Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/39A009123A6511F1AC8DDA15CF1D38B0.roa
File: 39A009123A6511F1AC8DDA15CF1D38B0.roa (raw, json)
Hash identifier: 8BU1a/K2APQcwRUVyQEcsGR6YbVmnQ6GofuOfbyJanU=
Subject key identifier: F0:98:12:64:9A:D4:4E:05:46:D7:A1:42:87:01:1D:0E:7D:6D:8C:26
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AD7A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/39A009123A6511F1AC8DDA15CF1D38B0.roa
Signing time: Fri 17 Apr 2026 13:56:26 +0000
ROA not before: Fri 17 Apr 2026 13:56:21 +0000
ROA not after: Sat 25 Apr 2026 13:56:21 +0000
asID: 136907
IP address blocks: 45.194.104.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109946 (0x1ad7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 17 13:56:21 2026 GMT
Not After : Apr 25 13:56:21 2026 GMT
Subject: CN=69e23c0a-113c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:71:b0:fb:e4:39:02:17:19:af:37:f8:43:a4:
30:af:8c:bf:38:96:ea:48:ff:34:a9:65:aa:6c:46:
60:47:cd:94:7d:44:1e:34:f1:1b:c3:c2:5b:ee:4f:
38:80:99:be:6a:19:a6:8e:f6:3e:c6:55:c0:4f:48:
fe:7e:28:f2:28:7f:50:db:71:42:47:cd:9b:01:22:
96:2f:b2:be:ca:28:c1:2f:9c:e1:36:e9:86:47:8a:
47:55:af:d3:52:cc:8f:ec:cf:b4:23:7c:9b:8e:a9:
34:cc:52:ff:73:dd:59:52:03:72:6e:d0:13:69:03:
c7:e0:f0:33:78:2d:cc:24:a4:f0:08:ec:10:38:51:
45:0e:cf:4e:98:92:14:ea:24:99:89:89:21:6b:f4:
2d:d8:63:a6:ce:de:53:5e:0c:6f:cd:88:18:d3:4a:
60:59:31:47:41:dc:06:ff:5e:93:b6:f7:a2:79:24:
88:83:d3:79:da:e1:b1:36:c0:c4:80:40:9a:bf:a0:
71:81:d4:71:07:55:c8:ca:61:fd:4e:ad:13:d3:8b:
0a:48:2f:33:32:57:a2:68:20:8e:b8:bd:bc:e8:f9:
16:7d:a3:52:5d:36:92:db:85:02:42:f7:94:48:6a:
b7:5b:fa:35:5b:79:c7:3c:0a:36:12:e1:88:30:57:
cc:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:98:12:64:9A:D4:4E:05:46:D7:A1:42:87:01:1D:0E:7D:6D:8C:26
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/39A009123A6511F1AC8DDA15CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.104.0/21
Signature Algorithm: sha256WithRSAEncryption
63:26:1a:c6:9c:e9:67:bd:16:f0:76:9d:35:e9:30:4c:8c:1b:
6b:2d:a7:5b:5a:44:39:72:59:9c:78:9d:63:2e:7c:68:82:2c:
54:42:21:48:f3:0e:fa:0c:72:e4:d9:da:be:83:aa:6d:51:e2:
e1:fd:48:87:c0:77:70:74:12:ac:c6:e8:71:06:40:4d:e7:8c:
54:d2:18:41:29:c7:11:bf:94:01:e0:53:c9:ce:c6:26:5a:95:
47:4c:43:4c:fb:47:e6:f6:3a:74:77:c0:9c:c3:9e:bd:26:46:
80:2a:e1:e3:7b:d7:8c:b7:02:1d:6b:b7:b2:82:0e:3a:bb:3d:
ff:1d:c4:d6:10:7f:c0:c1:c9:24:b8:58:1e:95:93:3e:27:0b:
ba:25:fc:86:58:f3:17:c1:4e:45:78:14:cd:1b:dc:33:a4:6d:
64:27:ab:b2:b6:f0:9c:92:16:d2:0d:eb:7a:79:a3:a6:20:45:
35:ec:9e:79:17:2d:5a:31:1b:13:50:1f:c1:5f:73:43:76:10:
5c:b2:6d:76:44:24:bc:1c:83:52:91:34:f7:30:68:01:10:3b:
49:ac:9e:3d:bd:b8:f8:b9:8e:4c:30:7c:2f:39:74:cf:b7:33:
ae:4c:c2:79:89:c2:74:b4:8e:0e:ab:6e:4b:8c:ec:ab:7d:f7:
ae:71:de:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:20:15 2026 by rpki-client