Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B6C1781C535C11F18C0986C8CE1D38B0.roa
File: B6C1781C535C11F18C0986C8CE1D38B0.roa (raw, json)
Hash identifier: Nh952Q1kvY45c4JzmYa+11OLn8b/RYpmBckercnJjxc=
Subject key identifier: A9:E0:B3:83:CE:35:6C:43:1E:B1:D3:79:92:DC:FE:19:89:33:2B:6C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B5BB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B6C1781C535C11F18C0986C8CE1D38B0.roa
Signing time: Tue 19 May 2026 08:28:30 +0000
ROA not before: Tue 19 May 2026 08:28:24 +0000
ROA not after: Thu 25 Jun 2026 08:28:24 +0000
asID: 200758
IP address blocks: 45.192.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112059 (0x1b5bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 19 08:28:24 2026 GMT
Not After : Jun 25 08:28:24 2026 GMT
Subject: CN=6a0c1f2d-3742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5d:f0:22:1e:cd:33:c0:99:04:6b:fc:4f:be:
eb:77:39:1e:48:b9:76:47:bc:44:a9:cf:a4:83:ee:
9b:5e:71:b1:9f:b8:13:59:9e:03:6f:56:4d:28:bf:
ae:e3:ac:9c:d9:9e:04:19:d3:92:bf:d2:30:d0:a9:
ae:ac:1f:4f:a9:74:d5:eb:8f:c5:39:5d:dd:24:0e:
47:eb:79:97:51:ec:90:87:dd:4f:3f:83:68:9b:68:
74:d2:f3:9c:bb:47:3a:99:fa:e4:b2:2b:db:2c:6f:
b4:d5:75:46:8e:cf:36:8b:89:05:6a:34:45:9b:29:
3a:da:b1:04:67:dc:d8:f2:27:dc:34:a9:ae:f8:c9:
3d:39:4c:59:ba:93:ae:85:76:79:ad:be:0e:0c:1a:
a8:5b:87:69:8f:0c:8a:97:1c:f6:99:a1:1a:2a:e1:
f1:66:40:ee:3a:4f:80:aa:fe:23:2a:9c:63:59:ee:
27:1b:08:9e:c5:6d:00:bf:35:9b:b8:8f:d4:4e:49:
c8:4d:64:f2:2e:25:45:fd:ae:fd:c8:fc:86:cf:50:
ec:9f:18:20:35:1c:18:b4:be:e0:bd:9e:43:cb:8c:
65:c5:dc:78:ac:60:2b:bd:21:af:f0:36:f8:98:96:
bf:0b:f3:68:a4:62:7b:11:fb:5a:89:4a:43:73:9c:
68:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:E0:B3:83:CE:35:6C:43:1E:B1:D3:79:92:DC:FE:19:89:33:2B:6C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B6C1781C535C11F18C0986C8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.9.0/24
Signature Algorithm: sha256WithRSAEncryption
35:00:34:d3:71:df:dc:06:1b:8c:ad:51:1e:13:a8:a5:96:50:
8b:fb:61:13:6f:c5:e1:b0:57:0b:c1:e4:41:f1:ed:54:d8:00:
7a:b3:ee:ab:94:65:a4:43:06:c2:71:de:cd:17:6a:0a:28:d7:
e0:32:6b:58:e5:51:7e:5b:21:1b:7b:29:34:f9:2a:47:61:32:
48:c7:08:3a:81:b8:49:7c:c6:25:24:2e:78:64:84:2f:e7:96:
33:6e:1c:d0:3b:58:c3:bc:2b:11:57:59:23:cb:bc:0c:39:c7:
2d:77:0b:49:10:86:37:c2:c1:50:ac:ad:41:02:6f:09:19:fd:
3b:81:ca:9d:91:e8:d0:ba:15:02:0c:41:55:c8:99:64:69:30:
cf:4e:fc:29:f0:a5:4e:8f:a0:27:3a:88:f9:14:5b:5d:69:95:
c9:c5:1c:c4:2b:c5:2d:d2:3b:4d:2c:15:b3:0e:1b:91:48:81:
49:3a:4f:31:d9:ed:25:ef:39:14:69:36:e6:ca:a2:7f:77:3d:
c9:90:6e:10:91:b9:70:4e:3d:93:29:6a:ff:b8:d2:e2:4c:08:
45:54:d3:cf:fa:a3:50:33:24:de:ea:4d:cb:09:c9:d5:4b:fa:
4d:ce:ff:ed:fd:a3:58:4c:a9:d3:cc:5d:9c:ac:7a:20:99:dd:
3d:3e:ae:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:14:12 2026 by rpki-client