Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C9FAABFA695611F190FD58F1CE1D38B0.roa
File: C9FAABFA695611F190FD58F1CE1D38B0.roa (raw, json)
Hash identifier: 6snxr0InioUB4C7IkqMij41xhPNQKf+qcRWywmk+jHg=
Subject key identifier: D9:D9:4C:10:85:7F:60:2C:67:09:15:6D:5A:BC:FE:5C:80:FB:DD:90
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BDE8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C9FAABFA695611F190FD58F1CE1D38B0.roa
Signing time: Tue 16 Jun 2026 07:41:30 +0000
ROA not before: Tue 16 Jun 2026 07:41:26 +0000
ROA not after: Wed 22 Jul 2026 07:41:26 +0000
asID: 57043
IP address blocks: 45.197.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 01 Jul 2026 09:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114152 (0x1bde8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 16 07:41:26 2026 GMT
Not After : Jul 22 07:41:26 2026 GMT
Subject: CN=6a30fe2a-6926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:49:f9:71:c3:7b:e5:30:02:32:d9:26:49:15:
d9:fd:3f:d0:5a:76:1e:05:87:45:48:45:94:86:fd:
cb:5c:27:b9:6f:33:6a:2e:75:81:db:3c:28:86:de:
aa:b1:3a:a4:99:f2:bf:14:8d:9d:7d:49:cf:85:f6:
0a:e1:fd:b7:71:d7:1b:78:58:d5:b8:2b:45:e5:c4:
9d:52:2e:90:8b:fd:53:72:d0:0f:73:8a:6c:be:fc:
3c:5f:65:44:16:e0:f0:af:93:cf:bd:ba:07:45:15:
70:23:80:c4:a0:b0:a5:6b:6f:bc:3c:b9:a0:41:78:
a6:b4:ea:ad:ef:93:6d:fb:3a:04:c5:16:d9:38:48:
0c:38:7b:f7:d6:bd:9d:ef:b2:a7:ec:b8:1a:e5:16:
14:d8:82:3c:a4:8c:5c:9b:83:29:25:ab:46:ce:c1:
fc:96:43:5d:7e:60:48:68:80:cd:7a:a7:69:65:f1:
30:19:15:21:e8:5a:95:12:ae:35:fd:14:b8:8b:70:
63:06:78:60:26:38:b7:d3:b0:11:8a:23:d8:dd:69:
e4:b8:34:ba:6c:b1:42:90:d4:f6:fc:02:19:c0:46:
79:4d:67:65:ad:47:e3:87:9c:f9:1f:dd:22:04:d0:
00:c2:02:a1:6f:18:c7:56:85:aa:70:86:ae:33:84:
1b:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:D9:4C:10:85:7F:60:2C:67:09:15:6D:5A:BC:FE:5C:80:FB:DD:90
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C9FAABFA695611F190FD58F1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.133.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:6e:7d:09:3c:ab:a8:c3:18:75:38:18:12:d6:94:a9:6c:10:
cc:06:0e:13:66:a6:ca:47:69:e9:4d:6d:24:68:c8:ba:8c:d4:
f6:80:0e:3f:66:58:2e:d5:f0:25:e1:94:c1:4d:18:64:56:79:
e0:50:8e:d3:f0:a1:d6:f7:93:80:b8:ef:8f:61:d9:b9:0b:7f:
a3:5d:4e:f7:06:d8:72:3e:74:76:c3:9f:70:b0:ee:36:59:1b:
1a:0e:c6:e4:48:4e:c5:84:50:2f:b6:5d:8b:a4:6e:94:c4:99:
32:36:ce:d5:9d:dd:30:0b:d8:15:29:8f:e6:1e:0f:3c:0e:8c:
49:95:f9:eb:7f:0a:cf:2b:19:83:e7:20:54:ce:e5:b0:02:46:
b5:5c:1a:75:4d:d3:6d:3c:f7:0e:61:c8:06:95:16:a1:9a:eb:
da:89:90:73:34:61:b4:e2:04:f5:fe:46:93:d1:6b:bd:c5:ff:
c3:f3:8b:1f:9d:b7:d9:73:7f:7f:f7:45:0f:76:48:17:41:01:
fd:43:03:31:f8:8e:ab:60:30:2f:73:50:73:b3:59:60:4c:90:
03:1f:66:73:5d:26:f6:b6:82:df:e9:3e:e9:17:4d:24:a2:30:
0d:03:34:c4:db:c2:c5:99:c1:59:18:00:a7:e5:f2:2d:b1:0a:
16:59:5e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 12:24:11 2026 by rpki-client