Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FACC803A599F11F181223BF5CE1D38B0.roa
File: FACC803A599F11F181223BF5CE1D38B0.roa (raw, json)
Hash identifier: bhN0SEPpe/hbXq+bLmXec5ebCpnF0kgLSxYkRCQf2FY=
Subject key identifier: 77:DC:D3:E5:40:42:3E:0D:6A:C4:EF:EE:A8:6E:79:3A:0A:8B:3E:25
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BA2B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FACC803A599F11F181223BF5CE1D38B0.roa
Signing time: Wed 27 May 2026 07:45:07 +0000
ROA not before: Wed 27 May 2026 07:45:02 +0000
ROA not after: Sun 05 Jul 2026 07:45:02 +0000
asID: 204741
IP address blocks: 45.194.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113195 (0x1ba2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 27 07:45:02 2026 GMT
Not After : Jul 5 07:45:02 2026 GMT
Subject: CN=6a16a103-15e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e0:0a:8a:b3:27:63:8c:d5:45:27:a2:f6:71:
8d:4b:57:77:d9:04:d2:60:81:96:dc:98:80:c3:fd:
72:96:b9:fe:7b:42:14:d2:a0:5e:e0:f5:d1:8e:34:
2f:32:be:76:de:8d:dc:12:c4:af:60:8e:7a:33:01:
6b:62:a9:bc:56:77:97:43:a0:47:27:e5:ca:d3:ba:
d8:e9:c6:d2:38:9e:fc:03:db:2d:13:7c:19:52:05:
77:56:b2:1f:29:a6:48:83:f4:12:1c:8a:5a:26:c0:
91:0c:9b:e0:14:2b:4a:a8:c8:22:04:66:87:50:93:
62:af:aa:00:e6:ca:4f:7a:a6:74:6f:01:f0:b4:61:
65:49:20:df:c3:6a:08:bf:ae:f9:1a:ca:c5:f6:54:
ac:87:fe:70:1c:60:08:69:c8:70:dc:14:f7:61:62:
b3:28:38:c2:bc:9d:af:96:39:71:f8:44:c8:31:fd:
ee:fa:4d:56:69:77:48:65:71:d2:bb:02:bd:93:40:
b0:61:f6:02:43:0f:30:2f:c0:06:ce:e9:8d:58:00:
8d:b9:95:ff:e7:6a:78:2e:23:eb:7e:86:14:f2:1b:
5a:48:55:64:f0:6f:94:af:81:a6:ce:cc:62:38:67:
36:b3:ad:e8:b6:a4:1a:7e:ff:93:5e:1e:95:b9:62:
2f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:DC:D3:E5:40:42:3E:0D:6A:C4:EF:EE:A8:6E:79:3A:0A:8B:3E:25
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FACC803A599F11F181223BF5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.65.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:5a:8a:83:76:e0:c4:da:8f:47:ee:62:59:07:cf:b4:c8:d7:
42:71:82:39:bb:ce:bc:63:42:b2:24:75:36:5b:d8:73:cb:e6:
d2:11:9f:be:86:f4:65:c5:99:00:76:30:1b:8a:e9:09:36:e2:
99:02:05:1c:70:46:4e:2d:83:11:2c:26:9f:af:fe:cd:cc:63:
b0:5d:7a:ba:e1:ae:41:83:65:60:7e:e2:09:39:af:e4:f2:6d:
dc:da:8f:1d:49:d6:8f:82:53:c4:36:3a:cb:03:69:71:b5:ee:
59:d6:d4:81:9e:63:a5:cf:46:11:2b:24:6a:85:2c:f1:4c:96:
a0:e3:2f:21:dc:fb:bb:33:d9:e8:0b:c9:b9:c7:0a:bb:d5:ea:
e3:98:d1:c9:56:49:ae:fc:a4:23:a1:86:b8:e9:b4:60:b4:4d:
25:2f:1e:2b:5c:43:c5:79:dd:84:18:43:52:c4:8f:46:86:dd:
00:32:dc:63:9d:30:b5:f2:ce:47:da:3d:6b:b0:04:b2:0f:cb:
7c:b0:66:88:7b:59:ff:08:8f:bb:c4:30:8a:ab:a9:42:ef:11:
8e:4c:2d:da:53:65:c2:ee:66:1f:14:14:e6:f0:83:66:2e:ca:
f4:34:96:16:95:7f:ae:c7:b0:9e:e9:a8:82:0e:a1:01:95:b1:
ea:c1:87:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:28:51 2026 by rpki-client