Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C7FBAF4C3B1711F1947B09DFCE1D38B0.roa
File: C7FBAF4C3B1711F1947B09DFCE1D38B0.roa (raw, json)
Hash identifier: CCTDcL6Y2fOVzacIIaQQ4Zr7cynObRJv2wg1wH2yl+8=
Subject key identifier: F7:E2:F7:F8:A7:45:CF:DD:5C:43:F4:17:A6:8A:74:BB:11:6F:CF:30
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AD9C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C7FBAF4C3B1711F1947B09DFCE1D38B0.roa
Signing time: Sat 18 Apr 2026 11:14:35 +0000
ROA not before: Sat 18 Apr 2026 11:14:31 +0000
ROA not after: Sun 31 May 2026 11:14:31 +0000
asID: 274868
IP address blocks: 45.194.100.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Apr 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109980 (0x1ad9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 18 11:14:31 2026 GMT
Not After : May 31 11:14:31 2026 GMT
Subject: CN=69e3679b-0c80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4d:e0:91:8e:13:2c:03:bc:00:c3:d9:3f:75:
e6:a0:f2:d0:4e:aa:d8:44:d0:c8:82:cd:cc:22:c0:
fa:ac:d0:e6:c0:fb:38:37:f1:e5:a7:3b:ba:12:1b:
17:d1:1e:15:68:0d:a4:71:e4:9d:59:c9:1b:b8:55:
fd:94:3c:b2:b7:ea:22:38:b3:00:53:8c:f1:df:e5:
53:a1:aa:b0:3a:ea:14:3b:cc:4f:be:cb:bb:f3:ec:
80:c3:19:d4:23:d2:a6:ea:99:d9:e4:31:ed:3b:ee:
c9:93:97:1f:34:a2:48:bb:32:33:05:31:2c:69:bc:
2b:a8:03:8d:cd:85:11:8e:ff:09:cd:0a:f2:c5:72:
7b:48:dc:92:8d:7f:12:ae:e0:e3:68:ee:b8:4b:c7:
d8:3f:50:e7:d6:f3:06:e1:15:b9:65:36:60:22:e3:
2b:00:5b:6b:ea:3b:56:fa:a2:95:65:b7:bb:2f:0e:
7e:c1:21:7a:39:7e:e9:b1:81:e9:3c:a2:74:ba:81:
c9:45:56:06:90:e4:3e:aa:d1:83:d4:74:7f:bb:ae:
8e:61:b5:2c:fc:9a:00:d6:0d:7a:97:4b:fa:4f:cf:
d9:d7:12:85:fe:66:a6:ba:7a:46:d4:c0:f7:14:6a:
29:7b:34:4b:5b:fa:91:88:1d:c1:e6:ca:f5:02:45:
d7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:E2:F7:F8:A7:45:CF:DD:5C:43:F4:17:A6:8A:74:BB:11:6F:CF:30
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C7FBAF4C3B1711F1947B09DFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.100.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:34:e4:5d:76:e4:4c:77:a1:ec:3a:c0:e6:7a:d3:d5:09:d0:
c0:ef:24:e2:53:0d:be:e0:5b:1c:08:95:01:c5:05:9f:f2:26:
8f:f2:82:c0:5b:72:80:4e:65:85:b5:08:20:5a:d6:c7:24:1c:
c9:dc:fc:2d:af:e0:bd:64:2d:97:84:d7:0c:09:3d:8e:e8:f8:
0b:e7:44:4f:db:cf:a1:27:f6:be:b6:66:25:17:38:31:21:4b:
09:c9:93:0b:98:17:62:7f:19:4f:2c:cc:4e:41:91:1d:7b:21:
e4:5b:ce:a8:65:d9:70:b6:c5:08:09:40:8b:66:d1:26:61:c4:
d5:ba:b5:1f:73:f2:ad:9e:d3:1d:05:fa:76:2d:dc:3b:ab:ac:
d3:59:b3:c6:5c:a8:ad:ab:af:49:51:80:00:a9:cb:20:c2:65:
b8:fc:fb:10:2e:6a:45:30:5a:33:a4:4a:d8:9e:7b:c4:f5:6b:
55:c4:a4:21:3b:18:9a:37:34:64:2e:18:1a:63:69:48:d5:fb:
f3:da:b9:44:64:11:23:ff:a0:e8:a0:fc:f1:4e:43:c4:16:b6:
76:bb:89:25:b3:50:27:97:4c:6e:f5:dd:4f:28:50:75:d8:82:
ac:b7:2b:32:7d:b4:c3:2b:2d:2e:e7:f8:13:5e:0c:4c:b6:af:
61:f1:cb:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 17:04:18 2026 by rpki-client