
Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D8D0A3B0454711F19ADF0AA5CE1D38B0.roa
File: D8D0A3B0454711F19ADF0AA5CE1D38B0.roa (raw, json)
Hash identifier: flfxEhCVqvlcIE3AQPE5hYI4L+2rpckc3jlCN5zm8tk=
Subject key identifier: AC:BA:20:D4:53:A2:91:AA:FB:72:E3:D4:6C:83:C7:E7:DC:6E:3F:11
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B057
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D8D0A3B0454711F19ADF0AA5CE1D38B0.roa
Signing time: Fri 01 May 2026 10:23:51 +0000
ROA not before: Fri 01 May 2026 10:23:46 +0000
ROA not after: Thu 04 Mar 2027 10:23:46 +0000
asID: 150293
IP address blocks: 45.196.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 04 May 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110679 (0x1b057)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 1 10:23:46 2026 GMT
Not After : Mar 4 10:23:46 2027 GMT
Subject: CN=69f47f37-caa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ef:e1:93:68:0d:2d:3c:8c:1b:3c:57:0a:da:
76:3d:e5:b2:8d:b3:5d:07:68:4c:b2:9d:9a:7f:47:
54:a9:57:4e:70:5c:76:9a:70:d8:e0:87:3e:75:0b:
b0:43:cd:0f:98:e7:8e:4a:27:85:a2:5c:d4:4d:6a:
cf:74:89:d3:e7:d2:99:a5:93:e0:b6:72:96:1e:93:
42:b0:35:3f:d0:11:be:e2:5d:43:1e:86:3e:8e:c3:
c9:03:8f:63:12:bf:2f:09:f8:a1:b3:b3:4f:11:18:
40:bd:cd:51:70:da:e2:41:36:5a:33:c6:b6:82:27:
9f:56:ee:27:06:ec:d3:70:90:ef:d4:28:cf:a7:c7:
16:24:3c:98:5e:a9:45:34:49:06:95:8e:d2:0c:09:
7c:a3:55:4c:a8:07:db:b7:d3:42:95:1a:93:d3:40:
d4:22:54:14:60:b9:82:dc:e8:d6:80:ce:9c:0e:9d:
e2:03:68:23:34:e5:bf:48:3e:fc:c8:24:69:57:2d:
a6:84:b8:98:de:24:93:c1:8d:9e:8b:41:8d:60:34:
c7:86:c1:cd:96:3b:1e:dc:41:0b:38:4a:0d:e6:c6:
bf:54:71:7b:ec:44:c4:1c:a9:17:2c:4c:41:e8:b1:
e0:76:39:c1:21:1e:f0:be:59:0a:d7:33:25:f8:5d:
a6:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:BA:20:D4:53:A2:91:AA:FB:72:E3:D4:6C:83:C7:E7:DC:6E:3F:11
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D8D0A3B0454711F19ADF0AA5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.79.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:00:64:c2:a6:a9:89:37:f4:e1:eb:52:08:a5:5c:ee:be:12:
52:a3:93:93:0c:08:a7:fe:dc:23:6a:ab:04:47:74:0a:04:7f:
41:90:5b:d1:72:e1:b7:8b:f1:5d:4f:a2:f1:48:bf:b7:72:53:
57:45:2b:d7:10:ff:27:f4:53:92:f5:7f:12:c3:bd:9c:b1:78:
11:59:4c:98:0d:9c:86:bb:45:c5:83:da:b3:a0:d2:2b:95:90:
62:24:0d:cd:6b:57:9d:b1:31:17:75:23:65:83:3a:a8:f2:75:
1d:c3:65:21:b8:4a:c5:67:74:7e:fc:bd:d5:6b:13:4d:ce:82:
86:a9:80:ed:21:20:2f:41:71:b9:53:ac:7c:48:bc:b5:e1:85:
bf:df:2e:f6:68:35:a5:d0:eb:54:02:6a:0b:c7:8f:0a:54:42:
96:2b:de:1e:09:6d:44:d0:68:a6:7f:7c:4f:d6:65:b5:a1:00:
10:24:f7:83:ec:46:f2:a4:61:d4:09:ed:41:c6:a6:f5:ee:d6:
3f:86:f1:4f:84:27:7d:42:cf:fb:64:d5:ed:dd:a3:88:26:3c:
bc:3d:03:c3:e2:a0:f3:e6:81:35:7e:2c:09:6e:74:89:00:20:
fc:86:b5:f9:27:47:c9:5c:55:c3:6f:81:02:9a:58:c3:a5:16:
94:d8:a8:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 2 09:12:19 2026 by rpki-client