Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/168016183A6311F18F0A8709CF1D38B0.roa
File: 168016183A6311F18F0A8709CF1D38B0.roa (raw, json)
Hash identifier: wzmv/HgPSJ8o0bhhFrjvnw33M1IrZeIXtPcdJfQ8X2g=
Subject key identifier: BA:E7:E2:41:67:14:A7:51:A5:BF:68:57:34:B2:9E:81:5D:E5:3A:31
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AD76
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/168016183A6311F18F0A8709CF1D38B0.roa
Signing time: Fri 17 Apr 2026 13:41:08 +0000
ROA not before: Fri 17 Apr 2026 13:41:04 +0000
ROA not after: Sun 26 Apr 2026 13:41:04 +0000
asID: 142002
IP address blocks: 45.195.8.0/24 maxlen: 24
45.195.9.0/24 maxlen: 24
45.195.10.0/24 maxlen: 24
45.195.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109942 (0x1ad76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 17 13:41:04 2026 GMT
Not After : Apr 26 13:41:04 2026 GMT
Subject: CN=69e23874-7029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fb:02:4a:b6:79:43:53:23:77:d8:94:97:7c:
3b:88:21:df:3f:ed:37:2b:c6:12:6e:af:93:1d:0f:
ee:16:60:12:ee:a5:ad:8b:2e:de:70:64:b5:a6:b1:
bf:11:c3:de:fd:5a:44:49:ab:a0:80:52:b3:6c:cd:
4d:ed:d7:52:6f:2b:a3:bf:f0:bd:19:ea:db:2b:52:
fa:ce:8f:2d:b5:19:05:7b:41:6f:3e:06:b4:7a:7e:
20:06:93:f8:b9:61:f7:de:ac:28:99:7f:63:89:d7:
49:80:41:7d:7b:b4:97:23:c9:84:35:eb:47:d3:c8:
ad:9b:d2:71:61:ed:f5:13:88:a8:bf:20:0b:dc:f5:
92:82:f6:04:d9:00:6f:e7:13:ad:af:64:02:84:f7:
30:b7:25:5e:c1:90:22:3d:42:63:c3:dd:38:41:bc:
b3:f7:18:e3:bf:31:f6:ec:e9:c9:df:f5:ff:6c:bc:
1e:31:3d:2c:fc:e9:4e:aa:07:90:f4:28:1c:b9:2d:
44:af:40:4f:f9:87:2b:51:c1:eb:f6:9d:31:fd:26:
ca:9f:d8:77:34:aa:58:64:ae:4d:bb:48:07:34:88:
00:18:f7:a1:0c:e7:60:20:77:0e:16:25:ab:a3:3e:
82:ce:4a:bb:61:dd:0b:f8:9f:50:4e:ea:c5:e9:70:
3e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:E7:E2:41:67:14:A7:51:A5:BF:68:57:34:B2:9E:81:5D:E5:3A:31
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/168016183A6311F18F0A8709CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.8.0/22
Signature Algorithm: sha256WithRSAEncryption
96:ae:59:e1:43:ed:5b:e5:82:6b:b8:e2:6f:cf:be:35:3d:a9:
b3:0e:c9:9c:b1:56:76:68:61:73:37:8b:4a:35:dd:3e:f4:61:
5e:e4:77:c2:52:f0:a6:09:3e:10:29:3a:8d:3e:a3:90:74:25:
9b:56:e1:c4:0f:4f:95:38:fd:78:c7:45:15:f6:e5:31:d7:9a:
54:07:cc:19:0b:3e:2c:2c:d7:e3:0c:15:d3:db:a3:07:f2:94:
ec:ca:4a:78:63:42:14:41:6c:36:39:f3:92:16:c0:8e:72:a5:
54:3f:e1:03:a0:47:da:55:a7:02:5e:b8:de:fc:12:e5:42:b8:
7a:60:d0:65:3a:ec:f0:c1:c9:06:03:e1:b2:b9:59:7a:87:2d:
31:b8:ac:60:22:62:19:7b:5b:c1:28:6f:02:06:3c:26:f7:5d:
f6:9a:e5:f8:c0:f3:ca:41:79:90:73:d1:29:4b:22:b7:4c:cf:
2f:c4:b7:12:14:4d:ca:f5:80:53:55:77:c0:11:26:54:fd:34:
df:33:1a:05:1d:b8:7b:96:31:52:ba:bc:b5:46:28:7b:67:23:
af:fa:22:f0:b9:60:3f:af:8f:26:c4:c8:6b:ea:1d:ca:39:fb:
7d:33:b6:32:e6:bd:0c:28:a1:03:33:ee:2c:fc:38:6e:86:2e:
17:7c:c5:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:56:02 2026 by rpki-client