Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7F96999A574811F18A57EAB8CE1D38B0.roa
File: 7F96999A574811F18A57EAB8CE1D38B0.roa (raw, json)
Hash identifier: 1PibBYHayy+ioY1rT1OCVjW6CN5R8ZWLBEVcFrQNg1Q=
Subject key identifier: 41:98:9F:A4:54:56:BC:A7:67:1E:67:88:F7:72:5E:33:59:25:8F:6D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B8DA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7F96999A574811F18A57EAB8CE1D38B0.roa
Signing time: Sun 24 May 2026 08:13:52 +0000
ROA not before: Sun 24 May 2026 08:13:47 +0000
ROA not after: Tue 30 Jun 2026 08:13:47 +0000
asID: 200758
IP address blocks: 45.194.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112858 (0x1b8da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 24 08:13:47 2026 GMT
Not After : Jun 30 08:13:47 2026 GMT
Subject: CN=6a12b340-7bef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:a0:0b:b9:a7:15:cc:ca:4e:a4:08:ed:bd:8a:
1e:ed:4c:ae:2d:dd:b8:73:7c:aa:7a:cf:0a:75:ef:
c9:6c:7b:2a:1a:4b:5b:8d:47:19:f0:9e:8a:4d:bc:
b7:94:1a:35:11:72:99:0d:00:81:0a:20:4e:c3:2f:
96:82:dc:85:db:93:ac:e3:9f:01:dd:ad:14:3b:b3:
cb:d0:0d:3b:35:69:f0:1e:36:81:dd:5c:4a:c0:86:
a0:fa:3d:14:2e:51:32:0f:17:42:c6:2f:f8:04:ff:
45:38:10:0a:1c:87:f3:e3:e7:d0:d8:ee:a0:22:3e:
5e:37:35:e6:d3:ef:50:70:f3:88:9a:1c:86:9c:22:
0f:16:53:13:d0:19:a2:40:9d:61:ac:a5:15:c0:8e:
f9:f2:05:07:93:ce:8c:02:bb:a6:01:66:b0:cb:f2:
5b:49:f9:e6:b8:b0:f6:62:fe:09:c3:10:09:dc:1a:
da:a9:98:0d:39:b8:d4:f0:72:71:5c:13:d6:59:70:
3c:69:3b:b5:06:0f:82:5e:86:67:45:8b:b8:f4:df:
f3:e1:26:30:11:a1:f9:60:54:c7:a0:8d:61:e7:d3:
dc:07:8e:b0:31:c5:aa:94:3f:f4:5e:75:2e:cd:89:
85:e8:71:8a:1b:09:c9:32:38:88:60:6e:b6:b5:9a:
a2:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:98:9F:A4:54:56:BC:A7:67:1E:67:88:F7:72:5E:33:59:25:8F:6D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7F96999A574811F18A57EAB8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.44.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:25:c1:0f:e7:ba:c3:b8:98:d0:b9:a7:c3:2f:c9:65:e0:b3:
c3:e9:ce:9e:95:12:a8:ad:5e:07:9f:7f:c1:07:86:cf:e6:81:
69:dd:d3:d6:29:1c:fb:00:26:0f:08:3f:04:b8:78:d6:20:a3:
21:d9:c7:3f:89:71:12:92:26:43:3f:dc:de:30:74:aa:29:2d:
8a:bf:c3:99:02:40:01:2a:5b:18:a6:10:59:ad:03:e2:95:c1:
12:8f:ac:5a:9f:46:ba:ae:82:3e:0f:b7:a0:ee:1b:a2:fc:25:
69:0f:78:0a:9d:a7:33:96:d6:5a:40:d9:8b:f9:b1:00:e5:f6:
05:8f:b0:2b:df:63:e1:e0:5c:6c:d3:51:e8:fa:5c:60:27:c1:
b3:0e:d0:51:dd:6d:cc:ba:64:66:a4:a5:fb:17:25:62:d2:96:
61:e1:8a:85:1c:7b:12:8a:e8:87:73:b8:4d:b7:a5:b4:45:ef:
77:cf:e6:d9:02:75:cf:86:37:a5:cc:bc:1e:e2:3e:0d:20:22:
18:81:da:eb:7c:d1:a3:75:2b:9b:b0:dc:06:83:7b:c1:3a:12:
21:69:58:1c:c0:76:19:a5:84:51:a8:c2:10:25:0c:1d:99:3f:
54:7a:82:6e:8f:43:56:95:d3:5a:43:c1:19:bc:cc:02:49:75:
c3:e9:0c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:07:31 2026 by rpki-client