Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9FB0FB08578411F18C2B1B1BCF1D38B0.roa
File: 9FB0FB08578411F18C2B1B1BCF1D38B0.roa (raw, json)
Hash identifier: RxG2IpMzlcmEEgREv3P2RpYSSWF/CqVliBYbhDeeBqg=
Subject key identifier: 3A:32:BF:CF:CC:FB:C0:C2:B8:40:3B:B3:2F:79:72:CF:F8:B2:E1:27
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B90E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9FB0FB08578411F18C2B1B1BCF1D38B0.roa
Signing time: Sun 24 May 2026 15:24:15 +0000
ROA not before: Sun 24 May 2026 15:24:11 +0000
ROA not after: Fri 03 Jul 2026 15:24:11 +0000
asID: 214769
IP address blocks: 45.202.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112910 (0x1b90e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 24 15:24:11 2026 GMT
Not After : Jul 3 15:24:11 2026 GMT
Subject: CN=6a13181f-00b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6e:8e:86:65:c3:77:08:6d:48:26:fa:75:03:
10:a7:ac:d2:e6:c9:1c:4b:75:d6:10:c3:c9:e1:b2:
de:e4:f0:0d:e1:8d:3e:63:9b:be:e1:2c:f5:df:e8:
4b:40:62:9b:d5:62:01:bb:0c:ae:96:14:11:5c:42:
4d:ff:3b:05:42:e2:9e:05:d9:bc:df:51:b3:26:87:
18:af:36:31:fa:2b:bb:1c:24:e5:b9:57:30:e7:02:
fd:f5:00:29:43:0d:f5:ee:af:a3:b6:4a:6a:5c:e0:
15:8b:5f:da:1e:a8:9a:64:17:e1:ff:6e:4d:90:b4:
08:ac:80:64:63:bb:d6:72:27:dc:79:f7:67:d7:49:
bd:97:43:e2:dc:ff:fe:5d:b9:f9:70:0b:06:8b:1e:
1e:f2:08:36:35:7d:eb:e8:95:1f:cb:cc:83:65:7a:
52:ab:8c:ed:64:13:2e:c7:b0:97:7a:1f:19:90:77:
39:a3:7a:23:4c:84:46:e4:b2:82:3b:b6:b0:42:72:
ff:8a:37:a6:96:fc:60:de:7f:d2:24:0b:cb:5e:63:
99:5c:bd:a0:9b:1f:b0:9c:d7:21:82:2b:71:b5:47:
76:19:89:6f:55:ca:e3:5a:5c:46:a3:05:19:b7:d4:
7d:41:08:f2:2c:37:2b:c7:76:95:7b:2a:10:3b:bb:
e7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:32:BF:CF:CC:FB:C0:C2:B8:40:3B:B3:2F:79:72:CF:F8:B2:E1:27
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9FB0FB08578411F18C2B1B1BCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.69.0/24
Signature Algorithm: sha256WithRSAEncryption
67:dd:2e:b8:f0:31:eb:9d:0a:39:fa:98:20:5c:fe:d7:95:68:
56:e7:83:69:56:5e:95:e8:59:9c:b0:d8:fe:03:4c:8f:b8:31:
1f:84:f4:4b:5e:d5:dd:e2:71:b1:22:7e:34:03:b5:01:2b:fd:
11:58:11:80:c5:3a:35:8d:f0:e5:fc:32:be:8e:c6:8f:52:73:
b8:7c:e6:ba:0e:0f:8d:37:54:8d:b6:04:35:48:8b:ef:8f:79:
db:0b:9d:73:06:96:da:7b:c7:46:0d:a7:2f:1e:8e:3d:b6:2e:
8c:c9:94:7b:eb:ff:cd:d9:20:af:c4:4f:24:8c:6f:8e:68:5d:
56:9a:51:20:15:e1:9f:c4:6f:a2:ae:fc:68:3c:96:c0:fd:7b:
9e:9a:c2:b6:16:c7:db:80:3f:44:99:39:92:e3:c2:44:0c:dc:
3e:bc:15:05:81:68:29:98:db:18:9b:b2:02:b2:d1:b7:b1:a9:
c0:f3:8d:4e:4c:7c:43:b4:49:fe:93:84:fc:9a:2d:9b:57:de:
00:f1:12:00:4f:e8:dc:29:99:da:19:90:de:cb:56:ad:9c:40:
b7:59:5e:b7:77:22:48:95:52:bc:86:65:75:bf:a5:d8:86:25:
3b:14:a2:07:44:87:ea:a4:14:1d:b7:44:a2:91:3d:05:5e:f1:
40:c4:2c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:07:26 2026 by rpki-client