Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/403E097633FE11F1B1C15117CF1D38B0.roa
File: 403E097633FE11F1B1C15117CF1D38B0.roa (raw, json)
Hash identifier: K1tTs5RRDpFVsct/v64/jhEye7KqXTyTCCfamfS6Oj0=
Subject key identifier: 34:EF:35:2A:12:D8:38:6D:8C:C3:AD:28:67:D7:9D:68:45:77:21:F0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AB40
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/403E097633FE11F1B1C15117CF1D38B0.roa
Signing time: Thu 09 Apr 2026 10:24:12 +0000
ROA not before: Thu 09 Apr 2026 10:24:07 +0000
ROA not after: Fri 22 May 2026 10:24:07 +0000
asID: 397071
IP address blocks: 45.195.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Apr 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109376 (0x1ab40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 9 10:24:07 2026 GMT
Not After : May 22 10:24:07 2026 GMT
Subject: CN=69d77e4c-6957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e4:38:af:03:cc:45:25:f1:e3:8c:a7:61:4b:
d1:51:ec:f2:d3:ea:ea:fa:8c:dc:17:5c:ea:43:94:
ba:95:bc:1e:2e:10:15:77:47:7c:3d:69:79:c3:ad:
f2:37:74:bc:4e:73:f2:90:4b:68:e9:03:45:21:ba:
dc:1a:de:c3:41:ed:06:28:51:dd:5b:53:7b:85:d7:
c9:64:ea:fd:09:32:c4:fc:af:c6:d5:ab:05:26:8f:
98:65:e4:7d:77:ba:38:75:35:d6:b8:68:68:8c:3f:
1b:5a:52:74:a3:45:a8:c8:61:1a:de:a6:a3:1e:03:
64:77:3a:c3:8f:1b:5f:1c:2a:da:3c:06:ce:39:ee:
93:1d:36:55:e9:df:dc:a6:4f:9d:2a:48:ec:eb:85:
55:70:c0:d2:96:dd:f8:5e:12:aa:57:9d:13:34:73:
c2:65:08:34:41:a4:ad:c1:08:65:6e:ac:2d:9a:7a:
78:71:9e:0d:61:a8:ab:a1:1d:ef:7d:fc:16:a3:d0:
33:1f:87:a0:c2:42:36:b9:a4:59:4a:63:16:25:8f:
92:c5:7b:44:f3:35:84:50:db:d0:ad:39:f6:45:4e:
66:88:5f:93:89:30:4c:6c:60:2e:d7:35:16:f0:f6:
c3:75:71:ef:5e:a2:32:ad:e6:c4:ae:30:19:1a:32:
a9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:EF:35:2A:12:D8:38:6D:8C:C3:AD:28:67:D7:9D:68:45:77:21:F0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/403E097633FE11F1B1C15117CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.134.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:06:bb:88:d6:97:28:ad:d2:c5:9a:8d:8e:2f:4b:be:7c:5b:
f1:06:d0:ff:42:f0:9e:f8:e4:21:80:1c:71:80:c9:e7:ec:e4:
11:35:37:10:6e:a3:61:6f:01:6a:30:ef:02:fa:68:bb:8d:49:
4b:b4:94:a9:30:06:2b:08:24:ad:fe:57:4b:cc:da:d7:03:4a:
15:7c:84:e3:19:78:74:56:6c:80:f3:38:c3:eb:6c:1c:0d:d2:
5d:e3:65:55:0b:2b:3f:8a:7b:a8:b3:43:2f:02:d3:6a:9d:a8:
b5:82:b6:e6:1f:05:26:fc:1e:42:fe:37:d6:55:5c:22:11:c3:
71:6d:fd:24:c2:88:e9:3a:50:da:9d:0f:b7:b5:20:40:98:2c:
eb:4d:e9:07:29:46:33:93:9e:b8:5d:5a:60:d5:1a:e5:d8:93:
de:4a:b3:a4:91:02:93:95:a2:45:89:4d:fa:61:f3:79:bb:e2:
23:15:9e:6b:c8:6c:1d:e4:cf:57:27:5a:37:63:cb:c8:34:3b:
cb:d1:69:59:4b:5e:95:bd:5e:18:a3:f3:ad:e5:a9:a7:5f:58:
5d:1b:ec:cb:b7:ba:51:a0:fe:f5:92:b9:cb:fe:3d:18:bd:7a:
49:54:13:8e:56:bc:7b:65:7c:2a:74:28:52:c1:54:89:0e:2b:
61:31:e4:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 14:29:53 2026 by rpki-client