Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9E7D9A50581C11F193FF6ABFCE1D38B0.roa
File: 9E7D9A50581C11F193FF6ABFCE1D38B0.roa (raw, json)
Hash identifier: u4MDLlq1/t5C2d148wqWuZCE4CZas2+Glv6Nxecmmkg=
Subject key identifier: 8A:20:D1:2A:A4:32:38:29:69:59:AF:14:34:37:C3:6E:8C:AA:D1:C2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B978
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9E7D9A50581C11F193FF6ABFCE1D38B0.roa
Signing time: Mon 25 May 2026 09:32:19 +0000
ROA not before: Mon 25 May 2026 09:32:12 +0000
ROA not after: Mon 29 Jun 2026 09:32:12 +0000
asID: 36352
IP address blocks: 45.202.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113016 (0x1b978)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 25 09:32:12 2026 GMT
Not After : Jun 29 09:32:12 2026 GMT
Subject: CN=6a141723-1c55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:63:9f:35:7d:0d:de:66:ef:34:b8:0f:58:d2:
41:3c:8e:ea:84:79:bb:8d:d7:77:31:2d:94:fe:b0:
ba:d7:95:93:2b:04:d9:4f:8d:44:b0:21:25:33:58:
90:59:dd:07:4e:5d:bc:15:0a:04:dc:ba:67:99:fb:
72:61:97:e6:9a:94:51:a1:ca:3d:92:7f:0c:dc:db:
16:7f:a7:00:2e:fa:a8:16:17:07:3a:60:47:6f:61:
bb:b3:3d:89:d4:44:90:ab:88:65:9c:23:e3:29:69:
9f:83:69:5f:69:c1:8a:24:1f:51:82:7e:09:fb:a4:
bc:ec:09:0f:5e:37:6f:4c:a7:c2:2d:49:dd:38:eb:
6f:c4:e6:3d:97:fa:10:81:70:01:d1:e0:b2:50:d3:
b3:ea:ab:aa:bd:f0:d2:8d:96:d0:3a:1d:e6:e3:25:
be:e8:23:ef:21:15:9e:4e:e3:63:3c:71:96:17:bd:
b5:f9:be:5e:b7:12:19:01:ed:33:9a:51:90:9b:67:
3f:8b:e7:66:84:b4:32:74:53:87:c5:b2:39:72:b3:
91:79:7e:54:91:c2:8d:15:63:8a:cb:8a:cc:c7:6f:
b0:81:d0:f4:19:a3:f1:dc:21:92:2f:73:7b:74:1e:
91:8d:5d:9b:7d:73:76:5b:ce:ac:f8:65:04:0c:af:
e7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:20:D1:2A:A4:32:38:29:69:59:AF:14:34:37:C3:6E:8C:AA:D1:C2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9E7D9A50581C11F193FF6ABFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.114.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:e2:39:c6:60:79:f3:52:51:18:83:b4:b2:86:30:2a:f0:01:
88:60:f7:dc:4b:bc:48:4c:a7:2b:3e:52:b1:30:cc:a7:d6:b2:
d8:43:90:87:28:ae:d8:22:ce:6f:b1:24:da:21:0f:53:ce:42:
90:2b:19:c4:ea:3e:65:45:89:15:c6:c1:74:f3:f6:db:07:c9:
57:ea:11:59:75:b2:4d:ca:3d:7c:e2:bd:25:a4:dd:92:ab:39:
f0:6f:5c:28:29:18:30:b8:d2:14:1c:d2:c6:08:95:5a:22:b4:
31:4a:f5:29:f9:90:c3:98:0b:1d:63:f7:53:5b:bd:e7:43:9a:
fe:d7:0b:0f:94:f3:c8:f8:ba:2e:24:de:5c:89:d5:1d:82:3d:
b3:16:ec:2a:35:c0:25:45:58:49:51:10:1c:85:9a:b9:c9:48:
49:c4:72:e2:a7:f4:13:7f:69:59:7d:6a:6f:4f:91:41:60:df:
d3:9a:14:7b:b9:fe:3a:86:95:01:83:e5:6d:0a:85:48:57:b6:
42:13:19:b0:2d:fb:e5:27:61:39:3b:93:fa:61:e5:99:4d:f3:
1c:c4:a0:fc:b1:65:c8:6a:2f:b7:fd:92:8e:32:cd:bb:21:11:
35:a2:bb:ae:d2:74:52:1a:be:0b:39:05:38:e6:6e:5f:4f:7d:
55:1a:48:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:14:40 2026 by rpki-client