Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DDDDF1E6630111F1931229FFCE1D38B0.roa
File: DDDDF1E6630111F1931229FFCE1D38B0.roa (raw, json)
Hash identifier: 5ooZlQiThgzywzFbq1/K3Oi4RgidknUUtpYl3lqlfXA=
Subject key identifier: C2:F5:40:04:88:86:B6:EA:F6:14:62:2F:D0:65:C7:F2:30:25:23:8D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BC56
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DDDDF1E6630111F1931229FFCE1D38B0.roa
Signing time: Mon 08 Jun 2026 06:18:30 +0000
ROA not before: Mon 08 Jun 2026 06:18:24 +0000
ROA not after: Tue 04 May 2027 06:18:24 +0000
asID: 4809
IP address blocks: 45.195.4.0/22 maxlen: 24
45.195.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 13 Jun 2026 19:56:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113750 (0x1bc56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 8 06:18:24 2026 GMT
Not After : May 4 06:18:24 2027 GMT
Subject: CN=6a265eb6-2338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:dc:b7:fe:83:99:89:7d:3d:2b:f5:99:47:76:
1c:f4:c1:a9:a9:2e:0c:35:88:21:09:54:b9:d9:cb:
2d:c3:c6:70:9d:26:a0:97:91:03:b1:ce:dd:7c:9f:
76:59:6d:41:ee:ea:2b:44:da:d6:27:36:5a:36:b1:
09:78:2c:2e:78:8e:3b:a8:af:3e:5e:3b:51:f6:c6:
a5:8b:f8:6e:a8:cf:9b:6e:50:a6:48:28:72:74:ab:
6a:18:39:e0:62:e3:f4:b9:03:b7:15:ff:94:f8:a5:
35:1c:09:4c:5b:24:93:fe:da:c0:65:bf:e5:3c:4f:
35:9a:0b:57:db:f4:4a:7b:90:64:29:dd:db:b1:f0:
a3:96:63:d2:41:49:f3:76:b6:c6:cb:23:fe:a1:ea:
da:61:5e:db:1b:2b:a8:7e:14:2e:ae:bf:13:a3:8a:
81:0b:4e:0f:0f:9a:e9:89:02:b5:b9:d9:f2:ce:cd:
d5:3c:c8:65:4a:a8:c1:f4:a6:df:43:a8:12:c2:25:
b6:95:ba:97:17:9b:ed:5e:67:f0:dc:fb:10:7a:61:
98:7a:6f:19:bc:d2:de:92:a5:fb:49:d1:6b:ae:49:
a0:92:eb:71:f6:07:d9:71:29:52:52:da:3e:41:cd:
ed:eb:2e:00:74:40:1f:8b:1f:70:85:ab:1a:e3:15:
b8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F5:40:04:88:86:B6:EA:F6:14:62:2F:D0:65:C7:F2:30:25:23:8D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DDDDF1E6630111F1931229FFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.4.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:a2:61:41:e6:67:d6:31:54:96:53:37:d8:41:2f:af:3e:93:
f6:7c:ca:dd:e6:3c:f6:8e:3a:e5:5b:1a:e3:49:f8:eb:2e:e7:
ef:7c:b8:66:73:03:11:86:76:e2:cc:76:b7:45:f2:2c:93:ec:
3b:41:4a:0d:61:d6:78:70:40:16:01:3b:7b:b3:02:75:01:b5:
a1:c2:26:dc:24:95:eb:6a:c7:cb:21:b4:33:09:3a:92:cb:08:
20:a2:0a:27:a3:84:16:79:fa:75:d2:a5:f3:77:b7:e1:83:e5:
44:dd:87:91:15:07:05:e2:c8:7f:87:2d:9a:6f:6a:09:9a:70:
be:a9:1a:08:0f:bb:6f:64:13:45:7b:fd:84:6e:68:1c:ee:47:
24:98:88:d9:68:fa:02:db:61:aa:57:47:cf:fc:8d:a7:57:15:
b9:1d:88:17:ae:4c:a9:40:d5:16:43:dc:f2:27:8d:e9:d6:f2:
f9:67:82:00:ae:67:c6:99:bd:cd:63:f2:b4:0e:f6:aa:22:9b:
7e:12:6a:d0:83:96:e0:eb:fe:15:37:60:90:2c:3e:5d:ea:29:
f3:7e:54:93:6e:7e:7d:c3:f4:a8:10:31:86:22:e1:9c:68:6e:
6f:27:24:00:5f:b4:66:fb:37:04:0d:dc:1e:8f:38:28:44:08:
85:3b:c4:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:41:11 2026 by rpki-client