Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/078700822DF611F19AACD37EDAE4EC9C.roa
File: 078700822DF611F19AACD37EDAE4EC9C.roa (raw, json)
Hash identifier: 60P7qNGRVlwYLOCBUA9NmKXqw510JOw/yKpg1kxfzx0=
Subject key identifier: 60:E2:83:C1:D1:F7:2B:7C:05:34:29:5E:2B:D3:2A:54:E1:1B:E0:71
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A920
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/078700822DF611F19AACD37EDAE4EC9C.roa
Signing time: Wed 01 Apr 2026 18:10:14 +0000
ROA not before: Wed 01 Apr 2026 18:10:09 +0000
ROA not after: Thu 07 May 2026 18:10:09 +0000
asID: 16509
IP address blocks: 45.195.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:26:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108832 (0x1a920)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 1 18:10:09 2026 GMT
Not After : May 7 18:10:09 2026 GMT
Subject: CN=69cd5f86-a5bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:04:e5:ae:1b:1b:f8:55:08:9f:e6:dc:7c:bb:
04:ca:37:bd:96:e3:70:cf:96:eb:4e:27:7b:03:2e:
44:05:bf:f7:a4:28:90:0c:80:e6:36:fa:f6:3b:9c:
48:a3:d2:f6:d2:87:53:8e:60:02:b1:11:06:2e:d5:
cf:6d:da:36:9c:39:5e:3b:34:b5:6d:b8:d9:2f:ae:
fe:14:f0:4f:4f:5c:84:7f:74:42:8e:f4:0f:a8:82:
bf:6b:7a:1d:4d:4e:ea:64:4b:30:3b:a7:dd:dd:f0:
14:e6:23:c2:75:6a:53:93:04:37:e8:6f:48:8a:42:
2c:b9:00:f6:ef:14:b8:76:3d:0d:8a:3d:bc:ad:a4:
b1:93:e2:43:7b:ec:f4:60:d5:4f:f5:4c:ff:9f:db:
22:1e:a8:b1:4e:69:2b:81:71:e2:55:ab:d8:5c:36:
1c:99:c6:1e:ab:a3:1c:0a:39:7c:29:50:3f:35:36:
ec:6d:72:58:2e:90:53:74:ea:0d:53:a1:12:dc:01:
57:ea:7e:0d:e5:ea:01:1d:dd:07:81:a3:e2:f3:03:
81:1e:44:9f:29:e0:64:0a:c9:90:9b:34:70:52:e6:
f8:23:04:e1:68:b9:15:b0:a8:3d:f1:d4:e5:72:b6:
02:bc:64:3b:15:38:d3:c0:5a:ba:f7:d4:c8:f2:18:
b7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E2:83:C1:D1:F7:2B:7C:05:34:29:5E:2B:D3:2A:54:E1:1B:E0:71
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/078700822DF611F19AACD37EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.93.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:51:1c:84:14:d9:dc:40:8d:06:8d:6c:39:d5:96:62:10:c5:
3b:06:3a:87:dd:e0:7d:a2:2b:2b:5b:cd:22:32:46:24:4f:3a:
4b:6d:8d:63:b4:0f:96:14:9c:dc:3b:27:8f:52:ef:66:6b:93:
c6:88:fd:9d:74:7c:2b:f1:89:dc:44:26:de:2a:9b:8c:32:0b:
f6:80:d2:44:1d:52:1d:0b:6e:d6:2e:83:5c:15:c9:89:33:c5:
f9:2f:8a:aa:d2:c4:e5:16:1f:dd:03:19:88:c2:c0:75:d9:92:
31:ab:e9:d4:51:f7:f3:9a:87:5a:41:22:dd:cc:9c:e8:9f:1e:
db:fd:cd:a0:1c:e4:8a:9c:4f:89:02:03:ae:d4:bf:f6:8a:dd:
5d:a0:91:69:8c:f7:e9:90:9c:af:31:e5:7b:e8:fa:b9:31:03:
6d:10:a0:7f:aa:96:1d:6b:9e:95:bf:a9:56:40:22:02:61:d9:
b2:94:73:ef:5e:a1:23:cd:c8:3c:d6:74:f3:a3:84:2c:f7:c4:
85:3a:62:c9:f1:14:af:92:78:c5:97:61:52:d5:d6:0c:38:28:
52:44:35:fd:b9:87:4f:69:bd:e1:e0:ec:b3:61:05:4c:fb:ea:
f2:23:ba:80:bc:6e:8a:7a:a3:9e:fe:b2:72:90:a6:4d:9e:86:
8c:20:f6:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:00:10 2026 by rpki-client