Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B815AA3434A411F1BE6A1FF3CE1D38B0.roa
File: B815AA3434A411F1BE6A1FF3CE1D38B0.roa (raw, json)
Hash identifier: svSD65AREQmyS9siBU3SUdATM+1LxafMKmmJz1BJwOc=
Subject key identifier: 82:E7:AC:97:A3:03:5F:B4:4B:85:3D:65:E1:38:61:A7:21:AD:39:78
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AB8A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B815AA3434A411F1BE6A1FF3CE1D38B0.roa
Signing time: Fri 10 Apr 2026 06:15:50 +0000
ROA not before: Fri 10 Apr 2026 06:15:45 +0000
ROA not after: Mon 18 May 2026 06:15:45 +0000
asID: 395886
IP address blocks: 45.205.4.0/24 maxlen: 24
45.205.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Apr 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109450 (0x1ab8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 10 06:15:45 2026 GMT
Not After : May 18 06:15:45 2026 GMT
Subject: CN=69d89595-eb82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:fa:cc:7d:4d:27:c5:c8:f0:f6:90:89:e9:59:
9f:71:42:26:6b:c0:f0:19:e6:ec:cd:8f:1d:36:77:
72:45:b2:c5:e9:23:3d:be:80:78:4d:fd:11:39:8e:
1a:b2:05:9a:2b:99:6a:02:e2:39:35:e8:ec:5e:2a:
77:49:75:e2:51:ad:5a:66:96:e8:7b:19:a5:58:ba:
8e:63:b7:8e:4b:d1:39:11:8c:cb:8e:2c:07:88:5f:
76:73:96:c2:98:14:78:90:87:b6:47:99:a0:14:8c:
98:67:72:a3:94:52:0e:61:0d:b9:c6:e2:2f:67:85:
7d:2e:97:b3:9a:c5:57:7e:82:d2:5c:07:28:e8:3a:
e4:de:28:88:b5:17:07:75:40:08:92:50:86:59:6e:
11:9e:7c:c3:c1:d2:cb:d0:c4:de:f1:ca:ac:92:6d:
d6:9d:9c:93:f7:67:bb:fe:71:f4:dd:e8:d4:a6:9b:
eb:3b:f8:cb:32:84:fa:38:39:06:16:2d:71:73:16:
f9:ff:11:01:dc:1d:86:bb:d9:d3:2e:fd:06:99:bc:
b9:51:b1:d7:e0:1e:c7:36:38:74:67:b0:01:ff:e8:
39:22:15:20:79:b6:ae:a8:a4:3f:c6:20:a7:9b:68:
b0:5f:56:ab:4d:bf:eb:42:b7:90:3e:90:83:59:00:
3b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:E7:AC:97:A3:03:5F:B4:4B:85:3D:65:E1:38:61:A7:21:AD:39:78
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B815AA3434A411F1BE6A1FF3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.4.0/23
Signature Algorithm: sha256WithRSAEncryption
86:75:f8:6b:72:a1:0b:1e:6d:ce:31:87:f4:03:4c:31:fd:3b:
bf:4a:2d:e6:be:fb:83:01:05:e9:83:df:a2:b2:0c:2c:95:94:
75:23:4c:c2:af:1d:38:e0:c0:5e:e1:fb:8f:4b:45:bd:4f:4f:
31:77:63:bb:33:79:81:f5:ad:8c:ef:90:ad:62:50:50:26:e6:
f2:99:be:75:41:41:88:07:b3:22:f3:6f:0d:41:39:ea:67:2f:
f5:71:77:ed:ac:68:4a:b0:24:c4:01:17:aa:1f:5b:32:af:50:
00:7b:a5:e3:75:f4:91:61:4e:a9:46:a6:cc:4a:75:44:91:3f:
b6:ba:f0:42:48:81:5d:fa:07:40:87:63:67:df:6c:59:dd:3e:
5f:46:7e:f4:b0:7c:e8:7d:c3:5e:bb:d6:78:34:a1:db:01:cb:
35:4f:41:b8:bf:74:2e:5e:06:55:7a:03:ee:27:53:4c:ce:25:
22:cf:80:b3:a5:05:21:87:92:34:bb:32:1f:87:18:ed:dc:7c:
a3:61:bd:af:60:90:b5:66:7d:25:c4:b7:0f:ec:07:11:88:35:
62:21:85:ba:c3:35:dd:ac:08:76:8d:41:ff:7b:fb:ee:7d:58:
03:3b:06:98:c2:b5:8a:53:bb:b8:dd:cf:08:3b:61:45:b7:da:
c5:dd:85:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 14:30:30 2026 by rpki-client