Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EFFCBB4A5EAC11F18D60B816CF1D38B0.roa
File: EFFCBB4A5EAC11F18D60B816CF1D38B0.roa (raw, json)
Hash identifier: 1LWJ8PV4M8RDmNP+B4HWI8ExMT8w+mx3NICLimX+BOE=
Subject key identifier: 51:73:32:99:B2:B8:63:59:FE:BF:83:25:AF:A7:50:DA:24:69:3B:A1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BB5A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EFFCBB4A5EAC11F18D60B816CF1D38B0.roa
Signing time: Tue 02 Jun 2026 18:00:28 +0000
ROA not before: Tue 02 Jun 2026 18:00:24 +0000
ROA not after: Thu 09 Jul 2026 18:00:24 +0000
asID: 48031
IP address blocks: 45.204.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113498 (0x1bb5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 2 18:00:24 2026 GMT
Not After : Jul 9 18:00:24 2026 GMT
Subject: CN=6a1f1a3c-c00c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7a:ff:3c:83:3a:98:31:c4:eb:55:72:cc:c4:
12:18:ef:89:2f:b5:56:36:20:4f:bb:20:6f:0e:2b:
b2:55:fe:08:d6:53:74:df:b7:96:55:fa:f6:ed:39:
85:9b:e0:04:b0:5e:24:c9:0f:cf:a0:36:0e:fa:ab:
fc:f1:04:6a:ec:5f:e8:e4:94:e9:03:3e:4b:68:69:
83:2a:91:4f:4e:9e:0f:57:0a:df:d0:22:4b:93:cc:
8c:cd:6c:64:a5:9e:dd:87:38:ce:f0:9d:f8:60:7d:
c8:06:c4:c3:88:89:51:96:9b:66:1f:83:e3:52:7c:
94:65:b0:c4:45:68:e1:9e:8c:49:b9:77:a0:cc:a8:
4c:28:34:6a:eb:95:9e:b7:55:b0:c8:fa:fc:ec:b7:
5e:10:59:53:59:8c:71:4e:d4:c7:35:75:3d:2e:aa:
85:0f:ac:86:5d:db:17:6e:08:da:e2:b7:87:48:ed:
e1:8d:d7:39:e4:0d:cb:3a:15:50:6f:fb:43:0f:7c:
d5:e6:9c:cb:dd:a9:fd:5d:aa:f3:cb:45:47:0a:e9:
a2:ed:59:2b:ac:7a:68:b2:10:a9:8d:12:83:a1:a0:
08:ce:1b:d3:2f:e9:af:39:ca:cd:dc:2a:cd:af:21:
50:a5:20:ce:93:b4:9a:db:b8:d7:21:24:fe:22:f5:
d6:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:73:32:99:B2:B8:63:59:FE:BF:83:25:AF:A7:50:DA:24:69:3B:A1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EFFCBB4A5EAC11F18D60B816CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.69.0/24
Signature Algorithm: sha256WithRSAEncryption
02:13:ce:1f:60:4e:ed:69:2b:ac:9a:81:59:83:d7:a2:51:32:
22:f8:02:8e:a8:25:de:97:6e:59:15:2d:4c:a3:15:5f:f0:3e:
b1:1c:47:3a:cc:1b:6f:aa:22:7b:d5:91:44:72:30:0a:98:5b:
0c:20:ce:e6:ee:a6:7f:f2:54:69:76:18:d5:57:6f:9e:a8:dd:
97:09:8c:63:56:5e:3c:ad:d9:2b:2b:bc:48:01:24:d2:b6:b1:
68:68:e5:6c:26:ee:6b:a8:ba:0e:41:48:6e:90:c3:bd:7f:ed:
51:1a:b8:cc:b4:c9:15:e9:71:20:97:2e:f7:0c:d6:c9:42:23:
6e:e5:72:5f:b8:bb:a9:97:6b:fe:17:a0:70:a7:d7:e6:67:3a:
6a:6e:71:40:34:dc:09:95:c7:09:dc:3a:2a:9f:79:5c:89:2d:
cb:da:79:c7:e6:7c:cb:c9:ca:92:f9:69:ca:9f:d1:0e:23:df:
15:e5:76:cc:f8:89:e6:92:87:b7:0a:b7:16:8f:34:03:6e:e3:
e5:82:f7:89:b9:8e:6f:a5:38:b8:89:84:30:7f:7d:ce:21:ec:
53:63:26:cc:ac:5a:78:93:e3:cc:62:3d:13:12:45:4b:40:4d:
7d:23:07:9a:c6:9a:c3:2a:36:20:78:ee:48:d9:3c:7e:bb:59:
13:ac:9e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:07:03 2026 by rpki-client