Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/926D9060547711F1845B46F7CE1D38B0.roa
File: 926D9060547711F1845B46F7CE1D38B0.roa (raw, json)
Hash identifier: aXUApEZ/R2hOQV9cOG87d/qORHS/I7jxbCdKrlCiF4c=
Subject key identifier: FC:CC:5A:AE:A5:B8:39:BC:CA:64:C8:05:DB:D1:95:95:93:C2:9E:3F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B67A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/926D9060547711F1845B46F7CE1D38B0.roa
Signing time: Wed 20 May 2026 18:13:16 +0000
ROA not before: Wed 20 May 2026 18:13:11 +0000
ROA not after: Sat 20 Jun 2026 18:13:11 +0000
asID: 9121
IP address blocks: 45.196.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112250 (0x1b67a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 20 18:13:11 2026 GMT
Not After : Jun 20 18:13:11 2026 GMT
Subject: CN=6a0df9bc-8e90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:2a:bd:c1:cb:de:91:92:97:ec:1d:67:70:43:
6c:38:f0:78:3f:f1:c3:69:64:e6:8a:ec:fe:29:d3:
7d:2a:ed:35:4c:b2:9b:66:99:b9:17:50:dd:ae:be:
95:33:67:1c:96:66:a5:17:e3:a8:e0:74:7a:ff:5a:
58:f2:8a:ce:0a:24:43:d2:3e:df:a0:e6:06:33:22:
27:65:64:f0:07:d8:70:69:53:cf:d0:16:fe:9e:14:
fc:ea:17:3a:f0:28:60:c9:30:9b:5d:f5:fb:9d:8a:
d9:99:29:a0:10:92:af:2a:a7:ca:a9:14:17:c5:4e:
67:88:41:d8:5f:2b:13:d0:d4:8b:d3:eb:24:ff:42:
81:8f:16:6d:2e:7c:fb:52:8e:03:cf:12:e4:16:61:
e5:97:61:42:8a:ca:49:15:57:e6:26:b4:17:dc:66:
1e:9e:6d:a2:2c:0a:b9:93:1d:02:fd:b4:40:38:01:
1e:78:ca:03:4d:f4:c5:6d:01:44:9c:96:4b:c4:1c:
64:1a:10:9f:39:a3:7b:7a:60:5a:63:f8:27:2d:ba:
65:2e:3c:e4:e6:28:19:21:57:35:81:e6:8a:13:0f:
57:02:0c:0f:51:70:8e:95:1e:62:21:ce:52:66:f2:
61:8e:10:21:9a:1a:bb:13:60:18:08:39:17:e3:0b:
9d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:CC:5A:AE:A5:B8:39:BC:CA:64:C8:05:DB:D1:95:95:93:C2:9E:3F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/926D9060547711F1845B46F7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.163.0/24
Signature Algorithm: sha256WithRSAEncryption
43:66:ff:bc:c8:bf:9b:62:0c:21:2c:b6:61:1e:45:8e:c1:3e:
3d:1f:28:d5:c2:4e:06:18:75:87:f1:97:76:16:15:83:43:59:
90:60:02:1b:60:06:36:ec:61:13:30:f0:e7:ab:26:24:8c:57:
ee:9b:6d:e7:c6:f2:d3:a3:d3:04:c3:aa:a6:71:1f:e1:33:93:
62:b3:50:1c:af:c3:87:4a:34:ba:b0:b5:3a:2b:99:70:d2:a5:
03:da:57:ac:c2:5e:d6:7d:4c:12:7a:c4:a1:6d:08:23:4c:2d:
19:ea:a4:a2:3e:01:ea:1e:8c:9a:1c:20:40:30:a4:50:e0:f3:
fc:5a:3a:c5:7b:d0:8b:68:69:f8:2d:9c:5b:10:eb:1e:e1:d7:
52:52:f5:8e:21:24:e0:d6:b8:2c:11:ef:46:bf:ce:da:0e:59:
8e:4c:bb:63:3b:8b:46:3a:8d:13:1e:a3:2b:ea:32:37:64:71:
2b:f2:d1:eb:af:01:f8:26:c4:ab:0e:73:78:69:6b:8e:0a:61:
2f:4f:83:30:8e:01:98:ba:07:c6:43:aa:af:da:a5:3d:9d:37:
8c:2b:ec:61:88:68:d6:86:c0:6e:d9:b4:f1:98:99:b6:1b:cc:
13:63:d7:d2:3e:1d:8d:bf:77:7e:a3:88:57:ff:6f:05:aa:5e:
72:6a:67:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:14:10 2026 by rpki-client