Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/94A341A2696E11F1ACCCC0FDCE1D38B0.roa
File: 94A341A2696E11F1ACCCC0FDCE1D38B0.roa (raw, json)
Hash identifier: RJw5Rp8seCsxgtSe/IVkSmxRLaYuT5qnt6H9n9q0o/4=
Subject key identifier: 0D:E0:65:68:77:07:CD:41:06:9A:F1:01:6C:68:70:9A:A1:0B:2A:3D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BDF0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/94A341A2696E11F1ACCCC0FDCE1D38B0.roa
Signing time: Tue 16 Jun 2026 10:31:49 +0000
ROA not before: Tue 16 Jun 2026 10:31:44 +0000
ROA not after: Thu 16 Jul 2026 10:31:44 +0000
asID: 401701
IP address blocks: 45.192.96.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 22 Jun 2026 00:26:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114160 (0x1bdf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 16 10:31:44 2026 GMT
Not After : Jul 16 10:31:44 2026 GMT
Subject: CN=6a312615-6f63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5c:32:a3:57:43:8b:04:87:4f:ba:72:04:e0:
17:16:6a:9d:83:99:4b:e8:87:f6:0b:7a:0c:dc:c9:
87:a6:61:02:3e:27:2b:b8:2a:7c:8e:23:b1:8e:a3:
31:d8:20:5d:d4:32:75:1b:94:1c:f4:67:50:8a:33:
2a:67:3a:80:d4:1e:56:e2:13:04:a3:83:6f:52:5a:
3c:f5:36:8d:3b:3f:a8:09:95:79:dc:4f:0e:57:0b:
dd:d9:a8:5f:fe:f2:e1:2e:0e:57:d1:9e:7b:13:c9:
77:24:51:a0:dd:76:d7:48:54:4f:be:42:2a:a6:26:
ee:9a:86:9c:06:c0:35:23:48:7a:68:32:7d:0a:9e:
2b:e6:c1:e7:0d:94:94:c9:b6:91:62:c3:7f:cf:f6:
6c:23:8b:75:cc:0f:fa:78:89:76:c7:16:bc:e4:05:
48:93:35:19:57:6d:a8:f8:5d:7b:18:b4:1e:d7:12:
fd:ed:49:8a:88:9f:2e:fe:37:a4:9a:1f:56:24:6a:
ee:28:fe:97:80:a9:1d:e4:a5:b8:70:58:75:7f:ad:
22:92:ff:89:3f:55:f9:dc:ae:84:c6:d7:9b:33:41:
af:d7:13:8b:1d:b0:0c:2b:11:5a:78:b4:22:ce:91:
39:54:bc:84:84:a6:b5:ca:79:cf:2c:81:19:77:15:
f4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E0:65:68:77:07:CD:41:06:9A:F1:01:6C:68:70:9A:A1:0B:2A:3D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/94A341A2696E11F1ACCCC0FDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.96.0/20
Signature Algorithm: sha256WithRSAEncryption
a1:f3:fc:65:b2:31:fd:13:4b:e8:8e:57:23:18:c4:7d:0e:67:
39:f6:d3:4c:17:30:fb:59:a0:bd:d6:03:e2:68:78:f8:2e:cd:
ec:06:9d:59:55:b6:62:2b:ff:d0:fc:20:3b:ae:be:39:f6:80:
82:dc:2f:b9:c3:47:80:91:4b:aa:4d:ea:2e:c3:83:e1:b4:2e:
7f:58:1e:f8:3b:16:33:8d:fa:78:bc:71:79:fa:b5:49:36:ec:
bb:a1:3f:b1:84:2e:a2:62:61:d9:92:a5:ac:08:79:8f:51:7b:
bd:6a:52:87:89:76:e4:76:78:4a:fd:c0:6d:01:bb:1e:29:e3:
f8:8f:36:6b:bb:9c:2a:64:65:04:58:49:b1:ed:46:40:77:ea:
d1:2d:98:57:d9:5c:38:09:bf:d4:81:11:e1:8a:08:fe:6c:8f:
15:45:63:04:7e:2c:bb:00:07:41:fb:27:a0:d5:18:1b:4a:90:
76:a6:d1:0f:ac:4d:14:78:36:37:a5:5c:e8:3c:51:62:eb:5c:
17:ee:3f:e0:8f:95:98:af:85:80:a4:88:73:1d:5e:25:aa:77:
b3:53:40:de:c1:20:74:f7:10:38:b3:6d:c4:54:90:8b:a2:54:
fc:fd:81:fb:f0:c4:a0:d9:c9:74:96:74:27:72:53:ee:0a:b5:
75:b6:71:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 14:56:26 2026 by rpki-client