Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6AE88EEC371611F1A761ABE2CE1D38B0.roa
File: 6AE88EEC371611F1A761ABE2CE1D38B0.roa (raw, json)
Hash identifier: O/sbYTUjE9eZsk9l1GaGy6guGa55h4jJyBdmDoKTkIc=
Subject key identifier: A3:A0:51:7C:29:CC:9B:B0:36:64:19:61:3D:70:51:4D:8E:E2:B0:5F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AC56
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6AE88EEC371611F1A761ABE2CE1D38B0.roa
Signing time: Mon 13 Apr 2026 08:54:45 +0000
ROA not before: Mon 13 Apr 2026 08:54:40 +0000
ROA not after: Wed 20 May 2026 08:54:40 +0000
asID: 131609
IP address blocks: 45.204.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Apr 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109654 (0x1ac56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 13 08:54:40 2026 GMT
Not After : May 20 08:54:40 2026 GMT
Subject: CN=69dcaf55-d162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:fe:13:95:76:9c:06:1b:d0:51:22:e5:e8:be:
6b:ca:08:31:9f:34:48:aa:84:18:89:93:fd:08:8d:
87:f9:ba:1f:b8:be:e1:83:a7:ed:93:b7:81:0e:cf:
56:cd:b9:a9:00:ab:ea:a8:4f:8b:03:b7:c8:6a:1d:
46:f9:db:69:bd:9b:4d:42:e0:c7:93:df:ca:77:aa:
2d:b9:33:cd:da:32:21:73:82:8a:14:55:03:69:68:
24:7c:48:09:57:3a:10:17:4e:24:cd:3b:ef:ea:4c:
5c:71:86:c4:5f:32:5f:df:ba:cb:d0:9b:03:46:99:
99:44:15:2b:c9:a5:a6:cf:cf:73:75:7b:2c:a9:e7:
4a:e3:fe:1b:3e:84:84:0e:14:20:09:80:d8:79:27:
d3:92:78:fa:1a:af:0e:6b:34:47:0b:92:7a:ed:ed:
67:05:01:97:de:1c:dd:fa:cc:87:86:14:9b:d5:6f:
2b:de:ac:21:e1:f1:39:ad:8d:ce:af:89:ca:f0:54:
c4:a6:1b:04:10:64:63:a2:04:9f:1a:aa:a2:ad:f0:
ac:23:ad:4b:cf:83:0d:2d:64:65:7f:b1:37:51:e5:
c4:14:66:cc:d4:78:ac:83:06:65:54:12:dc:58:68:
94:e2:c0:11:01:74:b9:56:3c:35:82:8a:e0:57:97:
66:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:A0:51:7C:29:CC:9B:B0:36:64:19:61:3D:70:51:4D:8E:E2:B0:5F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6AE88EEC371611F1A761ABE2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.133.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:7c:53:da:f6:de:f2:35:f7:30:1e:0b:9b:48:86:41:fc:90:
0b:c7:8a:e6:59:9d:90:bf:c8:52:6a:5e:d7:6c:52:1a:49:da:
0c:8f:75:01:b6:6f:62:df:15:c8:16:c4:2e:89:4d:60:9f:91:
58:4e:98:fc:3b:fe:09:89:93:a3:97:81:09:9f:58:2d:61:fe:
26:55:70:e1:3a:c9:7e:d4:a3:87:d4:59:1a:8b:78:25:c3:4d:
45:c1:b6:d3:cc:7d:2f:98:30:96:64:f6:86:e1:b2:53:20:d9:
f9:70:3f:e2:32:99:62:b5:0d:6f:bb:f7:c9:ae:7a:e6:6b:3f:
3c:98:a0:40:dc:21:ce:39:47:8e:bd:3d:4b:52:b9:4c:ac:9d:
91:41:3a:c5:2e:25:f8:c8:1c:df:51:65:ac:8a:89:ce:9e:42:
74:10:2e:b0:66:03:74:d8:9f:18:b1:f8:dd:b7:00:f8:d4:52:
24:24:2f:d2:27:c1:d3:f2:ae:79:c0:b4:53:0a:66:37:63:08:
38:ab:53:c4:a4:30:d0:a4:b4:8c:96:3c:b3:bb:4f:fd:ff:d5:
68:57:df:dd:03:af:d1:ac:97:0d:36:2b:7c:5a:55:8a:fd:4d:
7c:51:08:ed:64:06:41:24:5a:b9:aa:5e:a2:e0:6a:fe:22:f5:
7b:56:05:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 14:29:01 2026 by rpki-client