Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0AAEA04C366D11F1BF075BD4CE1D38B0.roa
File: 0AAEA04C366D11F1BF075BD4CE1D38B0.roa (raw, json)
Hash identifier: H49L9te+FTb4tYbaMYSL+Abh9uL3VTqSnkpZeUTbPZI=
Subject key identifier: 59:5E:0C:8A:91:C9:53:B4:C4:6C:7C:94:49:CD:34:61:82:B0:96:A8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AC1D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0AAEA04C366D11F1BF075BD4CE1D38B0.roa
Signing time: Sun 12 Apr 2026 12:42:19 +0000
ROA not before: Sun 12 Apr 2026 12:42:13 +0000
ROA not after: Sat 16 May 2026 12:42:13 +0000
asID: 51142
IP address blocks: 45.195.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109597 (0x1ac1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 12 12:42:13 2026 GMT
Not After : May 16 12:42:13 2026 GMT
Subject: CN=69db932b-a2cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:29:22:08:76:2a:39:09:a3:54:c9:16:98:1d:
15:dd:a1:88:a8:ed:48:db:f7:1f:70:84:1b:6a:41:
4d:96:00:05:27:14:5e:9e:c9:8d:f0:6d:20:e7:c8:
c8:63:ff:0a:08:e3:2e:60:14:4c:b5:4b:7e:fb:3e:
b2:ff:cd:68:d3:17:4c:75:92:6b:71:09:84:71:82:
67:5c:20:f8:6e:ce:f6:2c:59:c5:ee:2c:6b:0c:4a:
30:45:95:4d:fc:37:fb:93:5d:ac:6c:92:1e:22:ae:
24:3c:e6:78:6b:1f:8b:cb:8c:8f:91:43:7d:50:2d:
32:f9:77:1f:21:71:de:ee:20:62:25:ff:8c:98:7d:
7f:f4:6c:c4:e4:72:e7:51:85:1f:af:44:1d:a4:35:
46:5e:45:44:11:13:65:bc:75:22:0f:61:48:f8:88:
a6:42:1c:b8:55:15:13:52:80:78:7d:ec:ee:d4:39:
d5:bf:8d:26:a2:e7:02:b0:a9:fd:75:a7:6a:5e:8d:
33:b0:97:88:9e:69:b9:c2:54:d3:38:11:7e:8f:f9:
78:97:54:b7:68:82:cd:2f:6f:f9:ad:71:d5:57:ba:
46:f8:ea:0d:47:31:e5:7d:04:74:e2:54:1b:a3:d6:
d6:2f:14:b0:f0:2a:c6:99:9e:f8:2e:ca:3e:ee:30:
6e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:5E:0C:8A:91:C9:53:B4:C4:6C:7C:94:49:CD:34:61:82:B0:96:A8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0AAEA04C366D11F1BF075BD4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.139.0/24
Signature Algorithm: sha256WithRSAEncryption
60:5f:d4:f7:86:a6:51:76:f2:c4:07:57:4b:40:c5:b6:ee:40:
eb:b6:75:8e:e1:50:38:c9:c9:eb:ac:ee:ae:6b:bd:08:1e:e2:
4c:f7:02:cd:27:cf:da:fd:7a:1d:64:7f:c7:27:d0:81:fe:cf:
8b:fc:7a:67:a7:0c:35:d3:9f:0b:e0:96:e7:79:83:3c:2a:07:
87:d3:90:1d:02:f0:f6:66:3c:e5:0e:e0:2a:fa:16:be:6a:49:
df:8b:0f:de:de:3b:8a:84:77:ca:97:47:31:62:1a:a9:6d:4c:
bb:ca:84:8c:17:b0:6a:88:17:cf:d5:02:5c:12:9b:4a:0f:7d:
89:4a:cf:7e:5c:c0:4b:41:5f:67:87:b9:04:d0:1f:fb:0f:6d:
5e:e1:25:c2:9e:ae:44:16:47:fb:cc:02:8b:36:d2:60:54:f2:
28:2b:2c:4e:40:3d:ec:f1:ce:c9:c4:7a:aa:9b:cb:fe:97:41:
ef:bb:ea:80:2b:4f:a3:b7:f6:54:65:87:f8:29:42:8b:e2:63:
2f:0c:fe:87:b6:93:a1:e7:e0:40:99:78:eb:0b:27:09:63:01:
f8:2a:56:16:77:c7:b6:1b:52:ce:4a:5b:5c:68:80:48:a4:2f:
e7:18:c4:87:f0:ba:16:9e:b3:47:04:f0:74:5b:33:19:ae:d6:
54:de:64:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:26:30 2026 by rpki-client