Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E7810EFC5F2011F1A3F18EE5CE1D38B0.roa
File: E7810EFC5F2011F1A3F18EE5CE1D38B0.roa (raw, json)
Hash identifier: cz8B04flcpJV9sBwQ1X0f/PQKN9datVbLxEw7/PV5mw=
Subject key identifier: 16:13:0D:9C:DE:9C:A8:82:8A:8F:69:ED:EA:3C:21:54:54:07:B2:2E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BB83
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E7810EFC5F2011F1A3F18EE5CE1D38B0.roa
Signing time: Wed 03 Jun 2026 07:50:36 +0000
ROA not before: Wed 03 Jun 2026 07:50:31 +0000
ROA not after: Wed 08 Jul 2026 07:50:31 +0000
asID: 138985
IP address blocks: 45.199.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 14 Jun 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113539 (0x1bb83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 3 07:50:31 2026 GMT
Not After : Jul 8 07:50:31 2026 GMT
Subject: CN=6a1fdccb-14a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5b:48:e6:01:cf:2d:33:7a:12:b9:e6:d7:cb:
a2:32:62:dc:88:b5:3e:66:d9:b2:0a:31:73:e9:37:
c3:b3:04:9a:c0:06:dd:61:00:5a:50:ef:3b:4d:e3:
40:3d:e7:a4:df:1c:23:da:03:ca:19:7c:8c:19:c6:
4d:b8:ff:68:10:62:77:a9:5a:14:97:7b:40:51:b3:
15:4a:cd:e0:12:de:b2:28:85:c4:29:86:d3:15:e5:
d3:a2:2b:4f:4b:27:5e:22:ae:71:c5:8d:b8:1b:35:
83:c8:d7:0f:6e:4b:84:56:01:2a:72:b0:7f:9a:5c:
b2:0b:e5:c5:39:f5:16:33:98:cf:cc:8b:f7:7e:d9:
2d:89:8c:b1:99:e2:7d:1b:60:57:2d:af:b3:d7:93:
9f:26:fa:29:30:0c:7c:7e:e2:db:30:49:49:7f:0b:
3e:89:c7:c9:77:ac:68:95:9b:ad:5b:68:64:1d:7e:
1d:33:1c:6c:59:0d:02:dd:fa:4c:06:fa:43:b0:fd:
f4:00:ca:58:99:1d:fd:cb:97:ca:16:23:c2:c7:25:
73:f0:9b:11:75:45:a1:4c:7e:79:c1:39:0c:9c:33:
88:7b:1f:dc:ce:ef:fa:30:ec:ce:e8:3f:c5:a3:d6:
ea:3d:68:b5:62:76:44:13:7f:68:8a:24:b6:3f:c6:
44:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:13:0D:9C:DE:9C:A8:82:8A:8F:69:ED:EA:3C:21:54:54:07:B2:2E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E7810EFC5F2011F1A3F18EE5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.187.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:af:ca:43:52:fb:da:64:bf:43:39:9d:5a:e9:ce:dc:e1:39:
03:c4:3d:4f:3a:67:ab:57:b9:64:ca:19:ca:29:46:73:0d:7a:
dd:aa:0f:37:34:0a:e2:96:58:5d:92:a6:81:03:f9:f3:36:91:
9b:28:c5:e4:50:a3:78:c1:b3:ac:da:64:ff:c2:4e:04:71:93:
61:bc:20:49:c2:0f:4d:9c:cb:9e:ae:80:1d:79:0a:62:cc:f3:
e6:5b:19:b1:1b:0e:2c:48:32:b0:d4:d1:77:b0:df:ef:45:e9:
f7:ac:c2:49:87:6f:92:93:aa:bf:62:64:5a:b7:5e:a0:a1:3b:
4b:b0:87:43:7d:d6:05:e3:fe:27:b2:71:8b:9f:25:4d:59:74:
0c:38:eb:99:1e:4d:17:1c:dc:af:eb:64:0c:87:f8:4b:55:0c:
cf:85:a5:77:39:84:e2:af:d0:81:0a:df:4f:b0:b5:68:98:8b:
fa:d6:dd:86:31:8d:17:70:de:75:2f:98:13:3d:28:3e:9b:81:
a5:6a:86:1f:6c:45:d9:3f:ec:1c:84:9a:b4:4a:73:cf:a9:1d:
7d:e9:a2:a6:94:9b:1c:07:3a:d6:a1:40:5f:ac:0c:a2:fb:fa:
e9:a5:72:ef:f1:fb:f8:f8:66:38:ca:86:32:7f:79:04:25:e1:
ec:f4:2b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 11:46:52 2026 by rpki-client