Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/50F4C0EC312511F18BCE5684DAE4EC9C.roa
File: 50F4C0EC312511F18BCE5684DAE4EC9C.roa (raw, json)
Hash identifier: gWS2vjGAKSunzjyZvwW99pGnszNJ1g6Inu6H2nNUY04=
Subject key identifier: 30:4E:E3:5D:65:03:14:82:EC:06:F0:C7:4D:1C:9D:D8:76:FF:51:51
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AA5B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/50F4C0EC312511F18BCE5684DAE4EC9C.roa
Signing time: Sun 05 Apr 2026 19:26:17 +0000
ROA not before: Sun 05 Apr 2026 19:26:12 +0000
ROA not after: Sun 10 May 2026 19:26:12 +0000
asID: 401615
IP address blocks: 45.192.242.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109147 (0x1aa5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 5 19:26:12 2026 GMT
Not After : May 10 19:26:12 2026 GMT
Subject: CN=69d2b759-4c59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f7:22:54:bf:20:66:bf:39:48:04:3d:56:23:
b3:83:76:a6:d7:c4:54:b1:17:9a:c8:18:ec:6c:6e:
db:e0:aa:51:6c:bb:ef:e2:2f:e6:c9:34:ec:7d:6c:
f7:a8:8f:49:5a:58:ef:be:3c:b3:e0:c0:56:51:b0:
e0:50:a0:1f:1b:89:50:3e:21:6b:9e:30:a3:2c:99:
e8:61:3a:dc:cf:b3:d1:fa:82:f4:e3:f9:f7:eb:dd:
5b:96:27:ba:26:c0:66:73:0d:f6:e1:e4:79:23:9b:
2e:1f:16:ec:91:82:07:32:fb:16:11:5d:e4:09:37:
bc:72:df:d3:f9:f2:52:a7:6b:99:e5:f1:5d:e4:60:
b7:5a:73:37:0b:c4:f9:1c:05:55:90:92:dd:b6:01:
13:5a:ac:70:94:b1:e7:fd:6b:5e:f9:6b:04:66:a2:
6c:b8:d6:ca:60:46:00:12:c2:9b:04:31:6c:98:0f:
be:b1:c9:d5:5c:ea:57:36:37:72:c6:50:4e:32:df:
30:33:76:86:9c:10:04:e3:36:aa:83:5c:f9:41:d0:
0c:a9:8c:07:38:e4:99:7c:85:4f:3e:ff:ce:81:89:
ae:5a:68:7e:35:f9:07:85:68:f1:f6:3a:ab:a2:3f:
00:ce:15:54:5b:ae:f7:6c:3f:a1:cf:e9:64:39:ad:
c1:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:4E:E3:5D:65:03:14:82:EC:06:F0:C7:4D:1C:9D:D8:76:FF:51:51
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/50F4C0EC312511F18BCE5684DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.242.0/23
Signature Algorithm: sha256WithRSAEncryption
16:d3:d9:a7:07:bc:40:b2:7b:ef:2a:97:de:ec:4a:94:2d:c1:
db:85:2d:1e:8b:ae:f4:2b:ff:57:4f:ab:17:3e:e4:96:a1:a0:
0b:b6:47:de:cc:fa:e7:1b:33:b6:fa:ce:c4:93:8f:f8:39:2c:
63:66:9e:8d:9d:cc:2b:3c:ed:54:f8:9f:e4:9b:97:c7:28:58:
5e:54:19:90:e2:2a:21:a9:e4:1b:5a:40:3d:9a:cd:19:05:ad:
22:a9:1a:62:3a:64:cf:ce:12:e8:00:2a:8a:64:09:8d:6f:e7:
00:da:f2:f3:98:3c:82:8d:80:91:af:42:fc:3a:73:81:78:81:
8e:6b:3a:59:49:43:0d:4b:42:b8:bd:57:62:cf:85:c4:78:94:
88:b3:d5:84:1b:15:77:4d:d1:a2:9b:72:c5:3c:fa:dd:9c:31:
1e:77:7c:08:cf:7f:a6:fd:b8:21:c4:60:4a:58:02:45:1f:99:
54:81:bf:9f:07:44:08:7c:14:6d:19:70:fa:e5:d6:b4:8c:21:
c3:35:89:24:67:60:4d:81:bb:02:bf:bf:82:dc:0f:8b:b6:83:
cb:f5:64:02:c8:2b:3d:bc:c2:89:b2:f6:fe:22:d4:14:09:86:
62:1e:cd:25:d1:2b:67:ea:de:e8:4e:32:b6:ef:cd:88:60:03:
4b:07:c2:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:41:48 2026 by rpki-client