Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/73431CC85C9211F19D3CDCCBCE1D38B0.roa
File: 73431CC85C9211F19D3CDCCBCE1D38B0.roa (raw, json)
Hash identifier: LIaW/SSsq82aVxhacQd2ApPH1tPVSOPzfGpD1IFwCK8=
Subject key identifier: CB:09:8C:A8:DF:19:52:CD:1E:F4:6B:FD:A5:A0:8F:5B:0C:F4:79:4E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BAFA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/73431CC85C9211F19D3CDCCBCE1D38B0.roa
Signing time: Sun 31 May 2026 01:45:50 +0000
ROA not before: Sun 31 May 2026 01:45:45 +0000
ROA not after: Tue 07 Jul 2026 01:45:45 +0000
asID: 274320
IP address blocks: 45.194.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113402 (0x1bafa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 31 01:45:45 2026 GMT
Not After : Jul 7 01:45:45 2026 GMT
Subject: CN=6a1b92ce-54cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8d:9d:b4:8c:f7:cb:44:f9:54:b4:20:5b:d2:
7c:1d:14:ff:86:01:0b:b0:8b:d9:86:ca:a6:9e:45:
91:d1:d2:61:4e:7a:d8:d9:63:d2:79:8e:e3:35:75:
4c:33:6a:99:48:09:9a:eb:99:ee:36:71:84:35:ed:
32:d0:c1:b4:e9:c6:b6:05:c4:b7:90:fc:57:4e:f0:
df:3e:2e:6b:93:40:4e:0f:46:5f:5e:3d:07:5d:d2:
c6:85:d1:b2:b2:3f:4f:d3:85:10:48:3e:67:f5:bf:
ac:38:92:53:cc:0b:bc:2c:a0:6c:be:4f:d6:27:d4:
b8:5f:ec:84:06:d4:c1:6a:9a:4f:b4:48:41:d9:9c:
d7:9f:e8:bf:11:23:71:d5:53:a7:11:fa:c0:0d:8c:
8e:ed:cb:72:bd:0c:98:0a:16:f3:c8:0a:87:27:6e:
b6:43:da:76:35:f9:a6:3a:68:3f:3b:2a:c2:7e:1a:
0e:34:4c:15:f6:9a:a9:7d:60:ed:84:e4:b2:9f:d5:
ae:81:43:3c:1f:df:bc:2a:81:a7:1f:71:37:bb:8c:
a3:81:78:34:ba:02:49:4e:29:ac:6e:6b:79:dc:ad:
44:3b:bf:72:75:69:36:27:5e:d9:1e:e5:02:0f:17:
f5:15:31:ae:f4:c4:e4:09:1e:da:d6:08:13:23:bb:
d1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:09:8C:A8:DF:19:52:CD:1E:F4:6B:FD:A5:A0:8F:5B:0C:F4:79:4E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/73431CC85C9211F19D3CDCCBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.54.0/24
Signature Algorithm: sha256WithRSAEncryption
89:54:31:93:d0:e4:7c:58:b4:11:ce:e9:d0:4e:db:d7:36:24:
69:d0:ce:20:75:b9:fd:2e:08:bd:0f:b8:23:eb:c4:90:f1:aa:
bf:27:53:46:ee:13:3c:87:20:1d:01:d2:5f:66:43:b9:58:0b:
75:0f:b1:03:78:fd:a7:dc:71:05:b7:a0:c5:bd:cd:e6:68:e6:
a8:dc:54:4d:3d:b2:af:b5:72:cc:15:e3:90:97:d5:84:48:ca:
b5:61:73:a2:21:7d:1b:c0:cb:ac:83:d2:82:b7:7e:77:2f:bf:
9f:38:bb:11:80:37:61:78:7b:b0:ba:5a:91:6d:f5:8f:8e:7d:
58:e0:76:e9:fc:45:e8:d8:f0:f8:b4:a5:4e:d8:f9:d8:11:63:
82:71:ed:0b:76:5b:40:d9:41:bf:66:24:55:03:3b:17:c6:b4:
17:9a:23:0a:78:9c:10:df:90:80:f1:5e:60:5e:92:a0:2e:32:
2f:e4:96:e7:63:db:d1:2d:54:84:7c:4a:0f:9b:16:a0:c5:86:
b9:90:46:d9:10:3b:c9:e6:8d:2c:a9:bc:60:02:6f:4e:6a:4e:
fa:3d:f7:ad:e9:d0:19:92:65:46:be:ad:5c:71:0d:30:11:74:
30:73:91:93:e1:05:76:dd:5a:f8:74:e8:5b:b1:e5:47:85:d1:
c5:72:1f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:14:05 2026 by rpki-client