Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5CF66090695511F1B6DC32E9CE1D38B0.roa
File: 5CF66090695511F1B6DC32E9CE1D38B0.roa (raw, json)
Hash identifier: 5fMrtq8KpoL2qRnhTeUYfYf0DVeSuzUi0dFPEDOOG9w=
Subject key identifier: 9F:AD:11:7C:17:8F:DA:0A:F9:C0:E9:84:43:E8:B2:8E:B5:BA:D1:C3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BDE4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5CF66090695511F1B6DC32E9CE1D38B0.roa
Signing time: Tue 16 Jun 2026 07:31:18 +0000
ROA not before: Tue 16 Jun 2026 07:31:13 +0000
ROA not after: Wed 22 Jul 2026 07:31:13 +0000
asID: 401701
IP address blocks: 45.205.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 22 Jun 2026 00:26:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114148 (0x1bde4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 16 07:31:13 2026 GMT
Not After : Jul 22 07:31:13 2026 GMT
Subject: CN=6a30fbc6-f231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f3:98:e0:90:0b:fc:14:55:30:24:0d:98:49:
d5:46:ac:01:d1:5f:a9:ff:fb:04:05:94:87:c0:2f:
ba:80:2d:12:02:2b:dc:ef:8a:a8:78:7b:d2:cd:18:
a2:34:5a:b7:1e:f8:d4:1f:29:23:28:8c:7f:21:be:
10:63:73:d0:a0:8b:ae:b1:7f:81:8b:aa:dd:ec:5c:
d5:15:54:ae:8a:b5:42:57:4b:40:39:3d:55:21:e0:
d6:ad:f4:5e:f3:d6:99:b6:b4:b8:57:6a:82:3d:52:
01:07:90:ed:54:4c:0e:7e:74:5a:dd:2d:76:30:95:
cb:4f:2a:5c:84:82:45:ae:39:67:6d:26:82:40:d4:
2b:5e:72:a5:e5:32:87:9f:89:1b:d2:be:9d:80:3c:
f2:02:e2:ba:e3:c0:7c:f9:04:63:c4:1e:c1:1e:88:
c7:b8:5d:00:0a:b1:dc:2b:4c:e1:84:d3:cc:c4:f6:
e5:2c:1a:8f:a8:c5:e2:63:0b:11:79:74:1e:41:f8:
18:7b:37:67:08:3d:75:45:b5:48:54:91:e8:0d:2e:
42:25:97:45:1e:88:db:c9:c8:71:ef:cc:a8:12:0a:
d7:ec:b8:39:6b:80:0f:08:aa:c8:ab:48:37:b6:e2:
9b:b0:06:82:b5:8a:09:f7:36:35:75:92:53:a6:b4:
e3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:AD:11:7C:17:8F:DA:0A:F9:C0:E9:84:43:E8:B2:8E:B5:BA:D1:C3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5CF66090695511F1B6DC32E9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.16.0/20
Signature Algorithm: sha256WithRSAEncryption
30:1c:f1:c6:42:9f:60:e6:f3:c5:b5:9a:35:4b:5c:d5:2d:5a:
6f:e1:0f:c3:4a:5e:50:4c:5a:99:57:f0:c7:67:77:80:b7:34:
3e:cd:b4:8d:99:99:68:31:a1:c0:a0:74:28:94:fb:a7:37:84:
00:34:b7:77:3b:32:69:a4:75:bd:c4:de:d0:94:79:99:5f:6b:
91:4f:0f:9e:f3:2e:9a:d9:43:e5:f6:25:c9:52:48:20:33:95:
a3:ee:a0:07:fe:84:9d:bc:35:10:bb:bb:a3:a6:30:f2:84:28:
00:17:88:0a:7f:b8:63:f6:8c:b1:c7:04:43:dd:dd:49:f9:a0:
17:3e:9c:df:82:63:f3:9a:87:05:eb:0c:93:b9:ba:89:30:c1:
f3:53:3f:7b:1d:bf:a4:08:29:8b:20:fb:23:73:bf:b2:28:27:
a0:be:c9:f7:e5:74:2f:76:fa:ad:09:4b:26:ad:58:04:62:e9:
de:22:ed:f6:f2:94:d2:a7:ee:d7:5f:fa:0b:cd:e6:68:e2:fd:
cc:02:4a:8b:fd:5b:71:e8:6d:a4:10:2f:dc:aa:af:92:e9:a0:
16:aa:6c:27:82:99:82:ea:13:3f:bc:5f:bb:60:9f:2a:2d:c4:
10:60:a2:bf:d9:c4:b2:8f:e2:3c:bf:f7:0a:70:e1:a4:49:c3:
0a:0c:b5:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 14:57:39 2026 by rpki-client