Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4CD9C40C28F211F18863018CDAE4EC9C.roa
File: 4CD9C40C28F211F18863018CDAE4EC9C.roa (raw, json)
Hash identifier: 14R59YGdBLbORG5c+z6ay0vv60F/z2aR0d0SMmiw5z8=
Subject key identifier: FC:ED:12:70:72:D9:8C:43:C1:78:59:5C:87:88:BF:13:B3:AF:9E:59
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A77A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4CD9C40C28F211F18863018CDAE4EC9C.roa
Signing time: Thu 26 Mar 2026 09:00:57 +0000
ROA not before: Thu 26 Mar 2026 09:00:51 +0000
ROA not after: Wed 03 Jun 2026 09:00:51 +0000
asID: 140227
IP address blocks: 45.194.16.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:26:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108410 (0x1a77a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 26 09:00:51 2026 GMT
Not After : Jun 3 09:00:51 2026 GMT
Subject: CN=69c4f5c9-9a97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e6:de:09:ad:6f:cd:fc:46:05:00:1c:68:7f:
59:b9:44:62:fe:04:44:11:ef:93:be:81:ef:a8:ca:
09:b0:e9:4f:1c:78:ec:68:82:e1:22:b4:d6:78:07:
f7:03:f1:74:26:41:2f:83:7a:59:88:ea:31:63:12:
a4:ad:20:75:ae:be:bd:d4:14:34:fb:b9:44:ee:61:
23:67:f5:57:5e:1f:c8:72:f8:08:91:3c:36:df:d2:
43:da:6c:f6:98:22:6e:b8:16:ff:5b:4d:6d:26:90:
a6:7f:d4:d8:ee:e3:03:64:d9:ee:98:1a:72:ec:74:
46:c9:b5:f3:ed:99:84:96:04:d3:0d:50:b3:57:e6:
4b:be:bc:d7:6d:d6:a3:fb:47:49:76:4e:7b:5e:36:
e7:08:41:9f:3e:80:c0:f5:f2:ec:96:98:5c:8a:78:
23:14:e0:5a:9c:a5:d1:60:16:ee:7e:75:c4:3e:a6:
32:66:39:e4:d6:bf:36:3e:34:49:89:26:15:d2:6b:
ba:e5:c1:d9:f3:32:74:21:ad:30:23:4e:2b:3e:db:
35:7a:97:7f:83:e3:ea:81:aa:3c:3e:c9:11:c0:97:
a4:63:2b:49:22:4c:17:e4:46:50:30:65:2d:55:94:
85:1b:ab:2d:a1:3a:21:58:1c:56:15:36:bc:20:c2:
a9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:ED:12:70:72:D9:8C:43:C1:78:59:5C:87:88:BF:13:B3:AF:9E:59
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4CD9C40C28F211F18863018CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.16.0/21
Signature Algorithm: sha256WithRSAEncryption
a1:0d:6c:80:1b:aa:fd:b2:0a:23:88:77:7c:b9:85:56:8f:c9:
17:19:6a:6b:23:94:2a:b5:0e:6b:90:99:a9:0a:04:78:bc:a2:
94:3d:f7:7d:15:16:5b:0c:05:26:4c:7c:eb:25:80:aa:af:e4:
d8:ad:bc:0c:73:ca:cb:62:68:85:ff:f0:61:b6:1c:73:c6:9a:
7b:9a:d4:a5:0b:93:77:e4:8a:da:ad:f1:cb:5e:22:51:a2:42:
a8:37:bd:8a:d1:31:0c:ff:b5:c0:ac:60:44:bb:f1:55:46:39:
5c:34:af:b9:a3:37:dd:c1:a1:74:ba:6e:64:3a:e2:37:f2:7a:
9c:4a:b1:be:7c:74:32:a4:31:fd:bc:44:e6:cf:f3:e1:f4:88:
69:ec:48:05:2f:18:64:62:76:c0:26:d7:f6:13:06:37:44:4c:
c6:0f:e2:18:01:e3:b9:92:20:2b:c8:45:0e:f5:91:6b:02:9d:
bc:30:11:56:54:66:c6:b4:54:34:92:e0:92:52:2c:06:4b:93:
3c:0b:89:4c:82:22:74:3f:bf:86:84:cc:16:eb:d1:9d:1e:1c:
41:3d:97:24:9d:57:9c:fc:ab:dc:ec:c8:58:e9:20:21:ae:fd:
89:00:64:1e:ac:58:1c:29:1c:dd:d7:43:eb:62:97:58:93:8e:
e3:54:29:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:50:45 2026 by rpki-client