Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1313A23A396211F1AED361F1CE1D38B0.roa
File: 1313A23A396211F1AED361F1CE1D38B0.roa (raw, json)
Hash identifier: VQILQBjrt1KOGVGU+vWArom1k33dX46hUF8s2jvtgM4=
Subject key identifier: 6E:89:01:C0:5D:FB:48:DD:B5:5C:EC:92:C7:19:08:FA:8F:4E:F4:B6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01ACFB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1313A23A396211F1AED361F1CE1D38B0.roa
Signing time: Thu 16 Apr 2026 07:01:22 +0000
ROA not before: Thu 16 Apr 2026 07:01:17 +0000
ROA not after: Sun 26 Apr 2026 07:01:17 +0000
asID: 137263
IP address blocks: 45.195.16.0/21 maxlen: 24
45.195.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109819 (0x1acfb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 16 07:01:17 2026 GMT
Not After : Apr 26 07:01:17 2026 GMT
Subject: CN=69e08942-4b0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:88:f0:05:30:6f:07:f3:77:c1:3f:9f:ce:dc:
e8:60:80:32:b8:8e:46:69:b4:64:07:98:60:17:b3:
df:a8:21:c3:83:10:3e:d5:35:fc:b7:08:6f:33:e3:
ce:4d:26:59:60:e6:2b:a1:db:17:0b:5b:e8:ed:5e:
cd:3b:a1:05:ef:a3:f3:10:91:c5:e0:83:d0:9e:ad:
0e:69:b1:64:45:d5:52:89:98:41:44:1b:cb:31:90:
24:b8:3f:f8:25:f4:4e:b3:cf:f9:54:f9:ac:f5:9a:
d1:5c:72:1f:8e:94:fe:18:d9:a6:92:05:3d:6c:51:
38:53:d4:3e:e5:4f:c2:eb:48:d0:88:c8:22:cb:b1:
e2:90:9b:16:de:b8:cc:22:8b:b7:4c:8c:25:73:73:
24:77:24:6e:53:e2:68:ab:7f:2d:ca:b3:62:77:97:
f5:3f:0a:ba:55:7d:1e:2c:05:e6:9f:00:62:1b:1e:
4f:99:f0:c0:96:f6:0a:b8:66:00:40:de:2d:37:8d:
1a:9a:d1:9f:36:7d:9c:c0:3e:ca:38:cc:b0:b5:3e:
ed:97:9f:d8:f3:a1:ff:a3:56:86:b5:e8:3c:2d:02:
fc:c7:0f:b0:08:74:83:67:d0:68:7f:3b:f0:6f:79:
fa:4f:88:c2:d3:2c:92:04:ab:72:49:1f:69:6f:e4:
3e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:89:01:C0:5D:FB:48:DD:B5:5C:EC:92:C7:19:08:FA:8F:4E:F4:B6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1313A23A396211F1AED361F1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.16.0-45.195.24.255
Signature Algorithm: sha256WithRSAEncryption
1b:af:a5:da:2f:f6:e8:59:fa:49:c2:49:ea:7e:85:cf:14:a2:
26:7e:65:27:e9:df:67:98:83:50:f0:c8:a5:15:3f:8d:70:66:
94:bd:5d:e3:44:1d:71:d0:e2:5b:61:4b:33:b6:b1:a8:3c:f2:
84:d6:37:2b:d8:a8:c8:de:49:d1:6d:3f:73:61:c7:ec:0d:8f:
eb:be:3c:a9:c3:19:00:4a:23:92:e0:16:15:e0:a3:dc:65:dd:
53:27:a3:be:ad:16:84:bb:8a:dd:2a:b9:ce:f8:b3:bc:23:1c:
44:18:65:07:55:31:9d:fe:36:34:c4:f5:6a:0d:9e:b0:8b:ed:
17:2f:84:39:52:86:6d:c3:e2:6a:7a:c8:c8:7e:1f:86:0f:f3:
48:e6:7d:7e:8e:b9:67:f6:e5:fc:90:bc:59:ce:23:07:f4:9b:
de:a9:8f:ed:52:22:57:16:4d:7a:df:2c:4f:53:f6:cd:67:bc:
d8:53:6c:f7:2a:57:67:96:8e:f7:a7:cf:60:d8:07:28:11:4f:
81:68:d8:fa:0b:ed:cb:9f:4b:40:6c:5a:ad:5f:3a:19:02:4b:
f7:00:5f:ea:94:bd:9a:e2:86:93:0d:40:18:8a:a4:99:59:27:
a0:e5:3b:02:ed:b9:cc:a3:aa:4f:8b:cf:40:44:99:fd:5b:08:
87:dc:2c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:12:35 2026 by rpki-client