Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE5265882EC611F1A88820BEDAE4EC9C.roa
File: BE5265882EC611F1A88820BEDAE4EC9C.roa (raw, json)
Hash identifier: GZeh649Vz+06JUw2ESHn2+wvCkdxHquGkChKeH+mpNg=
Subject key identifier: 40:63:D2:4E:DF:28:08:13:DD:10:13:15:67:8D:D9:39:BB:07:84:DE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A96F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE5265882EC611F1A88820BEDAE4EC9C.roa
Signing time: Thu 02 Apr 2026 19:04:16 +0000
ROA not before: Thu 02 Apr 2026 19:04:10 +0000
ROA not after: Thu 14 May 2026 19:04:10 +0000
asID: 137643
IP address blocks: 45.196.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Apr 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108911 (0x1a96f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 2 19:04:10 2026 GMT
Not After : May 14 19:04:10 2026 GMT
Subject: CN=69cebdb0-1848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9f:b4:9e:db:d8:37:6a:03:78:3f:d3:1d:0d:
b2:04:c9:2b:7d:4b:b2:21:4f:c9:bd:69:61:6d:4a:
06:52:7a:71:b1:26:a1:fc:19:38:db:28:97:78:e1:
0a:c2:ac:66:df:42:f9:fd:f0:10:05:a3:c2:b7:65:
b9:a6:1d:45:46:17:45:9c:cd:20:b3:e7:cb:f0:6a:
98:4e:f8:65:f7:10:04:79:cc:06:b8:f3:35:fa:a1:
3c:db:a6:6d:3e:ee:13:1b:d9:01:a0:d0:6c:64:d8:
40:eb:9a:d1:92:3b:e2:11:db:74:b3:6e:cf:ff:e8:
c9:03:55:5a:25:86:e3:39:be:89:57:bf:ab:75:15:
ec:b7:69:97:35:aa:1f:bd:a7:59:34:ee:88:74:10:
9c:f5:12:7c:0d:7e:ac:3d:36:e3:59:f8:8a:08:cc:
a2:0c:1f:d1:c2:3f:45:e1:1d:ba:d2:4d:47:a3:89:
98:4c:48:92:8a:51:ef:08:3b:3f:6d:f1:a5:1e:4c:
1f:ce:db:99:01:67:c5:85:73:2e:56:00:55:30:f9:
b1:d0:f3:3f:29:0b:e3:6b:ac:90:dd:1d:9b:93:46:
fe:ea:af:33:df:89:9c:12:4f:88:fe:8f:c5:9a:cc:
9a:e1:0f:a0:be:59:cb:16:f6:6b:01:9f:7c:7e:d9:
d6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:63:D2:4E:DF:28:08:13:DD:10:13:15:67:8D:D9:39:BB:07:84:DE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE5265882EC611F1A88820BEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.196.0/24
Signature Algorithm: sha256WithRSAEncryption
34:d7:94:ad:8b:d6:6a:b9:52:8d:fe:26:01:99:83:48:dd:42:
0a:cc:96:49:80:82:d9:4d:24:53:32:59:75:2d:ed:84:93:52:
1d:cc:ec:e3:b0:9e:f8:54:11:cb:ed:6e:25:0d:76:d3:9e:c3:
68:45:46:95:9a:47:1b:2f:f0:1f:86:aa:aa:24:9a:24:47:d0:
14:37:52:a2:ed:3e:81:e3:3b:8e:98:ad:8c:5e:10:e4:73:5f:
8f:12:78:f3:f4:55:fb:db:59:0c:c9:bf:b2:a1:58:15:c7:67:
94:9c:1b:97:7b:e9:c5:5b:02:76:c7:1e:72:83:f6:8e:17:cd:
39:a0:d6:8e:a5:bb:c5:c7:e4:14:c9:47:79:9b:f6:c1:4c:17:
40:e7:69:e2:85:44:4b:fe:48:79:32:1e:8f:84:af:2f:83:ed:
7e:02:32:0d:24:a4:5e:17:5f:22:f2:39:94:ce:89:4b:c3:d5:
11:87:63:52:1e:13:52:23:c6:85:23:80:87:a0:4e:fc:e7:05:
34:14:2c:03:09:71:66:46:1b:40:b7:61:8a:b3:30:29:ff:7e:
61:ba:2a:ba:86:07:92:ba:1e:93:7a:49:18:2f:40:15:9e:f8:
aa:ac:cb:39:a3:6e:be:34:fc:47:4e:77:c1:d6:2a:37:00:0d:
72:2f:0c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 14:30:33 2026 by rpki-client