Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/31C50C6439C111F18BC731A6CE1D38B0.roa
File: 31C50C6439C111F18BC731A6CE1D38B0.roa (raw, json)
Hash identifier: 5tXwIJv3C/z3HyieGy7c4b5L9goqttDzWI1yiJU0BjY=
Subject key identifier: 6A:90:DC:54:53:4A:17:4B:BD:5F:C9:31:3E:4D:F0:ED:2E:3C:B1:C6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AD57
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/31C50C6439C111F18BC731A6CE1D38B0.roa
Signing time: Thu 16 Apr 2026 18:22:15 +0000
ROA not before: Thu 16 Apr 2026 18:22:10 +0000
ROA not after: Sat 16 May 2026 18:22:10 +0000
asID: 212238
IP address blocks: 45.198.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109911 (0x1ad57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 16 18:22:10 2026 GMT
Not After : May 16 18:22:10 2026 GMT
Subject: CN=69e128d7-8106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:53:76:e8:6b:3b:07:17:d3:2c:19:d4:be:c0:
db:0e:4f:96:ab:f7:5d:6f:0b:22:1e:a0:48:55:71:
92:a8:2f:8f:75:49:1d:b2:11:3a:86:2c:17:d0:46:
3a:96:44:9c:7b:33:4b:f1:68:23:e3:91:c0:71:ba:
ef:e4:c2:a6:35:86:81:4f:81:5c:98:c9:33:15:f3:
95:67:27:63:f5:d2:ec:0f:21:ba:c2:85:e2:8e:ea:
20:ce:bb:6a:ec:02:bb:77:3c:ef:53:5e:e4:c5:87:
76:73:5a:e0:06:f7:20:10:17:5f:c5:51:50:6c:be:
d0:89:83:35:1b:6d:c3:51:2d:a7:d0:4a:5f:6b:12:
f2:4d:ee:ce:fe:82:61:95:b6:ba:39:93:58:49:5b:
27:c0:4c:f9:b9:60:93:b5:43:6e:a5:60:d6:cb:02:
64:58:4d:31:23:1a:1c:13:0d:8a:ea:34:dd:3f:1f:
96:b7:be:0c:92:4d:6f:a0:6e:c5:08:96:a9:75:92:
6f:de:36:86:45:aa:e7:41:d0:2f:df:6d:c0:da:be:
9d:c3:3d:c9:84:85:35:cd:2e:0f:55:46:04:cb:0d:
3f:47:7f:42:9e:ac:21:58:70:5e:2f:c5:c6:e2:5b:
a2:84:23:3a:4d:0a:87:73:ec:86:57:af:4f:d9:5b:
52:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:90:DC:54:53:4A:17:4B:BD:5F:C9:31:3E:4D:F0:ED:2E:3C:B1:C6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/31C50C6439C111F18BC731A6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.87.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:90:f1:b7:d3:bb:6c:16:68:51:db:a8:18:83:05:d3:c9:22:
3f:1b:20:99:f9:5c:aa:9e:dd:5b:16:2d:64:00:f9:48:c0:92:
f3:25:ac:55:28:f0:84:f8:ec:8c:c0:cf:3b:31:47:1a:4a:df:
9a:09:89:63:bb:d4:a2:3f:aa:d9:17:e0:d7:25:52:a5:cb:ad:
c0:0d:4b:9f:e9:64:d1:2a:5c:91:77:32:69:aa:d4:61:2d:c6:
77:33:9e:ef:c8:18:1e:c0:7a:65:49:e1:2b:e7:84:0b:84:dc:
62:d5:b5:22:6c:73:6b:fc:90:cb:50:fd:b0:65:f5:aa:75:c4:
79:d4:16:d6:de:51:77:cf:65:bf:fb:fa:49:89:cc:84:a5:e3:
e2:52:7b:52:ce:98:72:fe:4e:c0:f9:e0:a3:e6:f4:10:4e:78:
af:df:a9:c4:c7:54:a3:36:c2:82:f9:c4:36:3b:01:99:6c:e0:
6e:45:7f:83:ca:dc:d4:c7:c6:b0:c2:56:61:80:37:8a:c7:58:
75:ac:2e:5f:f2:5e:d3:89:ed:5c:50:42:3d:81:85:84:99:3c:
6c:d9:05:e6:9d:55:da:9e:6c:90:17:75:7a:16:c2:d3:3d:67:
01:5f:0c:8e:e1:30:b0:c3:a6:1b:ff:44:d4:17:de:d2:2d:2f:
eb:8f:b9:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:19:53 2026 by rpki-client