Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E4FD14E8506411F185E0AEB8CE1D38B0.roa
File: E4FD14E8506411F185E0AEB8CE1D38B0.roa (raw, json)
Hash identifier: 8UORjfnqbOrcImhUeBT9udRwqeTFWEO+tpW/HGFWESQ=
Subject key identifier: E4:7F:25:6E:9A:9A:B6:6A:31:43:72:2E:AA:44:71:15:92:ED:EC:BD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B4AA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E4FD14E8506411F185E0AEB8CE1D38B0.roa
Signing time: Fri 15 May 2026 13:49:30 +0000
ROA not before: Fri 15 May 2026 13:49:25 +0000
ROA not after: Mon 22 Jun 2026 13:49:25 +0000
asID: 40779
IP address blocks: 45.205.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111786 (0x1b4aa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 15 13:49:25 2026 GMT
Not After : Jun 22 13:49:25 2026 GMT
Subject: CN=6a07246a-afc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:de:a4:37:aa:1f:03:c9:65:5f:52:5e:f6:06:
c4:31:e6:ef:87:89:30:76:d5:e5:94:ea:34:d5:40:
e1:e9:90:11:5d:6a:a3:27:60:fa:7e:c8:4e:7a:0b:
51:ca:67:af:cd:3d:49:f5:d6:77:05:38:27:e0:26:
06:e4:f1:e6:b3:0a:a5:66:d9:58:56:0f:dc:cd:47:
1b:6a:a4:55:78:5b:61:db:1c:a5:02:d7:50:ba:0f:
a7:48:c7:62:e5:12:60:07:da:e9:c8:00:b4:bb:52:
bb:c3:be:ad:d7:81:9a:41:07:78:35:04:30:e0:cd:
d0:f4:bc:ac:93:6b:ed:7e:75:bd:a2:ab:f4:87:c0:
15:e8:e3:e4:63:79:d6:ab:39:aa:bb:5c:59:eb:11:
df:84:6c:ac:10:89:da:54:ea:af:ec:f4:6d:f2:b9:
29:29:2a:67:5e:de:31:5b:9e:57:79:dc:cf:2c:04:
cb:da:ba:a8:44:1b:c4:99:7e:1f:fa:42:a8:6d:9d:
39:2e:ee:1a:a7:e2:ee:1c:25:22:54:bb:83:2d:ef:
00:a3:50:ff:59:6f:4e:3d:8e:3a:5c:00:f8:ba:cb:
52:87:31:f1:4d:e0:20:34:b6:b5:c9:97:76:a0:de:
30:7b:ac:8e:62:75:f9:09:8b:90:23:0a:4a:93:b3:
a9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:7F:25:6E:9A:9A:B6:6A:31:43:72:2E:AA:44:71:15:92:ED:EC:BD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E4FD14E8506411F185E0AEB8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.16.0/20
Signature Algorithm: sha256WithRSAEncryption
b9:69:7f:1c:e5:df:37:a4:32:50:55:cf:54:8d:99:db:ea:44:
32:3e:78:42:e7:8b:60:e1:17:68:0c:c5:91:ee:86:47:3f:da:
bd:c2:17:c6:50:6a:62:8e:45:91:1c:4b:4f:75:9e:bf:b3:da:
12:e2:22:11:47:b6:43:f2:f4:3a:20:62:05:77:0a:16:1b:fd:
a9:ea:83:86:10:15:a3:6a:22:10:5e:50:fd:59:2a:04:de:29:
d1:f9:6c:59:db:28:eb:86:eb:da:08:1b:2b:6b:fe:eb:46:40:
65:f2:96:ba:ae:ed:4b:fb:8f:96:52:46:29:ee:07:c2:a1:9e:
cc:2e:e5:8c:e8:d5:25:0d:db:da:21:fd:fc:66:8c:ba:ea:92:
42:28:d3:f4:7f:0e:12:bd:5e:98:44:79:b8:e5:04:1c:72:d5:
0f:03:58:d8:53:29:9c:8a:36:3c:e9:86:c5:62:b9:76:67:92:
ec:cb:75:25:19:49:7d:f1:1e:6e:4c:0e:05:fc:3e:34:bd:f5:
e1:36:c9:d4:be:5c:4a:ba:60:c1:77:7c:e1:ac:5d:b6:d9:c6:
19:5f:bc:cc:18:ed:f8:5b:c3:07:bf:82:84:b1:d2:06:56:94:
61:ce:5e:35:84:80:d1:c2:40:76:ad:18:4d:52:24:b9:6a:58:
e6:51:f5:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:07:32 2026 by rpki-client