Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5256CCD0507611F1BA2B2D1ECF1D38B0.roa
File: 5256CCD0507611F1BA2B2D1ECF1D38B0.roa (raw, json)
Hash identifier: kDejUwvGwgcj/9YmyHigfr/O8IvU+0Z8idLBinub64M=
Subject key identifier: 95:65:75:D7:BF:52:95:3C:A3:35:A3:05:35:72:B9:6B:C3:59:41:0F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B4CC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5256CCD0507611F1BA2B2D1ECF1D38B0.roa
Signing time: Fri 15 May 2026 15:54:15 +0000
ROA not before: Fri 15 May 2026 15:54:10 +0000
ROA not after: Mon 22 Jun 2026 15:54:10 +0000
asID: 395886
IP address blocks: 45.205.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111820 (0x1b4cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 15 15:54:10 2026 GMT
Not After : Jun 22 15:54:10 2026 GMT
Subject: CN=6a0741a7-05e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c1:cb:4c:f3:80:05:82:ba:bc:a0:3d:09:98:
2f:1e:ed:3e:98:82:e1:37:3d:a8:ce:87:d4:2b:37:
0b:23:54:ac:ae:50:1d:e9:52:0a:d9:a8:1f:2f:47:
3e:08:7b:70:bb:d7:e3:df:45:6c:28:5d:89:00:4a:
37:b2:e0:07:a9:43:0c:da:65:5d:eb:31:d4:d3:98:
aa:f3:5b:66:a9:1e:3f:9f:e9:0b:9b:f5:35:c1:6a:
e7:21:a7:1f:43:1f:e8:40:dd:a1:d7:93:4b:0a:34:
5b:a9:5c:63:f4:ca:49:c6:e0:38:a8:00:aa:7d:db:
97:bc:87:27:92:40:a3:fe:25:ef:10:12:e7:b4:df:
0f:7d:1c:16:e0:40:e7:3b:4c:79:55:9e:a1:19:54:
0d:a2:29:52:17:ba:58:04:2d:e5:06:3e:fe:77:2a:
db:a2:35:ef:8c:94:ee:c6:f6:57:f0:72:ec:07:bb:
44:e3:23:49:bc:31:57:a4:7a:e9:11:60:f6:6e:91:
41:d4:73:7c:7d:16:b6:91:d0:a3:12:d4:f0:e7:8c:
a6:28:73:15:c0:dd:76:ba:3b:57:e7:31:73:57:78:
c5:3e:29:85:a1:2b:ac:5e:f5:2e:49:57:41:56:8a:
83:16:08:aa:88:2b:fd:5d:51:49:dd:8b:92:07:67:
25:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:65:75:D7:BF:52:95:3C:A3:35:A3:05:35:72:B9:6B:C3:59:41:0F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5256CCD0507611F1BA2B2D1ECF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.16.0/20
Signature Algorithm: sha256WithRSAEncryption
18:2b:c4:73:7a:2e:71:ea:81:c8:a2:a3:90:7b:da:57:4f:4c:
af:fd:02:e0:34:15:3a:c3:8e:c5:36:60:75:2c:8a:f4:41:d7:
c7:0d:e7:4d:3c:02:f1:81:3d:3c:0b:fe:45:4b:e9:22:89:f8:
94:9d:bf:21:91:54:56:08:34:40:6b:a9:90:13:6c:c8:7d:ad:
e0:12:c0:16:5d:cc:9b:b4:f5:b1:de:5e:4f:97:03:a6:02:83:
8a:59:7f:0b:c0:f2:90:93:da:dc:b8:21:48:f3:10:c9:28:52:
10:c5:76:3c:44:98:04:f6:f9:70:92:33:a8:3f:18:4f:24:9b:
ab:9f:38:30:ba:2a:59:3d:1e:70:8a:fe:74:59:47:80:c8:3a:
1e:8e:7c:5c:52:14:ea:c1:0e:d1:8a:86:cf:9f:80:16:38:52:
ae:98:21:5d:55:05:a3:5d:8a:ea:0a:46:02:35:67:26:51:14:
a8:1a:a1:8f:d7:f6:ce:95:f9:e4:9d:9f:65:fa:09:49:8f:55:
94:c0:1e:55:b8:be:b9:f4:d3:15:50:f9:04:aa:ca:e8:d6:f5:
d0:d0:a6:b6:29:48:24:5a:27:a4:06:1d:33:44:72:5b:86:23:
1e:7f:d3:f3:63:f2:70:3e:b5:73:03:67:5e:e6:2e:d7:56:a1:
1d:65:f8:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:14:07 2026 by rpki-client