Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E89EC1EC55D611F1890A2FE4CE1D38B0.roa
File: E89EC1EC55D611F1890A2FE4CE1D38B0.roa (raw, json)
Hash identifier: DNKUGq7NcAqzcV9s0mB+OokJOkKaeKmA87KViyPz614=
Subject key identifier: F5:0C:D9:12:A9:D8:53:1E:B7:5B:01:E8:54:B0:93:5D:D3:D2:C6:D2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B7EF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E89EC1EC55D611F1890A2FE4CE1D38B0.roa
Signing time: Fri 22 May 2026 12:08:14 +0000
ROA not before: Fri 22 May 2026 12:08:09 +0000
ROA not after: Sun 28 Jun 2026 12:08:09 +0000
asID: 395272
IP address blocks: 45.196.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112623 (0x1b7ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 22 12:08:09 2026 GMT
Not After : Jun 28 12:08:09 2026 GMT
Subject: CN=6a10472e-1223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:3b:e4:74:42:5d:e9:85:4c:a7:db:60:99:62:
af:13:08:cd:85:fc:51:72:d7:90:dd:03:5c:b4:4b:
ca:b8:f7:11:d3:b8:d8:06:ff:ef:df:bc:f2:fe:ee:
f2:f6:71:c3:80:27:72:db:b3:d6:dc:a2:fe:64:95:
97:95:11:7e:07:82:83:42:fb:cf:e9:39:d0:19:96:
0c:49:33:2d:a0:76:46:4e:35:77:6b:16:de:1e:54:
a2:eb:38:68:b6:d6:f6:b0:71:ca:bf:f1:88:9b:7c:
a3:7f:35:1d:56:9c:b1:ee:4d:55:4e:46:0d:32:9c:
2f:36:63:92:72:d6:1a:af:b2:8a:97:93:92:89:fc:
5f:e5:ef:ed:0d:c0:ed:46:f7:cb:cd:31:84:b6:f8:
17:68:11:24:0f:36:16:ca:cf:6e:41:69:c3:8e:36:
20:54:a9:65:6d:11:e9:23:2f:d9:41:ec:62:87:44:
70:49:ef:8f:6f:ba:f8:2d:61:c1:80:0f:5c:6e:c0:
c6:dc:0f:d5:23:44:fb:eb:be:09:76:10:a0:66:94:
ba:39:3d:b1:82:40:6f:ce:7a:5b:3f:4c:76:4f:66:
02:26:50:7f:fc:18:97:d4:9c:08:ff:bb:c9:7d:64:
7e:43:07:ea:2a:8f:fb:5e:29:fb:e8:b9:85:fe:96:
e1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:0C:D9:12:A9:D8:53:1E:B7:5B:01:E8:54:B0:93:5D:D3:D2:C6:D2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E89EC1EC55D611F1890A2FE4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.177.0/24
Signature Algorithm: sha256WithRSAEncryption
19:02:1d:b7:a1:4f:ac:3c:ae:50:01:1f:ee:61:ae:8b:28:7f:
c5:7f:d0:42:1b:39:3e:40:a9:2c:6c:6d:30:24:73:5f:b2:c3:
f4:07:1a:87:17:a5:e6:7a:41:c3:5a:32:7a:16:22:28:d5:96:
28:3d:f2:6f:a0:6a:08:7a:b2:ed:7a:52:c9:bc:39:0a:43:bd:
e5:70:2d:be:1b:7f:4a:86:7f:6b:d8:d1:57:ef:8c:bd:50:fb:
f8:78:6a:d4:ac:21:81:4a:a7:2f:dc:5e:d5:a2:31:f4:ea:28:
2e:91:65:db:a5:00:9a:10:89:6e:e0:ec:cd:81:5d:ed:56:b9:
0a:4c:8b:7e:d3:31:12:ee:6f:65:72:1b:c1:d3:c3:27:cf:49:
5d:5a:9e:c9:91:0e:70:24:89:71:d0:8e:a0:f7:34:a9:1e:b3:
4b:a2:f7:66:3a:6f:c6:ff:6c:f5:b4:b1:87:48:82:23:eb:51:
48:fe:45:f0:32:14:61:88:d1:ae:dd:50:48:5e:c3:18:57:12:
05:48:81:05:0f:47:84:19:5b:3c:d7:f2:96:e8:e6:9f:90:cb:
4a:c5:8d:ca:52:23:16:6f:07:65:33:ed:35:10:4c:9e:c3:07:
c1:f7:f2:1d:44:df:32:9c:de:9a:cc:95:d0:36:52:cc:44:6d:
7a:26:3c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:14:04 2026 by rpki-client