Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F3B517D0550811F1987714FACE1D38B0.roa
File: F3B517D0550811F1987714FACE1D38B0.roa (raw, json)
Hash identifier: cPnYAI+xZ0+zUq/tof6Lkce50NKSuctvBQ76diTvqP0=
Subject key identifier: 5C:00:74:E0:5A:F0:B3:5D:E5:39:90:AF:61:12:87:8C:CA:A5:B6:26
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B6D8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F3B517D0550811F1987714FACE1D38B0.roa
Signing time: Thu 21 May 2026 11:33:56 +0000
ROA not before: Thu 21 May 2026 11:33:52 +0000
ROA not after: Tue 25 May 2027 11:33:52 +0000
asID: 140475
IP address blocks: 45.198.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112344 (0x1b6d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 21 11:33:52 2026 GMT
Not After : May 25 11:33:52 2027 GMT
Subject: CN=6a0eeda4-3b70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f0:99:7f:1f:4f:2f:02:81:aa:1a:88:b1:b4:
39:0f:6e:50:f6:52:8d:1e:cd:33:d4:de:dd:08:83:
e8:3c:fb:a6:30:1d:6a:9e:6c:5e:7d:f6:c8:a8:f1:
e0:71:ef:be:a6:9e:2e:3a:9d:a6:4d:ea:f2:48:9b:
e8:95:67:a2:28:bc:9c:2b:ae:78:43:0e:9c:5a:0e:
c3:44:aa:4d:95:be:42:51:32:80:f9:e5:ee:b5:ce:
a5:2d:f0:d8:39:d9:2f:4f:46:fc:66:d6:db:97:d1:
9c:d3:d2:09:74:84:d6:78:b6:99:56:be:14:83:8f:
45:f6:5e:b7:b6:fa:3c:34:cf:b4:fd:65:07:ee:0f:
41:f6:ff:0b:fb:60:a6:cf:ac:e0:be:7f:17:0a:5f:
78:ef:85:15:64:58:b9:e7:87:c4:f0:34:c3:ef:aa:
0c:c6:3d:10:9e:a8:ba:76:58:a4:5f:b7:88:59:d3:
d5:6c:e6:5f:cc:ab:b0:9f:e1:26:5d:83:95:47:6b:
32:88:93:59:88:41:29:b3:ab:04:35:47:7d:03:91:
72:92:58:2c:28:09:6d:8f:08:34:9c:2d:aa:01:78:
52:2f:33:bc:e3:a3:c6:02:f7:60:8b:57:41:03:b9:
da:73:ae:83:5f:7d:c4:20:00:8b:37:fc:f4:4c:29:
43:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:00:74:E0:5A:F0:B3:5D:E5:39:90:AF:61:12:87:8C:CA:A5:B6:26
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F3B517D0550811F1987714FACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.115.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:4a:8b:64:ef:63:1e:d1:7e:42:2f:9e:c4:78:7e:b6:79:0a:
73:39:d7:11:73:db:e8:4a:dc:40:65:f8:f6:c8:9c:12:3e:a3:
d7:f8:34:b9:87:69:20:5c:a0:b3:d5:4e:2c:2b:ce:34:8e:ad:
ec:08:3e:8e:f9:12:d0:21:ae:b3:a9:7f:77:70:4f:ac:8d:ea:
18:bc:29:6e:67:ba:69:cb:e2:96:3d:e5:3b:20:9c:56:da:b6:
c8:2d:1d:4c:ea:c3:fb:3c:85:2a:2f:bb:04:80:37:99:4d:c8:
84:ec:38:7e:bc:da:be:07:55:34:20:6e:27:9c:fa:79:a2:9d:
4c:a2:ac:7f:f0:fe:10:02:8c:ff:35:2c:a8:5f:60:cf:f5:9d:
ef:35:e9:54:ee:60:10:4d:ff:0e:c5:10:74:ca:dd:38:75:37:
d7:b9:78:a9:78:9d:5e:71:cd:d4:81:28:5e:98:f6:a0:4c:e9:
80:c6:82:33:9b:4a:6c:b7:29:a5:06:ae:5c:2b:7f:e7:fa:90:
f4:36:75:02:9c:95:fa:f9:34:57:27:51:65:b3:64:20:53:fc:
86:40:a3:3c:f0:69:36:2a:b1:3a:2d:aa:69:a3:c3:e2:24:da:
4d:53:62:9c:01:d7:0e:d6:fa:4e:38:c5:28:aa:31:4b:3d:01:
fb:6b:25:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:14:34 2026 by rpki-client