Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B1036EBE3F0A11F1A184E31BCF1D38B0.roa
File: B1036EBE3F0A11F1A184E31BCF1D38B0.roa (raw, json)
Hash identifier: VHFn2ey5HS0//QAJl4V6dkeYosFeknBp7fCK4LH+GIU=
Subject key identifier: BA:D2:5E:05:88:8B:05:8C:E3:2B:A2:F7:EA:4E:13:01:68:55:58:C2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AEB1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B1036EBE3F0A11F1A184E31BCF1D38B0.roa
Signing time: Thu 23 Apr 2026 11:50:58 +0000
ROA not before: Thu 23 Apr 2026 11:50:52 +0000
ROA not after: Tue 09 Jun 2026 11:50:52 +0000
asID: 63099
IP address blocks: 45.192.235.0/24 maxlen: 24
45.196.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 08 May 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110257 (0x1aeb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 23 11:50:52 2026 GMT
Not After : Jun 9 11:50:52 2026 GMT
Subject: CN=69ea07a2-fe41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:27:75:ea:d2:c1:29:45:c4:68:76:f7:11:87:
46:f1:d0:e2:19:d5:ee:86:83:d5:51:bd:76:30:bb:
63:b6:b7:7d:c3:b7:25:42:de:3c:4b:e0:45:aa:1d:
6f:cd:fb:cc:f9:b4:54:4d:af:56:14:2b:b1:9e:31:
5f:06:85:0d:fa:8b:66:ea:19:67:d3:28:74:86:bb:
2f:78:4a:90:e1:e7:8a:d5:05:58:59:a0:b6:67:50:
3f:ac:b6:fb:3e:f6:e1:10:0f:d0:c3:16:e3:44:56:
b4:1f:b0:4b:66:fa:e7:da:7b:01:70:35:e2:ef:7b:
1a:31:22:46:88:78:ce:dc:db:12:7f:93:f7:62:66:
81:aa:3c:a5:e7:9f:3b:df:45:cc:66:d2:7f:6c:fe:
be:9b:66:6e:a7:91:f6:e1:6e:5c:17:51:33:b1:32:
42:1e:a8:40:87:14:02:b9:51:90:d2:cb:e9:7f:d5:
99:1f:5c:9b:bf:ed:2d:79:9e:f1:3c:d5:ad:e7:4a:
0e:b9:28:e9:5d:d4:5c:cc:ae:8b:ea:97:f7:0f:df:
f1:2a:da:1b:3c:0c:42:37:f1:61:97:92:87:32:fe:
61:e2:7b:60:88:8d:9e:5e:e3:95:81:60:c2:b7:16:
7e:69:6a:63:bd:e5:a9:d6:0d:97:a6:12:7e:00:05:
26:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D2:5E:05:88:8B:05:8C:E3:2B:A2:F7:EA:4E:13:01:68:55:58:C2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B1036EBE3F0A11F1A184E31BCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.235.0/24
45.196.226.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:c7:75:ca:18:f3:8c:79:f1:72:ab:13:87:c3:69:c1:52:1e:
0f:40:20:9a:6c:bd:a7:6d:2e:68:ca:2b:fc:68:bb:54:63:87:
e6:80:6a:60:42:17:4c:c8:c2:9c:db:33:f4:a1:9f:22:84:ab:
0e:fe:92:52:60:bb:a0:85:2b:3d:b2:36:c8:5b:83:fc:92:f3:
7d:d3:be:26:1f:68:90:72:72:ac:47:c3:6e:da:b7:4e:ad:65:
81:60:40:59:1a:6c:ac:99:c7:59:30:87:e8:38:cb:8f:0a:8b:
60:52:61:05:6d:eb:3b:11:33:c4:ae:0f:56:37:b1:94:dc:01:
28:df:70:17:ce:31:65:db:b9:40:fd:f2:c3:5d:45:36:ba:80:
68:a1:76:cc:fc:48:dc:fa:36:8d:bc:90:82:cf:4d:ff:b7:65:
21:28:d3:4f:5c:d6:41:cd:cb:18:1c:4b:dd:2f:32:cc:44:21:
4d:0e:4b:98:eb:d7:05:dc:06:c2:62:8d:09:1e:5c:db:77:92:
49:7d:06:06:46:97:08:fd:e7:4d:bd:46:ef:bc:8e:aa:2f:6e:
b1:cd:0a:1d:ab:cd:7f:5b:71:88:16:df:2f:25:6b:43:f9:87:
e8:87:3d:d5:d3:9e:c6:b0:01:14:86:bd:66:47:7a:19:d9:10:
0c:4e:7f:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 09:06:19 2026 by rpki-client