Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5966B7E45A8D11F1BA3DE210CF1D38B0.roa
File: 5966B7E45A8D11F1BA3DE210CF1D38B0.roa (raw, json)
Hash identifier: /d7G1bkMjet0kge1WvvZG2Dp9VmmIGaeCz3KaRxZdNA=
Subject key identifier: 80:59:AB:17:92:CE:BA:F1:34:70:9F:59:22:AE:D9:F3:8D:22:78:C3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BAA1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5966B7E45A8D11F1BA3DE210CF1D38B0.roa
Signing time: Thu 28 May 2026 12:04:16 +0000
ROA not before: Thu 28 May 2026 12:04:11 +0000
ROA not after: Wed 01 Jul 2026 12:04:11 +0000
asID: 44559
IP address blocks: 45.202.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113313 (0x1baa1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 28 12:04:11 2026 GMT
Not After : Jul 1 12:04:11 2026 GMT
Subject: CN=6a182f40-6702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8a:ad:bb:3f:90:56:4d:98:c5:4b:dd:96:5e:
d4:6e:0f:da:df:5f:57:17:9f:95:4c:3e:96:c2:36:
08:c3:65:a1:bf:09:19:d9:b7:47:6d:27:bf:55:89:
e2:fc:7a:51:b8:18:b9:b7:7f:ff:d5:0a:27:22:8b:
68:85:1e:78:e3:61:bd:4a:9d:59:b8:03:b7:73:bd:
71:15:4a:48:4d:12:78:ae:19:4a:8f:6d:b8:56:02:
1e:68:99:94:08:5f:ec:e6:bf:78:e2:63:72:40:1a:
b2:28:3b:f2:82:e7:27:1b:fb:6d:2a:49:ff:d4:e5:
0c:2a:80:22:31:e3:d2:b4:9c:28:6a:65:15:33:65:
1e:fb:6f:d2:d0:c2:fe:de:a0:60:82:67:91:fc:5e:
30:dc:9f:86:c2:e0:e3:cc:65:27:8e:6a:4b:90:32:
2b:56:72:a9:76:fe:98:8f:46:0b:18:ba:4e:5c:01:
e1:ed:14:9c:0b:56:46:b7:df:fa:62:47:fe:75:63:
7f:51:8b:7f:25:cd:d5:e6:41:40:23:fe:8a:28:19:
f0:67:24:99:25:8d:7a:6d:6f:ce:97:6c:60:23:ba:
d3:3d:36:a2:98:17:52:99:c7:97:31:7f:e1:02:e2:
59:38:d0:23:f4:e5:02:5c:85:8b:b2:06:d0:0f:e3:
c6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:59:AB:17:92:CE:BA:F1:34:70:9F:59:22:AE:D9:F3:8D:22:78:C3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5966B7E45A8D11F1BA3DE210CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.125.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:57:c6:0f:50:c7:94:49:e1:66:b1:15:47:79:14:45:8e:14:
99:77:00:39:60:59:51:59:ac:f7:43:04:89:e8:24:5e:81:96:
49:0b:40:98:75:64:77:4a:58:77:af:28:5c:01:6f:5e:7b:3a:
e6:97:b8:e1:d4:0a:07:df:99:b6:db:14:6d:d3:c8:1e:38:e9:
00:15:88:02:e9:c6:8e:3e:06:07:a9:d8:08:2d:29:05:56:00:
48:38:dd:11:83:50:18:20:e4:89:9a:a5:0e:1c:4a:5c:54:df:
db:e7:82:f4:d2:f1:58:4b:fb:97:49:f7:46:b2:fc:69:06:11:
ca:2b:ea:13:5b:8d:9b:34:62:15:e8:56:ea:74:28:42:03:4b:
43:7c:7a:08:9c:1d:ee:28:c7:62:e9:65:b5:2d:4f:61:4d:8e:
15:1c:b6:92:14:97:3a:fb:02:31:64:cd:c2:b1:b1:1e:39:b5:
88:5a:51:ef:e8:e8:6d:92:ef:19:94:a1:d0:83:e7:80:cd:42:
94:60:3b:7d:fa:41:c0:3d:c6:71:2a:05:a2:cb:8f:34:9e:57:
3f:1e:11:7e:48:0c:70:3c:b5:89:4e:e0:2e:02:23:e4:27:39:
01:20:dd:83:a1:fc:fd:3e:d3:47:00:ec:cd:b1:5a:27:68:37:
e9:d6:31:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:07:32 2026 by rpki-client