Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C08E73B03BC711F1895B5616CF1D38B0.roa
File: C08E73B03BC711F1895B5616CF1D38B0.roa (raw, json)
Hash identifier: qbHiclPAuoiOMtqlJ28XMhkGVHew+shSeiFNKKO9PX0=
Subject key identifier: D6:54:1A:4D:DA:1C:05:01:6A:8D:CF:52:8D:B9:85:B5:D3:94:C4:64
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01ADA3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C08E73B03BC711F1895B5616CF1D38B0.roa
Signing time: Sun 19 Apr 2026 08:14:14 +0000
ROA not before: Sun 19 Apr 2026 08:14:08 +0000
ROA not after: Mon 25 May 2026 08:14:08 +0000
asID: 200758
IP address blocks: 45.192.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109987 (0x1ada3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 19 08:14:08 2026 GMT
Not After : May 25 08:14:08 2026 GMT
Subject: CN=69e48ed6-fc41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:94:ec:5e:5f:53:d9:24:c6:bf:03:c3:99:79:
3e:30:5d:e4:71:c9:a3:f8:4b:f0:45:d3:39:47:50:
eb:0b:0a:c8:06:01:50:ca:55:32:ae:d0:fe:61:5c:
3f:9e:d2:04:52:58:3d:65:3d:04:9a:59:77:79:c7:
0e:4d:5c:44:85:f6:2a:a4:16:57:2f:6d:cf:c9:35:
6e:f7:1d:b7:58:9b:f5:af:f2:e2:3d:13:67:06:c1:
83:3d:58:d1:05:cc:fb:9a:01:25:92:db:34:e9:2d:
c1:3b:20:10:2d:ed:c7:cf:74:50:80:38:93:d8:74:
a5:22:95:77:3b:62:f9:e3:49:15:da:2a:34:1b:48:
78:29:a6:ff:9b:48:ec:1c:9d:f3:57:3a:dc:2b:05:
fa:59:3f:7f:29:b6:d6:e2:92:d1:e3:b8:cb:5f:54:
89:8c:13:3d:0d:28:3f:a1:5d:c8:4d:c8:fb:ef:b5:
a0:e8:61:7b:23:05:33:45:5b:0c:c6:6e:cb:6e:49:
15:17:68:97:09:68:5a:60:d8:89:65:fe:d6:59:1b:
09:19:aa:4e:49:f9:74:c3:1a:89:a1:3c:c3:fc:8b:
bb:da:d2:a1:69:a5:18:75:32:9b:b6:68:7d:68:49:
07:1d:06:84:d8:31:11:e7:e0:b7:41:a2:80:68:26:
5b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:54:1A:4D:DA:1C:05:01:6A:8D:CF:52:8D:B9:85:B5:D3:94:C4:64
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C08E73B03BC711F1895B5616CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.9.0/24
Signature Algorithm: sha256WithRSAEncryption
af:ed:fa:13:f7:4d:52:90:76:ab:7d:9d:22:14:1b:26:5c:f9:
01:5d:fd:96:ae:84:a9:b3:99:4b:a1:af:67:0e:5e:74:45:dc:
0e:50:8e:00:9f:0d:62:8c:12:25:f4:b7:88:28:37:c4:67:d4:
0b:75:cb:bf:70:9a:a3:01:70:72:f3:d1:cf:7d:9b:1e:75:08:
c0:7c:1c:77:2f:e8:6e:5e:11:d9:ba:5f:ba:83:04:99:c4:84:
d0:06:fe:e7:51:9b:da:fe:30:73:c6:65:bf:f6:53:0c:f0:95:
33:5c:f8:35:20:68:41:8f:bf:20:9d:e9:03:c2:e5:5c:57:05:
17:55:a8:91:0c:b3:2d:00:64:c5:2f:b7:dd:72:7e:3a:cb:8f:
4c:ea:e0:03:9c:16:a6:0a:1b:c2:a7:e2:12:c9:83:be:71:31:
99:12:0d:df:2d:65:0e:d2:2a:e4:86:6e:26:37:17:9b:92:75:
2a:08:8d:07:c0:3d:f6:9d:03:bb:75:d1:50:d0:67:85:95:45:
bd:51:96:58:db:55:d9:1c:55:5c:c1:3f:a7:cb:18:12:4b:d7:
4d:bf:de:fc:c6:a3:5e:f4:e6:1b:45:d0:01:43:12:05:85:1f:
35:cc:57:57:7d:02:df:2c:9d:ac:46:b8:8f:a7:16:12:22:ed:
c3:10:6c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 12:32:00 2026 by rpki-client