Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/40309F5E34CE11F189D790EBCE1D38B0.roa
File: 40309F5E34CE11F189D790EBCE1D38B0.roa (raw, json)
Hash identifier: rRYyGonaxwaf6XOyRw+H3K6Ef3qocnjPdTJR4XERnBg=
Subject key identifier: E6:42:C4:A1:19:EE:EB:D4:A5:D3:34:25:13:7A:32:F4:80:78:42:36
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01ABB4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/40309F5E34CE11F189D790EBCE1D38B0.roa
Signing time: Fri 10 Apr 2026 11:13:07 +0000
ROA not before: Fri 10 Apr 2026 11:13:02 +0000
ROA not after: Tue 10 Apr 2029 11:13:02 +0000
asID: 17561
IP address blocks: 45.192.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109492 (0x1abb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 10 11:13:02 2026 GMT
Not After : Apr 10 11:13:02 2029 GMT
Subject: CN=69d8db43-53c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e2:db:13:aa:00:77:23:ab:34:de:6d:05:39:
2b:e0:2e:01:61:4b:05:76:e0:57:83:32:48:91:53:
bc:e6:ed:1f:51:01:17:a6:75:12:a0:7c:63:cc:6f:
37:f3:11:83:1e:f0:fb:3b:44:03:89:38:cf:b7:37:
dd:9d:25:28:2c:a3:33:52:a7:47:1d:a7:8e:36:8f:
e1:8c:00:3d:d2:4a:7b:06:33:84:a2:1a:bb:ec:3b:
e0:51:b1:59:3d:51:97:5e:ef:59:f1:71:05:85:47:
ee:95:f9:c4:9a:d3:0d:19:66:8e:e9:df:81:11:b5:
53:ed:7b:f0:09:5c:5d:9e:64:7b:5a:6f:5c:9a:0d:
5c:65:c1:a1:cb:91:63:bc:81:43:a1:ac:81:2b:b2:
86:fe:1a:56:cd:6e:5a:f9:c3:1a:71:a7:12:68:3c:
15:fe:59:0a:65:3a:66:f6:c0:ef:02:42:82:2d:38:
c3:04:17:99:bf:60:bd:44:d7:2c:88:72:b4:0a:6f:
ce:2d:02:e1:9a:60:35:eb:26:10:67:e8:a6:65:10:
19:c9:7f:25:b0:08:ba:77:0c:47:b0:80:f8:49:83:
6f:39:78:a8:ed:d9:9a:8c:aa:88:7d:33:33:ad:c4:
92:b7:77:23:b2:ff:a6:14:f9:d2:ea:ef:0e:93:fa:
3c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:42:C4:A1:19:EE:EB:D4:A5:D3:34:25:13:7A:32:F4:80:78:42:36
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/40309F5E34CE11F189D790EBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.21.0/24
Signature Algorithm: sha256WithRSAEncryption
77:29:26:3d:fc:61:8c:2c:12:87:53:e1:24:2e:b8:e1:80:ab:
9f:9b:0c:e6:6f:a2:fb:bd:bd:9e:ac:aa:0c:6f:83:c4:97:98:
6a:60:0b:c9:f6:c8:aa:e1:0a:f4:54:a0:a8:c8:d6:6e:14:a3:
bc:9d:68:6f:ae:d2:5a:ef:2a:12:0a:ca:0a:a7:70:52:f3:37:
39:21:e1:e5:06:91:23:c6:e7:80:a2:1b:a9:c1:0c:09:7a:b2:
1a:74:c8:e1:d2:27:68:ad:a9:23:10:8d:a0:0a:d5:27:8c:1d:
e0:b2:f5:ca:52:73:d0:b3:63:22:88:59:bf:72:7f:70:41:d9:
62:f9:bb:a3:f9:f1:05:f8:55:76:0e:4f:1f:88:6e:94:6b:67:
ed:29:cf:9e:98:21:c6:f6:cc:bc:52:f8:b0:d4:8d:1b:19:ac:
f7:cc:14:3e:18:58:02:20:a6:51:2d:67:83:81:42:93:a1:76:
e1:47:9e:65:61:9c:87:28:07:9e:1c:6f:65:2d:bd:21:83:0f:
01:46:37:a9:a6:5b:d1:dd:13:9c:43:7f:5e:8c:e3:55:35:ea:
83:cc:f8:30:2a:7d:01:19:b5:cf:08:e6:84:90:e5:19:b9:95:
c2:15:7f:f5:4e:91:43:a3:fa:28:91:27:c8:c8:e9:ce:8f:8d:
3b:15:44:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:24:31 2026 by rpki-client