Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9E56AAAE4F6511F1B56F74AECE1D38B0.roa
File: 9E56AAAE4F6511F1B56F74AECE1D38B0.roa (raw, json)
Hash identifier: gczZJzPv3nbMDgH7u27Uk1oU5e0xJyYbciIzt536hVM=
Subject key identifier: BB:75:1B:51:17:AB:34:7A:BE:B8:51:20:8A:62:42:54:AB:68:B0:61
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B473
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9E56AAAE4F6511F1B56F74AECE1D38B0.roa
Signing time: Thu 14 May 2026 07:22:10 +0000
ROA not before: Thu 14 May 2026 07:22:05 +0000
ROA not after: Wed 01 Jul 2026 07:22:05 +0000
asID: 274868
IP address blocks: 45.194.100.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111731 (0x1b473)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 14 07:22:05 2026 GMT
Not After : Jul 1 07:22:05 2026 GMT
Subject: CN=6a057821-f4b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e6:4e:5d:7b:bc:30:b4:06:90:f2:4d:36:41:
1e:9a:2b:cc:b7:fb:d3:9b:b4:d6:7c:4a:9b:e9:e5:
88:1f:b2:60:b0:29:76:6a:24:da:35:29:2c:ce:a2:
ca:80:f7:93:ba:2e:d4:60:bd:d6:5c:44:b4:01:83:
2e:16:9f:1e:1d:08:e2:58:c2:56:32:39:a1:20:15:
34:df:6b:b8:e7:c3:11:a2:63:21:f2:33:60:8c:6e:
de:85:8a:cc:5e:9c:23:20:60:34:58:1b:d1:8a:cf:
22:e9:07:13:c3:53:f6:8d:28:8e:08:1f:5d:eb:89:
2b:60:26:2d:fe:e7:3b:78:fd:5e:1c:8d:71:92:91:
4d:66:0c:3d:b0:d5:23:6a:d1:ed:e1:c0:01:de:7d:
a6:76:bf:73:79:52:9f:2e:7c:5d:1e:9d:a8:aa:a9:
50:30:e7:a1:01:23:e1:4c:50:5f:ba:49:5b:bf:ce:
d1:2f:c0:08:ad:a9:89:92:c8:d3:8d:da:89:6b:27:
8f:85:a0:17:9a:56:ef:a9:d8:0f:89:43:66:83:60:
c2:07:d3:26:41:3e:ec:78:dc:e1:fc:7b:22:a6:27:
ad:9f:9c:94:82:ac:ca:3d:32:85:26:95:02:b6:4a:
48:36:d0:0c:e3:20:e6:fd:bb:4f:d6:76:dd:8c:a8:
eb:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:75:1B:51:17:AB:34:7A:BE:B8:51:20:8A:62:42:54:AB:68:B0:61
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9E56AAAE4F6511F1B56F74AECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.100.0/22
Signature Algorithm: sha256WithRSAEncryption
bb:ee:49:69:d0:43:49:a3:7d:37:89:92:96:ce:78:7d:e3:2c:
52:e0:de:ec:f6:72:97:60:5a:dc:a5:19:ac:a2:fb:95:1c:67:
b5:71:1f:21:82:21:f4:e8:c3:b4:94:e5:d8:79:cc:da:84:c3:
3a:84:9d:7e:88:e3:17:57:32:c6:bb:be:98:d0:a9:fa:54:35:
f0:c5:07:fb:0c:ef:9b:92:6f:86:9d:de:b2:00:97:e8:4e:56:
ed:79:00:41:8d:1e:aa:52:63:5a:72:fe:16:75:73:36:72:7f:
a4:13:d9:c4:f0:8b:5f:5b:86:b2:89:39:68:92:eb:d1:79:ef:
d4:1b:52:25:0c:76:95:e3:07:a0:8f:69:ca:95:3f:4d:fb:0a:
0b:da:f3:26:24:1e:b7:05:c4:83:b8:a3:9f:16:13:73:3f:97:
4e:2a:91:81:22:6b:87:7b:d6:84:b4:c3:69:22:0e:15:6f:38:
87:03:ad:83:3f:2d:8b:94:36:fd:7e:4f:87:7f:31:49:5c:43:
9d:9f:00:dd:d8:90:b9:b9:31:9a:82:32:f4:e1:ff:c2:20:90:
ab:1b:96:02:1d:3c:67:09:93:44:aa:4c:5a:b6:88:d0:e9:fd:
3f:7c:56:c9:59:9d:5f:42:7d:00:34:e6:18:7a:84:dc:12:ab:
26:c2:6f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:28:52 2026 by rpki-client