Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A4F55AE84F5D11F1B40FD1FFCE1D38B0.roa
File: A4F55AE84F5D11F1B40FD1FFCE1D38B0.roa (raw, json)
Hash identifier: uONBq3v3kjK9N3ZMCGtQ1/KJRW/1zA3LPa5hb1ZA5k4=
Subject key identifier: DE:4F:E4:61:92:C5:AD:3F:34:42:EE:80:51:30:71:16:AC:87:4E:CB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B467
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A4F55AE84F5D11F1B40FD1FFCE1D38B0.roa
Signing time: Thu 14 May 2026 06:25:05 +0000
ROA not before: Thu 14 May 2026 06:24:58 +0000
ROA not after: Fri 14 May 2027 06:24:58 +0000
asID: 36898
IP address blocks: 45.205.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111719 (0x1b467)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 14 06:24:58 2026 GMT
Not After : May 14 06:24:58 2027 GMT
Subject: CN=6a056ac0-eb8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3b:9a:7c:6f:10:1a:56:83:d0:7f:d3:00:45:
8b:b5:2f:11:3f:e1:7f:4e:99:49:b2:62:64:c9:ae:
26:3b:2e:4d:a9:87:a5:52:cf:48:65:2b:cb:85:8f:
f0:02:14:01:62:34:3b:b1:40:24:9b:a7:39:30:b6:
c0:b2:76:3d:6a:e5:10:db:a6:18:f6:79:57:c9:47:
4b:8b:e8:96:9e:b0:7f:51:22:24:0c:bb:dc:b5:d9:
7e:32:81:5f:cb:9f:54:bb:fd:6f:17:f9:23:17:c3:
18:ec:6c:27:38:ec:51:0e:f6:f9:fa:4c:12:c4:e6:
32:67:1a:b9:e7:44:d8:e3:0f:90:0d:50:f6:21:92:
4b:05:89:77:cd:54:01:86:68:9e:f6:1b:95:ff:47:
d7:0e:ab:8f:b8:12:8a:37:8a:54:dd:cf:31:5f:0f:
61:64:79:e0:e6:ac:a4:8f:36:80:d0:3f:79:93:8a:
74:c2:7a:2c:5b:3d:c4:5b:eb:32:f8:7c:e8:23:18:
ee:79:64:d9:56:57:37:b3:ec:0d:54:b7:5c:e2:02:
78:4a:ab:e1:11:8a:68:9f:b4:a2:76:3e:77:c9:43:
df:38:6d:b6:2e:3b:23:dc:c1:c7:58:32:40:81:f1:
c4:cb:3e:26:ae:0a:35:97:e6:42:eb:bf:4e:9f:42:
ac:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:4F:E4:61:92:C5:AD:3F:34:42:EE:80:51:30:71:16:AC:87:4E:CB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A4F55AE84F5D11F1B40FD1FFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.216.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:da:4d:8a:86:7c:88:8d:10:cd:95:b5:79:e0:fe:7f:8f:db:
0a:d0:7f:2a:f8:21:4d:fb:8c:bf:3c:f0:4d:64:c6:c4:12:e4:
c0:5a:91:e4:0c:55:69:e9:60:a4:d2:02:df:3f:ff:c6:d0:cb:
e3:f1:71:f6:4c:9b:5e:c2:1d:67:b4:17:48:ce:97:47:aa:80:
bd:23:06:08:d8:ea:a1:31:28:f1:c7:a3:60:27:30:08:16:09:
83:dd:0a:dc:5c:68:9c:aa:cc:f6:54:41:a2:00:95:df:8a:1a:
e2:ab:81:55:4f:eb:ec:ff:11:33:b7:d8:fe:df:4c:c7:b8:77:
46:d2:71:9f:41:8a:c1:c5:eb:dc:2d:a8:da:35:81:a8:d1:fe:
dc:66:bf:f8:ee:d2:a9:d9:51:30:d8:1e:bc:d0:e2:05:76:b4:
b9:9d:c0:b4:8c:67:62:d8:07:e3:5d:01:58:19:ce:c3:2a:d4:
b7:e5:6c:d3:61:a6:af:a3:02:27:01:cc:7d:d2:41:c1:f1:1a:
8e:44:4c:ed:b3:3f:bf:65:7a:ad:d0:cd:bf:6e:77:21:ac:37:
3a:d0:9e:bc:6c:b5:66:a9:fb:50:14:80:48:66:b9:bf:68:5a:
30:de:da:bc:a9:cd:6a:84:85:c4:9a:12:7f:9c:68:44:76:b4:
3b:18:92:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:14:05 2026 by rpki-client