Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A80265B63A6111F1ABCB5001CF1D38B0.roa
File: A80265B63A6111F1ABCB5001CF1D38B0.roa (raw, json)
Hash identifier: scT5nWszsC5ftcUcwD120CECDnY64eccn8zjAptnVqY=
Subject key identifier: 25:CB:AA:D4:B3:7B:2F:29:78:71:FA:70:FB:23:93:45:4A:F5:D4:D4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AD74
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A80265B63A6111F1ABCB5001CF1D38B0.roa
Signing time: Fri 17 Apr 2026 13:30:53 +0000
ROA not before: Fri 17 Apr 2026 13:30:49 +0000
ROA not after: Tue 02 Jun 2026 13:30:49 +0000
asID: 135222
IP address blocks: 45.195.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Apr 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109940 (0x1ad74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 17 13:30:49 2026 GMT
Not After : Jun 2 13:30:49 2026 GMT
Subject: CN=69e2360d-0720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bc:89:36:cf:a1:b0:8c:6e:85:61:7e:22:28:
9a:0e:89:70:cc:00:48:b4:1e:df:b9:ba:51:d3:ef:
04:b8:02:29:9f:04:13:62:ec:20:bb:d6:4d:94:ce:
80:9a:4c:ae:b6:dd:45:81:ef:13:33:42:09:07:ad:
41:6b:ff:82:49:db:2e:50:60:9a:1f:39:21:de:9f:
a8:1e:de:e9:f5:86:fd:b6:87:ed:dd:c0:30:22:64:
d7:23:48:08:0d:93:88:23:5f:90:9f:0c:03:2a:97:
08:eb:e5:ab:a3:1e:17:4c:ec:d6:4f:83:41:68:c7:
67:df:a5:22:14:4f:82:42:f2:aa:1b:26:be:a6:01:
1d:c5:a9:2d:ae:34:3a:65:cc:50:9e:61:98:d1:98:
e5:c7:c3:9b:95:60:1d:2d:84:0e:fe:43:f9:26:d7:
96:39:b5:cd:f6:d1:cb:33:38:59:97:11:4f:cc:b3:
45:32:b8:b3:d5:b3:1b:be:2e:a4:56:ea:f3:28:21:
3f:79:5a:7f:3b:8b:10:cb:8a:6d:67:b1:5c:84:fb:
e0:24:e6:cc:72:54:34:c7:6d:03:e9:f8:7b:03:44:
f1:7b:6d:d3:53:c9:32:29:9b:16:01:09:6e:31:24:
f4:6b:06:94:82:7a:c4:46:80:44:70:30:d4:7c:e7:
96:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:CB:AA:D4:B3:7B:2F:29:78:71:FA:70:FB:23:93:45:4A:F5:D4:D4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A80265B63A6111F1ABCB5001CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.159.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:10:51:32:f4:e5:08:44:90:c0:6c:e1:26:8d:8e:40:29:b3:
2b:0c:05:6e:f3:f3:de:a9:e3:bf:b9:5d:61:dc:e5:88:7b:32:
96:35:e5:4d:c1:df:68:84:4f:26:63:a9:9d:00:a2:1a:dc:f2:
4a:31:ab:a8:4f:f5:68:9a:8c:6d:d8:d6:d1:00:f8:db:8a:08:
46:20:ae:46:ba:74:eb:c0:da:78:5a:d7:0e:16:77:3d:48:c9:
96:7c:3e:ec:52:ab:f3:f4:4c:24:2e:83:1e:6d:29:74:50:85:
94:9f:e6:ea:f3:25:2d:af:2a:fb:ba:74:98:ca:5d:df:95:33:
03:1a:8d:a6:04:5f:35:e7:81:ce:6f:eb:1c:c3:6d:20:ba:80:
80:69:dd:d4:03:d2:31:38:ff:ba:00:9b:57:d6:92:03:ab:62:
47:37:3c:45:17:70:28:ba:c4:d8:b2:c9:d7:ae:53:ff:53:b4:
93:08:f3:f5:0b:d6:88:2c:2e:65:1e:72:f8:56:e8:87:6a:d3:
b6:89:0b:20:8a:05:66:ac:05:9c:80:57:8a:cc:51:bd:32:b6:
42:43:44:48:79:33:49:88:0e:1a:7c:58:9d:69:ab:d5:6f:6c:
07:e7:33:12:ee:44:54:59:cd:0f:0a:6d:f0:6b:94:7a:fe:21:
7b:5a:d4:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 14:30:36 2026 by rpki-client