Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BF141EA04F6211F183F05D1CCF1D38B0.roa
File: BF141EA04F6211F183F05D1CCF1D38B0.roa (raw, json)
Hash identifier: KKVz/FIx2EpQbZ1ri8KJN5InGrtp+Iufip7wIjIvklA=
Subject key identifier: 81:BB:29:D9:FE:D3:A1:CF:A3:3D:53:B0:29:57:9A:DB:91:71:4F:6B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B46B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BF141EA04F6211F183F05D1CCF1D38B0.roa
Signing time: Thu 14 May 2026 07:01:36 +0000
ROA not before: Thu 14 May 2026 07:01:31 +0000
ROA not after: Sun 14 Jun 2026 07:01:31 +0000
asID: 271916
IP address blocks: 45.207.16.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111723 (0x1b46b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 14 07:01:31 2026 GMT
Not After : Jun 14 07:01:31 2026 GMT
Subject: CN=6a057350-d49a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d8:bd:ca:74:1d:f6:e8:e6:b6:d1:71:fb:a0:
9d:06:6a:45:26:d7:88:82:a2:1b:72:f2:8c:c8:6c:
d0:6c:07:97:b9:81:68:db:40:79:2c:7a:ba:ae:35:
6f:9b:cd:be:30:03:dc:62:4e:8f:ac:69:1c:a9:bc:
c1:9b:32:47:6a:5b:d6:27:a5:03:3b:b7:80:84:9b:
4f:0a:26:a8:ac:e6:94:a0:59:6a:be:2b:a4:2a:b7:
bb:4d:ae:02:22:63:2b:3e:3a:68:9c:c5:44:f8:8b:
3a:c3:53:46:ab:1e:59:fe:06:d8:12:5e:db:f5:a7:
c4:10:3d:0b:31:1f:fb:2b:01:c4:6c:6a:94:f2:af:
1a:72:2c:59:f2:9c:04:7a:47:83:39:f8:5e:d6:e4:
65:b5:da:66:54:f8:5f:36:e6:3d:d0:58:b0:d5:fc:
ec:c8:cf:70:44:64:bd:50:46:e9:e4:f6:ab:89:e9:
e8:48:64:85:4d:9e:e4:80:d7:04:6b:31:9c:c4:4d:
74:49:e9:3e:b2:ca:b3:1b:74:9e:10:b6:4e:cc:6f:
8b:a6:f4:e3:64:9b:57:74:ae:e6:73:54:82:0a:e9:
00:d8:2d:7b:69:e0:9f:0d:b1:80:43:c2:b2:31:8a:
46:fe:97:7f:96:0d:de:aa:a2:9f:57:1c:10:7e:e1:
e3:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:BB:29:D9:FE:D3:A1:CF:A3:3D:53:B0:29:57:9A:DB:91:71:4F:6B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BF141EA04F6211F183F05D1CCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.16.0/22
Signature Algorithm: sha256WithRSAEncryption
61:af:bd:0c:b2:95:99:b6:af:e9:c6:67:de:53:52:81:c1:9d:
5e:f1:d5:5a:32:05:35:99:fd:21:48:f8:69:d5:92:cf:0b:3f:
f0:40:96:1a:1d:31:a3:8e:7a:db:fc:dc:d9:cd:bd:37:fe:f1:
55:6e:f8:07:df:1e:a8:27:34:c6:c9:b7:47:99:9a:3c:3e:eb:
75:5e:e8:96:65:69:5c:8c:81:b0:36:5b:79:2e:8c:8d:eb:ff:
c7:01:b1:ae:07:70:c2:e0:ff:0c:92:a5:e8:44:87:bf:65:67:
f0:33:fb:f9:43:15:23:86:d9:33:9c:e6:d9:6e:33:95:a8:b4:
32:06:e9:c4:ff:55:b9:6c:33:a2:13:1d:7c:59:a2:24:71:f3:
ac:d1:62:8d:d8:99:53:df:ac:cd:f0:a4:ad:69:d0:84:42:4b:
3b:3d:72:4c:36:a2:0a:43:b0:55:1c:42:65:bf:f5:6b:ba:92:
b0:5b:17:74:36:93:78:0c:27:fe:a6:bb:7d:47:3c:b3:dd:f4:
9b:65:ce:ce:7d:af:57:7e:c5:6b:ba:68:e3:08:b7:7c:0a:f3:
54:e7:ce:e9:1c:a8:dd:b6:92:be:f1:23:d3:1c:cb:67:b4:dc:
d4:03:15:7e:12:2c:2c:61:71:8a:63:f4:1b:7b:a3:6e:7b:b5:
8a:01:3c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:21:29 2026 by rpki-client