Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7489B7C454B611F1AAC73FF1CE1D38B0.roa
File: 7489B7C454B611F1AAC73FF1CE1D38B0.roa (raw, json)
Hash identifier: CLLilWuoPSbfRMfr8oCp4Lr5DksAtI+z0FdhuNXyf4g=
Subject key identifier: C7:88:C3:AB:42:2D:48:51:47:D2:7E:14:92:5B:54:CD:A9:C9:D1:59
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B683
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7489B7C454B611F1AAC73FF1CE1D38B0.roa
Signing time: Thu 21 May 2026 01:43:24 +0000
ROA not before: Thu 21 May 2026 01:43:19 +0000
ROA not after: Wed 01 Jul 2026 01:43:19 +0000
asID: 274877
IP address blocks: 45.194.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112259 (0x1b683)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 21 01:43:19 2026 GMT
Not After : Jul 1 01:43:19 2026 GMT
Subject: CN=6a0e633c-10f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d9:7a:90:25:72:24:ad:d4:18:c0:d2:50:0c:
2c:eb:ed:aa:84:e3:01:a3:02:c8:60:ae:e9:a8:30:
15:94:ee:88:8f:a8:88:49:e0:58:a1:61:0f:55:18:
af:1d:ae:e7:c4:a2:05:34:e7:78:0e:8f:28:da:67:
49:17:39:5f:b5:e3:49:93:6d:2e:1b:b3:ca:74:80:
74:ba:f8:c2:6d:35:02:f0:16:52:ba:fa:d9:8b:39:
bf:6d:13:f6:54:84:40:99:4a:b2:ce:52:bd:d4:3b:
f0:c4:52:3e:65:81:93:a2:c2:a8:af:97:a3:27:dc:
52:d1:9f:c0:96:3d:4f:2d:92:71:b5:57:a1:ca:5b:
fa:48:fc:57:bf:ab:ef:b6:fd:4e:d4:21:6f:8f:50:
b6:71:fe:92:01:9b:c3:95:02:73:77:69:ab:8d:8f:
a2:b2:cc:8d:66:e8:9e:69:34:a7:0b:2d:08:d5:39:
9d:e0:1d:9b:67:fb:59:d1:0a:cf:c5:93:77:8f:fd:
98:6c:9a:aa:91:16:e6:9d:e2:27:35:9e:45:61:03:
36:25:26:f8:3f:4d:56:e2:b3:13:7d:a4:96:28:00:
27:5b:9a:ee:61:8f:a5:e2:e8:aa:e5:9e:2c:26:82:
92:8f:1d:82:af:d2:48:74:fd:78:93:73:9a:78:8b:
55:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:88:C3:AB:42:2D:48:51:47:D2:7E:14:92:5B:54:CD:A9:C9:D1:59
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7489B7C454B611F1AAC73FF1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.122.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:9b:84:de:b8:5b:37:b6:18:39:27:fc:94:53:d0:d1:64:10:
be:ac:a8:39:2a:66:aa:03:89:e1:1b:14:79:9a:e6:2c:eb:e7:
10:13:38:48:ff:e6:0a:bb:97:0f:e8:d0:56:32:c7:f2:8b:44:
f5:af:09:e2:cd:22:61:41:83:6b:8f:5f:23:7d:64:13:77:ba:
72:9c:f1:b5:0f:ea:e4:06:5c:06:32:a9:f3:c9:02:63:8d:13:
12:7a:32:56:a5:e0:f7:44:83:ab:6d:98:08:72:22:10:31:93:
cd:4b:5e:34:00:eb:00:ad:8e:65:40:22:32:ad:bd:e9:e2:c9:
31:6e:a9:d9:dd:19:ae:5c:43:64:b1:a3:af:2d:8e:c1:d7:d0:
c0:9e:1e:b0:6b:0e:59:c3:dc:fd:d4:83:cb:e4:e6:35:f1:b6:
94:2c:bb:09:5a:6e:73:b8:0f:bf:71:26:3d:79:cd:f5:4c:47:
36:57:b1:2e:f8:f0:88:e0:16:c0:f2:7a:80:bc:d6:91:c1:5e:
7e:8c:d9:8b:8b:1e:eb:9f:18:5e:a4:23:1c:4f:8f:eb:80:29:
96:5e:fe:23:d8:a4:db:29:06:82:99:fc:53:cf:24:c4:0a:9d:
d6:1f:0e:26:0f:ac:4d:5c:9a:a0:d6:b5:a0:97:cf:12:21:c4:
57:61:88:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:14:16 2026 by rpki-client