Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A7DF0CD64F6C11F18D6106DACE1D38B0.roa
File: A7DF0CD64F6C11F18D6106DACE1D38B0.roa (raw, json)
Hash identifier: DreWQRSI41sD5rjC0vEG1vE7tQ1Z0GoTNuCo/AhQPso=
Subject key identifier: 92:4B:02:0B:37:45:EA:33:DE:F9:AB:9C:9F:48:E6:43:12:E1:E9:D9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B483
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A7DF0CD64F6C11F18D6106DACE1D38B0.roa
Signing time: Thu 14 May 2026 08:12:32 +0000
ROA not before: Thu 14 May 2026 08:12:27 +0000
ROA not after: Fri 26 Jun 2026 08:12:27 +0000
asID: 199185
IP address blocks: 45.198.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111747 (0x1b483)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 14 08:12:27 2026 GMT
Not After : Jun 26 08:12:27 2026 GMT
Subject: CN=6a0583f0-88ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:35:cd:01:0b:87:08:6c:19:98:a2:4f:49:11:
c0:55:66:43:0d:df:6e:2b:42:79:31:67:e3:ff:ae:
f6:5a:b9:9f:57:bc:73:a3:0a:06:e8:43:0f:84:e3:
1c:a3:28:1c:5a:e8:3a:b0:88:7a:73:40:75:74:a1:
23:b9:4b:c7:4b:de:3d:b7:3d:e5:43:8a:b8:9e:6d:
d9:11:0b:42:45:77:1e:4e:1b:a1:61:1f:fa:2b:7b:
4a:66:4e:da:2f:17:4a:a6:14:10:bf:14:6b:0a:b3:
44:58:51:09:88:86:14:61:b2:29:18:6e:11:6c:e2:
66:68:5e:79:a6:d1:d0:77:92:86:81:45:9e:66:5e:
f2:bd:da:17:09:99:8f:4e:9d:f3:20:7f:71:c7:22:
43:f3:38:59:50:4f:fb:64:fe:57:8e:95:b3:ac:ea:
9a:b9:d6:8e:0a:86:98:f5:57:73:b8:45:5d:b3:6a:
55:22:fe:01:1a:1c:69:3b:0e:49:ef:81:ec:68:d1:
9e:2d:cf:46:d0:ea:ba:e8:33:10:63:5a:2d:84:40:
13:d7:8f:c9:99:2e:21:81:83:7c:1c:47:77:64:fd:
aa:4d:22:c1:6f:27:af:2d:5f:3a:78:ab:40:89:a4:
70:e7:61:ef:7e:c4:8f:c0:f2:e0:a0:6f:c2:f4:64:
90:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:4B:02:0B:37:45:EA:33:DE:F9:AB:9C:9F:48:E6:43:12:E1:E9:D9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A7DF0CD64F6C11F18D6106DACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.139.0/24
Signature Algorithm: sha256WithRSAEncryption
97:2e:72:0e:ab:0f:13:67:0e:9c:04:b2:51:10:b7:d1:ce:20:
ba:87:67:15:eb:93:19:93:f6:fc:32:e2:37:1f:95:f2:ee:4f:
57:94:48:7b:61:ed:56:7f:d2:3b:a4:a7:b2:7b:3b:bf:a6:d7:
bd:bb:cb:91:08:d5:10:46:66:95:b5:32:f0:04:d7:53:99:7b:
33:4a:4b:78:72:41:3d:de:11:3e:31:e2:00:33:7d:17:67:a5:
cf:49:66:13:17:78:83:13:55:49:6f:1c:23:4e:38:a4:1f:5b:
c9:cd:40:42:d1:34:4a:2f:21:c8:d2:7d:f8:d4:66:75:a2:6e:
09:18:ee:55:c3:3f:0c:13:ee:52:de:1c:99:44:6b:79:97:00:
20:fb:76:85:84:b3:61:47:c3:1d:c7:84:15:29:f9:db:a0:2b:
88:9b:34:0d:48:e6:05:eb:0c:13:83:98:01:05:00:d1:a5:cf:
82:73:0a:d6:f5:18:c1:49:9a:b4:f5:1e:a5:81:01:ca:18:ec:
f2:ed:be:ff:65:f3:bc:b6:63:34:5c:5b:bf:eb:34:c9:b8:c9:
db:84:2e:da:f8:e4:53:8b:b4:4c:ad:e2:a1:ad:ad:be:1b:35:
36:8f:2e:03:41:5d:27:03:6d:5e:ea:5c:1d:7e:d1:36:a1:31:
f7:27:2d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:21:25 2026 by rpki-client