8d:2b:07:30:4c:01:
b8:0d:a7:12:73:d8:2e:0c:75:0f:9b:78:3f:77:15:f1:f0:ce:
d8:e8:01:d6:77:67:40:d2:e3:e4:d5:5e:f9:72:96:12:b6:4b:
7d:b1:90:b4:27:3f:a3:3f:cc:35:04:94:78:b0:cc:0f:35:41:
ea:1c:c8:cd:bf:2a:bf:82:1d:75:e6:bf:ec:b8:48:13:d9:b2:
58:dd:18:3e:be:1b:98:67:bf:a6:25:f5:98:87:70:da:39:01:
a3:6a:2d:5f:61:09:cd:61:38:0e:07:63:e6:ee:aa:cf:be:43:
46:a6:eb:71:fa:58:03:8d:cc:c9:b1:57:dc:23:f3:d1:5c:db:
ea:f4:40:69:ad:28:01:79:94:bf:cd:89:e3:4c:fc:7c:86:c2:
2e:9a:be:c5:82:13:bf:7d:a4:0f:3f:99:e3:26:77:0f:a3:40:
08:b7:35:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:07:29 2026 by rpki-client