Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DC8C42E25BFF11F1815B33E1CE1D38B0.roa
File: DC8C42E25BFF11F1815B33E1CE1D38B0.roa (raw, json)
Hash identifier: NRqmwfc4t7JCHcVR4CJ7LrsOY6TtBfD7IhZTI35RQfU=
Subject key identifier: A5:38:B2:C7:0F:74:D7:81:E4:D2:73:D6:A1:01:C4:78:63:72:25:BF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BAC9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DC8C42E25BFF11F1815B33E1CE1D38B0.roa
Signing time: Sat 30 May 2026 08:16:30 +0000
ROA not before: Sat 30 May 2026 08:16:26 +0000
ROA not after: Wed 12 May 2027 08:16:26 +0000
asID: 140641
IP address blocks: 45.195.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113353 (0x1bac9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 30 08:16:26 2026 GMT
Not After : May 12 08:16:26 2027 GMT
Subject: CN=6a1a9cde-ff57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4e:a5:19:fe:22:1a:5e:fa:d0:11:fb:92:fd:
74:c1:5f:50:1e:62:cf:47:6f:34:0d:c8:3d:8f:68:
cf:9e:1b:c2:4b:00:f0:56:95:18:39:05:7f:d4:76:
42:9b:d8:64:a0:8d:81:f9:b9:62:7b:1d:4c:bc:9f:
31:f8:b5:10:42:db:5b:e9:d4:d6:d5:71:9d:e1:71:
7a:c0:79:7d:8e:3f:e1:2e:90:94:c5:4e:80:93:aa:
18:9d:2b:95:93:9f:25:48:72:9d:8b:fc:0c:c4:5e:
32:d9:3c:39:7c:86:d2:49:77:0d:0d:f9:8f:1c:32:
f0:5f:c8:1b:88:d0:b0:24:08:a1:76:2e:72:3f:7a:
25:6a:7c:03:c0:12:d5:19:a2:af:f8:c8:28:a4:99:
c9:08:ad:4d:a7:35:c0:1e:b1:8b:b5:97:9e:50:c6:
cc:3d:11:bf:00:af:46:02:72:8c:2e:1f:e8:33:56:
16:67:39:5b:5c:c6:a9:9f:00:62:bf:48:7f:92:1e:
5d:61:17:ff:15:6d:81:89:5d:c0:72:21:62:cb:dd:
75:9c:dd:59:67:b1:9d:e9:97:b5:8d:06:de:dd:63:
26:a2:71:04:de:f9:6f:34:66:3e:12:94:56:b3:26:
3e:70:c0:96:12:9d:67:14:ba:80:9c:7a:16:e1:07:
28:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:38:B2:C7:0F:74:D7:81:E4:D2:73:D6:A1:01:C4:78:63:72:25:BF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DC8C42E25BFF11F1815B33E1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.105.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:f7:9d:ee:1b:19:9a:59:c1:98:bc:61:ad:08:12:a2:3f:f1:
d8:20:3f:b0:75:99:b9:24:a1:42:29:ec:62:01:93:1f:44:95:
ff:62:13:60:35:50:68:c8:09:a5:78:06:1e:25:2b:7f:ee:af:
88:96:fd:00:ba:9f:9a:a5:a4:73:86:f7:05:ce:ed:f9:fb:39:
5f:6d:ec:63:92:17:b9:96:e1:71:1d:69:41:3e:48:48:c2:6f:
ce:f1:d2:a7:d2:a6:7c:7c:73:02:69:a9:0c:d4:2d:2d:a2:07:
46:5d:05:e9:0b:b1:86:84:a3:43:89:b0:d5:93:5e:51:60:48:
f0:05:47:eb:f2:80:2c:b2:4a:ad:f5:55:60:c7:bb:86:7d:b8:
eb:8c:b9:35:2a:f3:68:5e:8b:89:6c:80:d5:83:69:c3:6f:fa:
c3:7b:22:b4:33:60:83:7a:38:d5:92:27:08:9f:f5:cc:60:f0:
17:a8:c2:01:30:d0:11:95:20:43:6c:1d:07:00:eb:15:ec:46:
b4:41:47:77:4e:7a:4a:72:9f:ad:2d:8d:ce:a7:e1:e1:f1:8b:
c6:48:12:99:24:67:ce:e7:78:b1:a9:10:be:f7:9b:04:1e:b5:
59:e2:13:0e:5e:be:d2:98:e3:89:2f:0c:f7:da:0c:62:97:cf:
cc:a7:e7:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:07:17 2026 by rpki-client