Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/404EF6B02ADE11F1A14172B8DAE4EC9C.roa
File: 404EF6B02ADE11F1A14172B8DAE4EC9C.roa (raw, json)
Hash identifier: JUYiONC008GzKJ7kobGUGQiACgtvfJElMDUes1kx8/4=
Subject key identifier: 83:93:8A:40:04:35:9B:17:8A:AA:DC:10:FD:09:87:1A:AF:CC:DF:A4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A854
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/404EF6B02ADE11F1A14172B8DAE4EC9C.roa
Signing time: Sat 28 Mar 2026 19:42:28 +0000
ROA not before: Sat 28 Mar 2026 19:42:23 +0000
ROA not after: Sun 10 May 2026 19:42:23 +0000
asID: 215691
IP address blocks: 45.198.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 31 Mar 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108628 (0x1a854)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 28 19:42:23 2026 GMT
Not After : May 10 19:42:23 2026 GMT
Subject: CN=69c82f24-29a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:12:c1:b3:b7:df:58:2b:0c:93:65:34:f7:11:
f1:2c:ea:72:94:14:10:cd:53:ff:6c:e6:49:12:95:
dd:56:cd:b7:95:00:4c:ef:3f:91:22:97:91:68:2e:
76:9b:16:ed:27:7c:77:c5:5e:15:03:ed:1a:da:76:
d8:e1:55:ec:42:1d:ea:ec:8e:7f:25:e0:b9:a2:03:
cb:66:2a:58:e2:3d:15:67:7c:fe:f0:5a:8c:c1:59:
5d:d8:d2:d8:ac:3c:74:9b:43:d4:f0:e9:89:09:1f:
41:57:31:60:4b:ad:b4:2a:b1:f3:35:52:de:a8:38:
c8:44:9f:00:1b:6e:11:6d:5f:ef:af:ce:2a:b7:18:
9e:25:21:ba:82:d5:5f:3f:68:9f:20:60:2e:bc:9f:
f0:0c:ce:65:a1:58:47:1c:48:de:37:3a:84:19:c7:
3f:b9:99:72:ec:86:5c:08:93:de:18:ca:a3:e4:e1:
e8:4d:c2:f2:35:8e:f1:55:59:3e:9d:02:1e:43:c6:
a0:3d:7a:bf:7c:8f:84:48:ef:d9:46:83:72:f5:11:
c4:52:2e:e4:a5:8e:93:f8:81:6b:b9:30:e6:53:eb:
8b:e6:c3:b7:79:f4:60:0e:dc:f1:27:e7:a7:2a:e9:
58:61:72:46:b3:df:8a:ab:15:1e:82:60:c5:86:a4:
28:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:93:8A:40:04:35:9B:17:8A:AA:DC:10:FD:09:87:1A:AF:CC:DF:A4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/404EF6B02ADE11F1A14172B8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.55.0/24
Signature Algorithm: sha256WithRSAEncryption
49:47:18:e1:91:9f:56:05:25:1f:09:a0:8d:38:7a:d7:fb:ad:
1a:08:73:fd:02:a8:89:91:4e:be:18:12:3e:9e:c0:18:3e:48:
dc:a1:5d:9e:e2:83:85:aa:12:0c:02:8d:53:9f:4b:9a:76:a0:
99:4c:3b:22:26:ad:b2:fe:ae:b6:a2:92:1e:d3:b1:25:95:7c:
b8:5a:9f:17:45:a4:bf:18:0f:f6:7e:31:40:a6:e1:de:40:42:
9e:ef:60:a7:84:39:a4:7a:80:d1:4d:25:9c:3b:30:66:20:bf:
9b:93:43:45:36:55:4e:97:d9:b5:3f:4d:52:ab:9e:62:45:06:
b5:4e:12:3d:49:e8:ee:10:04:f1:01:4c:96:6a:3d:be:b9:d4:
10:cf:31:7b:fb:f1:74:e6:e1:86:67:ea:35:e6:45:91:d8:48:
cb:c3:1b:7a:db:16:59:e2:eb:33:70:37:82:70:73:72:1f:1f:
c6:f4:45:36:44:bd:1f:92:36:59:2b:66:1e:56:f4:dd:0f:31:
b3:3a:c0:15:5b:3a:eb:e8:fa:c3:3c:fa:d0:68:35:40:a0:df:
4d:9b:8f:c3:94:b7:1e:09:24:a6:7c:c5:ea:fb:d3:6b:e7:b2:
4f:0e:6c:f5:5c:bc:9f:3c:97:21:e3:ec:bb:30:89:f8:29:8a:
c5:6a:ed:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:11:03 2026 by rpki-client