Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A9F73AE8506B11F1BB6651DFCE1D38B0.roa
File: A9F73AE8506B11F1BB6651DFCE1D38B0.roa (raw, json)
Hash identifier: p0fMeu5FOhOBJ2tXIaD11e6jCH51s+aWXIzLytmn1TE=
Subject key identifier: 4F:42:69:E5:C7:35:A5:0C:85:FE:24:54:87:AA:72:FA:03:E7:FC:60
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B4B4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A9F73AE8506B11F1BB6651DFCE1D38B0.roa
Signing time: Fri 15 May 2026 14:37:57 +0000
ROA not before: Fri 15 May 2026 14:37:52 +0000
ROA not after: Sun 21 Jun 2026 14:37:52 +0000
asID: 271875
IP address blocks: 45.195.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111796 (0x1b4b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 15 14:37:52 2026 GMT
Not After : Jun 21 14:37:52 2026 GMT
Subject: CN=6a072fc5-474c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:3f:96:75:50:09:5b:33:ac:47:61:d3:24:d9:
ac:8d:d7:49:a9:db:1d:d2:47:9b:99:62:16:0f:4c:
a0:1f:7f:c3:80:50:4a:e9:7a:a9:e6:90:65:f9:76:
f0:df:a6:52:86:a7:34:61:7e:ce:a7:f5:ee:f4:87:
72:e9:a2:83:af:82:58:ad:ff:d1:99:bd:97:6e:0e:
40:18:cd:80:04:f7:a0:3c:e7:33:7b:8c:47:88:fc:
3f:3e:d9:82:b4:c5:9e:bb:09:9b:fa:97:9e:3d:06:
54:c4:90:bd:03:82:97:2b:c3:43:45:19:dc:ac:f9:
65:b1:f6:ae:c0:6e:50:4b:37:34:b3:97:39:bd:82:
09:51:5e:58:95:ff:45:a7:30:7d:d2:bd:31:f6:bb:
38:5d:38:cc:fa:48:1f:05:99:a5:ad:1d:88:82:4d:
2f:d1:e0:8f:ea:65:e5:22:1b:31:12:4d:a5:c3:0f:
e3:46:59:96:ca:5d:a1:8e:d0:b8:8d:92:f3:12:84:
e0:5e:d8:34:27:22:1f:29:c7:c5:90:e2:ac:0c:df:
d8:f7:de:6d:c3:67:5b:1f:e1:9c:1c:bb:7f:18:a6:
ca:03:db:2d:3f:04:9b:c0:66:b6:85:e5:05:c2:e0:
ad:4c:4f:11:a9:7c:9e:06:e8:a6:58:54:dc:73:35:
c0:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:42:69:E5:C7:35:A5:0C:85:FE:24:54:87:AA:72:FA:03:E7:FC:60
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A9F73AE8506B11F1BB6651DFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.25.0/24
Signature Algorithm: sha256WithRSAEncryption
12:7f:7e:b4:51:34:75:67:b0:99:be:e3:18:a8:de:3b:cc:fe:
78:fd:be:57:18:d4:e3:41:76:8d:73:86:b4:ea:e8:92:61:ce:
40:d5:75:d1:42:23:4c:1a:d4:bd:39:cc:78:01:73:a6:77:b6:
db:0e:91:3c:5e:7c:2b:ec:c2:f8:3f:ca:4b:a5:a7:dd:12:ad:
47:64:8f:c9:9c:39:a3:2c:8e:69:6c:34:66:c6:0c:88:38:77:
53:d3:0c:41:88:f7:62:55:86:41:38:fc:83:14:54:1b:91:60:
e9:30:52:f3:31:90:8b:d8:03:47:75:b0:71:4c:c8:04:cc:14:
52:54:a2:e4:c5:62:26:c3:c3:a2:08:cf:1f:46:11:04:73:a7:
e4:4c:65:c6:7a:48:df:76:9a:44:4a:be:fa:41:95:87:11:39:
0f:dc:a0:1b:17:03:11:a3:11:2a:4a:db:4d:ec:30:5d:24:37:
4c:fe:c1:a2:5b:24:e8:9d:39:b8:d4:cd:b1:a6:ef:73:47:28:
6c:ce:bb:43:a7:73:80:be:85:bc:1d:01:f6:77:5c:23:96:35:
b4:16:14:39:0d:fa:60:81:be:fc:14:28:01:59:38:39:1a:2b:
98:ce:c4:a2:67:b9:29:a4:f4:f6:51:4d:94:23:90:6d:30:cb:
72:3c:96:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:07:19 2026 by rpki-client