Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/769E0452536211F18A9E63E9CE1D38B0.roa
File: 769E0452536211F18A9E63E9CE1D38B0.roa (raw, json)
Hash identifier: TtEJcgT3IZGReQ+Q6/hMAWAjl3Iea4V7wBvb7V3pAWw=
Subject key identifier: 0A:C5:41:5B:9D:9C:97:73:78:1A:C8:E7:20:FF:06:10:DD:56:AC:27
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B5CD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/769E0452536211F18A9E63E9CE1D38B0.roa
Signing time: Tue 19 May 2026 09:09:39 +0000
ROA not before: Tue 19 May 2026 09:09:34 +0000
ROA not after: Sat 19 May 2029 09:09:34 +0000
asID: 17561
IP address blocks: 45.194.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112077 (0x1b5cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 19 09:09:34 2026 GMT
Not After : May 19 09:09:34 2029 GMT
Subject: CN=6a0c28d3-72ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4e:50:c3:95:6d:f6:51:3f:9a:2c:b6:2e:4f:
e9:a5:30:86:e7:8b:c7:34:55:21:4f:0b:e2:bd:5b:
a2:32:11:85:60:6f:84:65:bd:ad:11:72:8e:ee:41:
cd:c5:62:11:ab:15:c1:0b:d6:e8:d2:ee:84:ff:1f:
9f:d5:94:99:ad:ff:43:15:12:4c:cf:e6:fa:c0:91:
70:b7:ba:14:95:8d:8f:a2:cf:8d:35:3a:9d:df:88:
3a:30:28:b4:ab:ed:7a:72:a4:fe:62:10:ac:6a:92:
38:6d:b7:59:38:9c:b6:2d:a0:0e:27:ef:79:6f:e6:
91:23:da:36:8e:56:cf:f9:c3:bc:4f:50:d6:bf:c5:
90:94:38:b7:40:f8:53:22:75:84:57:7c:97:0e:f1:
4d:e4:13:40:f0:1c:9d:ac:86:ae:04:ce:28:fa:eb:
9d:38:ea:21:d8:e6:0e:1f:5d:c8:61:5b:87:bc:c2:
f0:bb:fb:a7:5e:6f:1a:c1:67:7b:c0:cb:06:3d:62:
fc:f7:8c:4d:d4:6d:ac:73:4b:ea:27:eb:c1:db:f0:
87:64:b9:5f:6f:b6:d4:b7:40:c4:f0:39:f5:c8:93:
44:4f:c2:6f:cf:2a:69:f7:81:63:b0:b5:4a:e9:54:
5b:71:e9:28:b7:26:b3:83:a9:0c:9e:8a:4f:05:2d:
44:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C5:41:5B:9D:9C:97:73:78:1A:C8:E7:20:FF:06:10:DD:56:AC:27
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/769E0452536211F18A9E63E9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.41.0/24
Signature Algorithm: sha256WithRSAEncryption
89:a0:5f:29:98:5c:dd:d3:ce:80:df:5c:9e:1f:17:86:fc:ff:
72:d0:ea:52:c9:6f:78:80:f5:73:7e:61:39:33:a9:c4:bd:af:
14:aa:ce:2e:fa:05:dd:9b:22:dc:18:de:29:47:c8:1a:af:7e:
64:41:47:46:94:c4:56:3f:34:35:62:44:37:32:dc:98:3c:ac:
b9:0e:f4:db:4a:3b:e4:15:4d:e1:72:28:01:93:b9:14:3c:69:
cf:da:37:5a:91:e8:0f:6f:0d:4f:c1:56:1f:22:2a:f4:09:a7:
e0:ce:d6:5b:3e:52:36:78:16:f0:11:20:75:9b:4d:ad:dc:21:
0e:5e:73:c7:61:50:a2:86:5e:aa:ca:de:6c:f7:a7:47:df:ab:
90:5e:b1:e0:72:3a:13:a2:5b:92:5d:10:ef:53:d8:8a:36:66:
77:5c:64:dc:dc:56:52:ae:b9:69:01:14:df:69:7a:19:c4:1d:
db:55:4c:e8:d4:2d:5c:cc:18:c6:5c:8e:0a:a7:94:63:9e:c5:
b1:26:5e:08:12:5f:3b:ae:ba:8a:af:fa:94:38:77:a2:ad:6c:
a0:d6:01:89:0b:b5:72:35:c3:19:7f:a0:83:b1:d9:dd:36:2a:
f3:00:28:62:b1:55:99:72:7d:07:d1:6d:03:ce:be:e1:d0:7c:
4b:ed:36:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:14:38 2026 by rpki-client