Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/138CAE3431A411F18C4FB2ECDAE4EC9C.roa
File: 138CAE3431A411F18C4FB2ECDAE4EC9C.roa (raw, json)
Hash identifier: 1N45ZX/0G+Q2ZiPtnjYzMPBYCeEjksRVPUsFZ/gz2O8=
Subject key identifier: 91:C7:77:7F:CE:1F:A0:58:1B:D8:9F:1B:A9:33:83:2B:D4:1C:41:37
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AA8B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/138CAE3431A411F18C4FB2ECDAE4EC9C.roa
Signing time: Mon 06 Apr 2026 10:33:40 +0000
ROA not before: Mon 06 Apr 2026 10:33:35 +0000
ROA not after: Wed 13 May 2026 10:33:35 +0000
asID: 25198
IP address blocks: 45.196.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109195 (0x1aa8b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 6 10:33:35 2026 GMT
Not After : May 13 10:33:35 2026 GMT
Subject: CN=69d38c04-e6c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:55:52:21:a2:10:31:36:d9:0c:80:0a:ae:1f:
da:bf:f8:79:2b:4a:7a:6a:b0:22:43:4e:58:c1:7a:
ea:60:ae:5d:54:74:1a:08:e5:ab:27:b6:76:83:b7:
5f:a9:94:aa:69:74:5d:0b:b2:78:54:57:6e:d9:07:
63:48:6c:8e:da:7f:b1:38:fb:53:b3:58:4c:a8:22:
28:59:e2:1c:a1:4f:3a:32:b8:75:4b:0c:c6:4b:a5:
60:6e:ac:2f:5f:27:b5:87:c7:80:a9:74:5f:dc:c6:
c4:90:2d:92:7f:4e:ea:eb:68:92:7e:36:b0:4d:4e:
53:8b:4b:5c:a9:6a:51:6c:58:53:e7:78:02:53:fc:
f5:00:10:16:c2:7b:f7:6b:e6:9e:7d:e8:ba:ed:5f:
ee:d2:27:70:12:bc:21:10:de:a7:a6:d5:3e:da:28:
2b:56:50:c2:1f:5b:cc:37:5c:d4:03:40:54:85:2b:
af:44:a7:ae:27:da:92:63:66:2f:39:aa:26:c8:c2:
79:5d:33:1b:a4:f0:dc:38:42:83:f3:25:cb:79:f3:
be:87:2a:35:49:dc:15:27:04:28:4a:5b:2b:05:e5:
e1:52:47:2f:3b:e6:81:9e:52:29:56:6a:48:83:8e:
d9:66:eb:0d:21:7a:bd:dd:18:9b:a4:f9:f4:a1:aa:
81:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:C7:77:7F:CE:1F:A0:58:1B:D8:9F:1B:A9:33:83:2B:D4:1C:41:37
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/138CAE3431A411F18C4FB2ECDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.241.0/24
Signature Algorithm: sha256WithRSAEncryption
52:84:d6:fa:f6:85:91:20:a1:94:ce:a5:5c:35:07:36:e3:e4:
b7:bc:c5:fe:a2:55:31:94:f5:52:0d:c8:97:67:06:b0:63:58:
4f:3b:e7:07:b3:f8:1d:82:b3:20:e9:32:50:1a:d1:06:04:62:
10:b4:67:db:70:65:4b:6e:82:b6:2e:7b:f9:62:f3:ae:04:a3:
fc:9c:a2:ed:55:38:4b:3e:b0:80:b8:ff:9d:3a:93:83:b0:1a:
7e:85:97:55:89:2b:0a:e1:5a:ed:46:b8:f9:cf:45:53:c8:ce:
85:21:c7:b9:48:83:9f:c3:c4:ee:17:26:66:23:47:2d:45:5d:
c4:1f:20:a9:c2:36:77:20:bd:11:7c:2c:b9:a2:5c:fd:6e:d6:
e5:a6:46:d6:5b:79:13:fc:d2:85:e3:e4:d2:98:96:8d:75:a1:
2a:ea:ac:d5:b8:f7:18:94:03:cc:cb:5b:aa:62:60:94:72:d1:
cd:fb:a8:f4:94:ce:0a:bc:99:f1:2a:d4:35:ff:c1:aa:66:fd:
b7:0a:9d:a0:b7:da:a3:77:35:75:fd:07:30:74:d7:92:69:46:
00:06:fa:46:ea:4c:70:0c:9a:b7:66:89:e0:c6:f1:e5:16:7b:
c4:4a:e1:a3:6f:70:a3:aa:f9:fa:76:8c:b3:b4:16:59:02:77:
2a:ea:5d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:12:44 2026 by rpki-client