Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7A07A08438AB11F1AFB35B11CF1D38B0.roa
File: 7A07A08438AB11F1AFB35B11CF1D38B0.roa (raw, json)
Hash identifier: +sllcudErgJqkqYSolvGe6YOQWNMmP9bePrJMGMy5xQ=
Subject key identifier: 69:00:6C:C5:F8:4B:90:32:14:86:72:20:94:E5:8A:0F:09:B8:3A:C5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01ACC7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7A07A08438AB11F1AFB35B11CF1D38B0.roa
Signing time: Wed 15 Apr 2026 09:14:17 +0000
ROA not before: Wed 15 Apr 2026 09:14:12 +0000
ROA not after: Fri 15 May 2026 09:14:12 +0000
asID: 147176
IP address blocks: 45.201.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109767 (0x1acc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 15 09:14:12 2026 GMT
Not After : May 15 09:14:12 2026 GMT
Subject: CN=69df56e8-2fe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e9:a8:5c:b7:57:7f:b1:4c:72:f1:31:58:84:
03:26:3e:e2:4f:ea:4d:45:92:df:0f:59:a1:f1:5a:
fd:ef:d7:5d:7e:5a:c1:33:f9:33:60:d0:3c:ad:d3:
cf:8a:8a:f9:ab:1f:7d:8b:5d:3a:2e:67:36:c1:21:
cf:75:cc:ef:9e:1e:cf:03:3a:87:8d:76:9c:b4:28:
07:81:da:aa:b4:9e:5c:54:db:a2:7f:07:2c:43:21:
16:26:7c:6c:cf:94:99:e4:bc:78:5a:4e:c4:99:a9:
79:b8:b5:20:39:c4:14:2a:c4:6e:a0:55:a6:15:c4:
a6:b8:fd:a1:5e:b3:c2:f0:d0:6d:96:d1:48:bc:58:
23:62:d1:44:9d:13:8d:e2:e3:c9:9b:e9:e8:a5:d7:
25:80:6a:d6:36:db:57:f3:6c:f6:12:75:d2:df:35:
13:1a:a7:82:d9:af:1e:f5:14:3b:63:0d:b8:8f:5f:
52:d6:4d:1c:0f:80:3f:6e:96:e6:3d:41:d5:db:ec:
53:2e:fb:56:58:78:a1:65:83:03:3e:ad:fe:66:b1:
65:43:65:d8:f4:66:d7:51:fb:e9:ba:06:1b:d0:e3:
4a:b5:c7:3f:6a:14:7c:35:f7:db:45:19:7a:18:16:
77:5a:5b:03:21:16:5e:fe:06:bb:17:30:35:d9:67:
1a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:00:6C:C5:F8:4B:90:32:14:86:72:20:94:E5:8A:0F:09:B8:3A:C5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7A07A08438AB11F1AFB35B11CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.9.0/24
Signature Algorithm: sha256WithRSAEncryption
55:90:3f:4f:75:91:a8:dd:5b:19:b4:c6:47:2e:b7:50:dc:2e:
54:0d:35:6c:a8:3a:b6:2d:80:31:dd:ac:01:09:0d:58:29:c9:
f1:7a:9b:b7:a5:cd:b6:12:ef:04:08:92:13:4e:65:dd:fe:5e:
62:dd:25:39:08:ce:df:48:a7:75:e3:f5:23:d0:50:19:3e:b8:
68:38:d6:56:12:04:52:f8:1e:5c:02:e7:3b:b6:67:e8:1c:bd:
6d:06:88:d6:59:7b:bd:00:60:f4:62:7a:16:1f:c4:8c:0f:8c:
32:83:f2:3e:f0:40:c4:89:bb:89:66:5b:78:73:0d:d5:89:54:
20:75:3b:da:8c:ed:3a:8e:7a:a3:34:99:86:8d:81:12:54:05:
55:0b:bf:c4:05:51:9a:71:0a:8c:2a:11:4c:6a:84:23:73:85:
b1:66:1b:f3:03:ef:ad:61:62:cd:b9:6f:a5:f4:c1:3f:b3:5e:
5c:10:61:57:4c:5e:7a:86:55:36:9e:89:64:34:34:4c:82:fe:
86:49:f4:ea:17:4a:9d:c6:04:56:99:bd:35:13:ea:fa:57:77:
df:d0:8f:ec:91:18:51:d4:2a:c6:64:0c:ca:6e:19:ad:05:2c:
f3:6c:53:47:ac:b0:2e:ec:a1:7b:17:c1:01:5e:e3:0f:42:b7:
64:29:bf:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:20:09 2026 by rpki-client