Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B1009C5A328211F193A201F5DAE4EC9C.roa
File: B1009C5A328211F193A201F5DAE4EC9C.roa (raw, json)
Hash identifier: d9cxXIbJjuBcTV5EHPbVmL+JAfDgFNVIjvXoV+O/FcI=
Subject key identifier: 64:7F:F9:9B:B3:94:B2:99:6D:F3:BF:03:0F:B6:8C:85:38:48:50:F9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AAC1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B1009C5A328211F193A201F5DAE4EC9C.roa
Signing time: Tue 07 Apr 2026 13:07:12 +0000
ROA not before: Tue 07 Apr 2026 13:07:07 +0000
ROA not after: Wed 07 Jul 2027 13:07:07 +0000
asID: 36898
IP address blocks: 45.205.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Apr 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109249 (0x1aac1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 7 13:07:07 2026 GMT
Not After : Jul 7 13:07:07 2027 GMT
Subject: CN=69d50180-c412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:94:e9:95:39:79:c1:8a:1f:7a:65:64:0a:f3:
c4:bc:db:02:0e:b6:1a:0b:5f:bd:7c:a6:7b:8c:ca:
22:cc:7d:5c:80:d3:06:ce:34:e5:0e:e5:a7:05:91:
fc:57:a8:be:92:bb:cb:3c:a0:1c:7b:2b:bb:4d:01:
4a:da:98:b1:40:0c:cb:41:e2:9b:20:d5:af:85:bb:
30:1e:41:89:1d:80:a2:c7:d4:61:d3:4b:35:57:14:
e6:a6:8a:ca:f2:6a:98:d3:67:d7:02:48:05:50:d1:
da:b8:09:fb:5d:17:1c:79:84:e3:3f:66:ff:98:b2:
66:fa:30:b0:e2:e8:46:1e:92:5c:93:c8:11:80:ca:
96:ee:64:1c:b2:07:7d:28:66:6f:0b:22:09:1a:86:
bc:34:8f:44:62:df:db:28:0e:45:33:8f:e0:6c:50:
6d:48:f0:01:12:fc:1a:11:dc:0f:33:60:12:16:3d:
86:1a:24:4e:e9:15:37:2f:c0:60:21:b4:63:4c:f7:
4b:25:1c:48:b3:fc:1a:80:7b:86:0e:7f:45:c1:fd:
c3:13:3b:be:2b:5c:7e:ce:42:67:65:5c:a2:1d:f2:
05:c8:f9:b4:2d:c7:5f:79:35:cc:92:71:5b:ec:51:
91:ce:b9:ad:54:bc:dc:4e:de:82:9b:ae:2b:d0:e3:
03:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:7F:F9:9B:B3:94:B2:99:6D:F3:BF:03:0F:B6:8C:85:38:48:50:F9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B1009C5A328211F193A201F5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.73.0/24
Signature Algorithm: sha256WithRSAEncryption
07:c1:b4:f1:58:d4:54:4c:bc:7d:e0:ed:b7:16:ce:94:97:95:
cd:51:28:7b:1f:e2:96:dd:97:90:f5:17:cd:56:f2:c1:d9:f5:
db:54:ea:fc:cf:0f:08:1f:a6:08:37:27:f3:8a:b4:9a:7e:93:
1c:9f:c7:39:e1:ab:6b:1e:f1:31:34:89:fc:23:5e:ba:9b:41:
da:3f:cc:0b:35:b5:22:fc:07:dd:18:c7:87:9d:67:2d:60:fd:
6c:bf:05:0d:33:f7:a7:d2:3f:75:97:2a:28:d6:09:17:f7:3f:
9f:3d:20:6f:70:d7:cd:01:e5:ec:35:bb:cd:33:d7:5e:0d:5c:
c3:4d:65:5e:f5:31:2a:02:3f:ee:4a:77:c4:73:88:a3:d7:59:
eb:1f:75:8c:45:8c:df:e9:10:0c:c9:02:38:10:e4:c3:8f:82:
83:1e:b8:94:56:b9:41:a5:d9:7d:91:75:23:7d:f9:c9:84:5b:
dc:bc:60:21:52:a0:bc:2e:aa:d4:2e:21:2e:66:1e:1f:6d:db:
12:4c:0e:7c:e8:be:f8:51:7b:66:cd:f9:e9:fd:ed:d0:06:70:
6c:84:3f:7d:85:84:f8:de:2c:19:6c:89:72:d0:45:d1:80:c7:
5b:31:6f:ea:13:6d:53:f2:16:0a:a0:d3:cd:42:d1:90:8a:ba:
1c:9c:9a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 14:29:34 2026 by rpki-client