Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/89F36CEC45A511F1A79D32D4CE1D38B0.roa
File: 89F36CEC45A511F1A79D32D4CE1D38B0.roa (raw, json)
Hash identifier: LjgBJQh8xGHGrYbfQUrRPaUnfWuBKRQuRCNxF1pfKKw=
Subject key identifier: D6:3A:20:98:9C:E5:A0:B6:C3:4A:9D:B6:9E:9A:C2:85:5D:A2:65:E7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B102
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/89F36CEC45A511F1A79D32D4CE1D38B0.roa
Signing time: Fri 01 May 2026 21:34:31 +0000
ROA not before: Fri 01 May 2026 21:34:25 +0000
ROA not after: Sun 21 Jun 2026 21:34:25 +0000
asID: 212238
IP address blocks: 45.194.71.0/24 maxlen: 24
45.198.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 07 May 2026 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110850 (0x1b102)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 1 21:34:25 2026 GMT
Not After : Jun 21 21:34:25 2026 GMT
Subject: CN=69f51c67-b4b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:95:96:32:a6:73:b0:fd:3f:78:a9:f8:ab:00:
b9:27:50:e4:a2:34:fc:2d:dd:b5:97:18:22:d5:89:
21:66:d9:57:d9:09:18:f5:89:74:39:2d:f2:6d:a3:
c3:32:7a:53:95:e8:ca:d8:60:5e:a1:63:7e:d0:ef:
7a:1c:59:0b:7b:09:ef:29:2c:c7:46:06:5d:c6:91:
22:9b:3d:bb:fe:f2:f6:ef:59:5c:c6:43:db:85:d6:
0a:bb:41:23:01:13:d5:a3:83:e8:50:3e:a7:c0:f9:
10:1a:69:33:3c:5a:39:ef:1a:8c:6d:ac:ed:d2:6d:
fd:3b:a5:19:95:3e:d9:94:dc:52:9c:5d:70:5d:96:
68:c8:06:f4:01:20:15:ef:6e:82:73:89:3e:46:88:
85:5d:1c:6d:70:fb:fe:6a:f8:a0:c6:60:00:55:24:
2d:1a:b9:8b:4c:69:f7:5b:4f:d0:d0:17:47:df:43:
61:fa:bd:7c:af:e5:b2:c0:16:09:a4:1a:de:ab:4b:
73:40:f1:0e:b2:dc:09:bf:2d:6c:46:63:2e:7b:f6:
0c:fd:d5:4c:6b:51:7c:10:ef:14:b8:88:76:c0:74:
f8:6d:88:a1:ef:6e:ba:0f:c7:d6:bf:16:63:ca:8a:
3d:f1:56:51:15:bf:b9:60:cb:62:8c:0e:58:dc:5f:
a2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:3A:20:98:9C:E5:A0:B6:C3:4A:9D:B6:9E:9A:C2:85:5D:A2:65:E7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/89F36CEC45A511F1A79D32D4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.71.0/24
45.198.80.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:36:19:65:06:57:fb:d2:c6:ba:b4:3e:1e:f9:0a:f8:1d:52:
f7:b3:fd:7c:ec:10:b8:da:81:f6:6b:b6:18:a8:e9:e0:c0:c8:
bd:bc:c3:fc:75:21:9f:77:d6:63:1f:60:3c:05:f2:80:3b:92:
e1:a4:98:46:84:bb:37:80:9e:10:18:bb:b7:88:80:50:f2:df:
f8:56:f7:e9:74:b4:49:fc:d4:5a:c8:25:55:cf:aa:2d:f2:0e:
70:37:92:b5:38:d4:91:1c:62:dd:f5:11:3b:b7:f3:8b:42:59:
b4:cd:6e:9c:e2:48:aa:c4:ef:1a:bf:48:71:31:13:53:4a:58:
f8:5c:d0:42:c5:aa:0b:ff:90:3f:4b:4f:df:bc:8e:73:cb:d4:
9e:2a:44:c1:9c:b2:81:e1:1a:f6:ca:17:fc:9c:1d:33:7b:9c:
57:59:f2:42:4d:89:9b:3d:53:a8:7c:cc:60:b5:ca:92:da:fe:
4b:79:16:6d:e7:2a:49:57:8e:5c:21:0f:27:31:23:61:3b:cd:
82:ba:ab:64:41:fb:7a:b9:c6:6e:58:d1:14:95:bd:ea:1a:ad:
be:82:0b:e1:56:eb:47:79:fe:34:8e:25:57:1c:a5:2f:fa:5e:
93:9e:df:07:08:d4:4e:43:57:a8:fb:2d:13:96:ff:1a:84:af:
ea:b0:02:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 23:15:44 2026 by rpki-client