Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/760CEFB04F6311F19D92F6A1CE1D38B0.roa
File: 760CEFB04F6311F19D92F6A1CE1D38B0.roa (raw, json)
Hash identifier: zfjNKL7ndbc0bvG3ygJJX1lNGfmBpQbIsVfFy+ufbM4=
Subject key identifier: 02:21:B2:A2:5A:5B:8A:37:37:BE:C3:1B:96:B9:95:72:93:DE:ED:DC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B46D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/760CEFB04F6311F19D92F6A1CE1D38B0.roa
Signing time: Thu 14 May 2026 07:06:43 +0000
ROA not before: Thu 14 May 2026 07:06:37 +0000
ROA not after: Sun 21 Jun 2026 07:06:37 +0000
asID: 273020
IP address blocks: 45.195.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111725 (0x1b46d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 14 07:06:37 2026 GMT
Not After : Jun 21 07:06:37 2026 GMT
Subject: CN=6a057483-e426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:15:92:4c:d3:bc:12:c3:e4:8b:57:db:9b:33:
74:24:26:fc:d6:b6:05:e6:96:e1:19:e3:15:d7:7c:
37:b6:bc:45:3a:45:82:22:f2:25:0e:64:8b:5d:b9:
47:1a:01:8f:d9:b8:2e:10:44:9e:ee:1f:9c:d6:85:
50:38:ae:d4:24:cf:5f:e9:87:f8:c6:7e:6d:1a:c2:
1d:46:e0:9f:2a:cb:de:a1:ab:a9:0c:af:83:48:d6:
74:2a:b6:55:50:48:99:04:d8:9a:a1:93:22:af:ed:
de:ea:3c:82:bd:ce:df:f1:cb:0b:a7:a6:4a:e1:86:
30:7f:bc:bc:92:e9:62:16:81:89:75:a1:6b:16:38:
25:e6:61:8e:d3:9e:b7:42:ac:fd:67:ea:c8:74:65:
7a:02:f4:06:9b:d9:a5:d2:d7:ed:0e:9b:1a:a3:c0:
89:af:aa:e8:fc:b1:59:33:69:79:8a:e6:6a:c4:8a:
a1:9f:c2:f1:fe:6e:0d:2d:81:b6:2a:bd:cc:38:1c:
8c:2e:15:53:29:ba:ac:d5:45:a9:28:d6:61:49:cc:
af:ab:82:8e:ac:53:2d:85:d3:94:9e:90:77:76:bb:
da:d0:f6:9d:a6:e5:06:4a:b1:80:ac:74:6d:42:04:
e8:6b:5e:93:75:be:ca:ef:0b:4d:5e:5b:02:63:b5:
8d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:21:B2:A2:5A:5B:8A:37:37:BE:C3:1B:96:B9:95:72:93:DE:ED:DC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/760CEFB04F6311F19D92F6A1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.104.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:ef:ac:b5:eb:01:60:16:18:9d:a1:14:09:de:61:be:f8:ad:
9e:8d:6f:71:7d:ba:62:47:c3:30:b9:33:80:08:b3:13:9a:76:
2e:c8:8f:48:fb:7e:6a:71:08:2f:94:98:52:f2:df:4d:7c:86:
59:5e:28:dc:38:cc:42:e5:57:18:39:82:eb:e4:96:cb:f7:bd:
0f:52:ac:35:3a:60:a8:06:39:0d:7f:a9:63:41:90:db:c1:dc:
98:7d:f7:76:95:b0:9e:14:ef:5d:62:3e:1e:8d:23:28:60:82:
c3:c6:c3:42:bf:d5:27:3c:87:55:da:9e:9e:c1:c5:39:44:85:
74:f5:47:84:ae:de:6e:99:ff:88:29:90:b0:0b:5c:a9:8c:53:
f6:a4:c3:60:3a:a7:f6:28:0c:4f:49:e6:15:42:1e:d7:e6:70:
95:91:a7:0c:ba:e1:51:5e:e2:18:67:f8:fd:96:c7:d7:a2:f6:
f0:c6:d3:18:99:27:8a:eb:4e:e5:f8:14:60:24:4b:00:0b:e3:
aa:e8:f8:2e:a8:14:02:56:8a:57:48:ef:78:02:c2:4b:ed:8e:
f9:e0:ad:1c:da:2c:b4:5a:12:2f:d8:3e:e6:d0:ab:25:bd:bf:
4b:95:d3:65:df:4c:06:11:fe:c6:72:b7:4c:d4:b7:af:22:95:
35:14:4f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:07:15 2026 by rpki-client