Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4377409E552811F19D67F1B5CE1D38B0.roa
File: 4377409E552811F19D67F1B5CE1D38B0.roa (raw, json)
Hash identifier: v5RJlJMrlNopJ3uhUMCGJVW0tom0aCHveU95WnjJMGQ=
Subject key identifier: 38:28:F2:DF:AB:F0:3A:46:65:8A:88:5C:14:63:BA:90:F6:CB:CA:25
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B744
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4377409E552811F19D67F1B5CE1D38B0.roa
Signing time: Thu 21 May 2026 15:18:05 +0000
ROA not before: Thu 21 May 2026 15:18:00 +0000
ROA not after: Sat 27 Jun 2026 15:18:00 +0000
asID: 202044
IP address blocks: 45.196.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112452 (0x1b744)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 21 15:18:00 2026 GMT
Not After : Jun 27 15:18:00 2026 GMT
Subject: CN=6a0f222d-60cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:79:a2:b6:94:a0:51:41:ba:2c:22:3d:95:22:
69:de:ce:31:46:71:22:89:17:a7:c7:b5:bb:ab:14:
1f:67:6f:78:67:7d:62:39:82:c9:98:1b:96:ad:7f:
02:7d:cb:e7:1e:a4:95:48:df:06:1d:ad:03:c0:6d:
3d:71:6f:3d:d2:4e:9f:7d:9a:66:fa:c6:81:2a:5c:
41:98:13:d9:40:f2:51:47:4a:77:a8:b7:7a:18:f2:
2b:12:29:7e:04:78:e6:35:8a:25:3d:33:41:79:a8:
e1:e8:e7:0c:ef:16:d9:79:ad:75:93:af:81:f7:6d:
47:ed:23:72:e2:46:62:39:d4:c9:f5:44:7a:ab:ee:
1c:37:c5:dd:42:b4:b4:32:61:cb:68:f6:0d:ee:60:
a8:21:8b:0b:d5:08:61:8b:99:0b:e4:28:af:60:c2:
44:c2:d1:5f:ae:be:1c:cf:78:33:ed:c9:23:e0:4b:
05:be:13:26:b1:88:27:18:5e:e9:fd:51:05:f1:99:
cd:d9:0f:d4:ed:b5:a5:cc:f4:3a:3a:11:83:f9:00:
67:96:b9:55:b7:9f:42:d7:0e:e9:35:46:68:a9:00:
3b:99:e9:a2:27:f2:e5:9d:80:19:c3:bd:29:d5:ae:
1d:7c:e3:e1:b8:70:42:fe:c6:a9:ff:10:af:de:88:
0c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:28:F2:DF:AB:F0:3A:46:65:8A:88:5C:14:63:BA:90:F6:CB:CA:25
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4377409E552811F19D67F1B5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.160.0/24
Signature Algorithm: sha256WithRSAEncryption
11:a7:c6:9f:e1:05:5a:a8:af:16:4a:55:6f:51:3a:7f:f0:ba:
16:23:2f:9b:4c:57:c0:2e:28:ae:39:d1:5c:17:d7:c8:41:95:
bb:ce:9e:1f:b7:1a:a9:e6:9c:7a:25:73:25:fe:06:52:50:08:
f0:75:ed:bf:36:4b:93:ff:6c:e0:89:01:68:ef:d8:ba:cc:9e:
86:14:7e:77:b5:bd:ca:d5:88:6d:fc:7a:f6:e3:f8:c8:4a:57:
a0:b4:56:f2:fe:06:a4:19:b8:7a:4e:06:58:7a:d5:0f:83:f9:
2b:1d:ff:44:c3:5b:eb:cb:6e:bd:ca:9e:a5:20:14:9e:42:cd:
ca:5e:f9:b5:d7:0c:61:09:18:d7:aa:8e:a5:a8:01:d3:0c:b8:
ae:d8:7f:43:47:af:93:e8:c2:47:5a:0f:2f:27:d7:e2:7c:c4:
bd:33:2d:64:89:2a:1b:fd:bd:f0:fa:3f:51:2a:b4:20:15:d8:
b4:7a:cf:e2:13:7e:eb:82:77:80:38:a8:09:f6:ad:12:b0:24:
47:ae:27:45:e8:21:b9:2b:a2:30:ef:1e:ca:ce:2b:d4:7e:94:
06:e5:7b:c2:be:6c:d4:b8:16:d3:a2:df:23:10:d7:e1:82:85:
f9:3c:77:df:2f:de:0b:a1:b7:71:4a:7e:17:15:68:55:8c:3e:
ea:4d:62:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:06:50 2026 by rpki-client