Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/09939DA6348911F191A964BCCE1D38B0.roa
File: 09939DA6348911F191A964BCCE1D38B0.roa (raw, json)
Hash identifier: tFRcOa16ckY7Ysup9JJ/DxGB7GrXtVf68HWaW0dPudk=
Subject key identifier: AF:27:39:98:2D:5B:10:64:29:A1:09:1D:3C:B3:7C:53:71:B8:DB:53
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AB74
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/09939DA6348911F191A964BCCE1D38B0.roa
Signing time: Fri 10 Apr 2026 02:57:40 +0000
ROA not before: Fri 10 Apr 2026 02:57:35 +0000
ROA not after: Sun 19 Apr 2026 02:57:35 +0000
asID: 32043
IP address blocks: 45.197.168.0/22 maxlen: 24
45.203.48.0/22 maxlen: 24
45.204.54.0/24 maxlen: 24
45.204.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 02:57:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109428 (0x1ab74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 10 02:57:35 2026 GMT
Not After : Apr 19 02:57:35 2026 GMT
Subject: CN=69d86724-0d11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ad:3e:cb:48:c7:68:62:8b:8a:4b:c7:32:80:
30:05:b8:e5:cc:dd:ee:86:74:79:28:da:54:bd:47:
32:ad:e5:71:a4:6f:7a:33:6b:66:5e:02:74:22:bc:
83:4b:2d:43:31:d6:65:e4:be:9a:c1:db:64:7c:32:
53:42:1c:4b:cf:b6:24:50:9f:9d:6f:f0:c7:63:7d:
96:6c:42:b5:e7:d3:2a:a6:f6:98:56:1f:fa:d6:ea:
1d:a3:17:32:e0:6b:71:74:f6:51:e9:a1:ea:48:8d:
17:80:f5:a2:2a:f2:7f:98:d4:2a:9e:93:62:61:bb:
14:e6:bc:17:eb:69:9a:4a:07:5b:55:8c:66:0e:3c:
fa:17:d4:60:8b:06:9f:16:65:72:ba:eb:19:b0:e8:
0a:26:fe:08:cb:eb:a3:13:f9:14:4b:84:a5:4c:25:
04:66:72:cd:21:20:02:d4:7a:97:1f:eb:3b:17:0d:
4f:90:02:24:57:0e:d4:34:52:d4:a3:5f:ca:8c:92:
2f:15:b2:a7:d4:1e:be:1d:89:0b:6d:ca:43:c3:a4:
54:8c:a2:e8:b6:e1:61:73:42:25:1d:26:7b:29:cd:
22:ab:6b:f1:33:91:59:20:10:8c:8e:aa:2c:3e:68:
f0:a2:9b:7d:69:64:fd:18:17:17:a6:85:19:f1:4d:
b6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:27:39:98:2D:5B:10:64:29:A1:09:1D:3C:B3:7C:53:71:B8:DB:53
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/09939DA6348911F191A964BCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.168.0/22
45.203.48.0/22
45.204.54.0/23
Signature Algorithm: sha256WithRSAEncryption
44:2e:39:33:50:5d:b0:3f:fa:41:27:9a:f3:cc:ed:bc:bf:e6:
bd:9a:0d:bc:92:fe:b7:64:a3:f6:5d:b2:9c:92:0f:88:9b:b3:
b0:43:94:50:ab:01:86:3f:2a:63:ed:88:17:5f:93:a3:e6:2d:
80:17:09:8d:22:18:5e:f8:3c:d3:5f:54:de:4d:c3:6a:43:46:
7a:36:b0:3e:5e:a0:65:13:3d:d6:15:a6:a8:0c:15:9a:33:c6:
58:67:0b:c7:c9:b6:86:d5:df:cd:85:84:f0:a1:7a:65:ea:06:
64:33:08:2a:f8:85:bc:13:52:9e:15:3c:9e:2f:c7:83:16:b4:
05:57:25:2d:0d:2f:f3:5d:45:e0:cd:be:56:d6:12:c4:32:ba:
51:cb:e1:b2:0b:a2:67:97:91:57:0d:94:6f:21:b8:67:35:b5:
57:2c:a5:58:73:d7:23:96:ea:94:cc:be:ed:79:7b:36:90:8a:
fc:b9:6b:76:4e:96:db:24:3b:ae:e8:46:73:ea:84:6e:bc:0f:
ff:07:7c:79:2c:89:07:d3:7a:0a:13:d9:1d:17:83:40:1f:8c:
b9:bf:fc:45:65:7b:c0:d6:70:2c:df:01:8f:97:43:ce:f5:00:
0a:64:3a:f0:8b:6b:d9:3f:22:f2:9b:8b:a2:5e:44:e9:f9:7d:
c8:6e:28:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:55:35 2026 by rpki-client