Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/98395AD860C011F1B98FD8C3CE1D38B0.roa
File: 98395AD860C011F1B98FD8C3CE1D38B0.roa (raw, json)
Hash identifier: Ek+DSHaU4ZDmsn6UmoC63CXa32cJ33UHBtjmb8pnaKs=
Subject key identifier: 3A:31:38:6C:DC:37:AF:FB:AA:BA:D6:0C:FE:B8:13:67:01:EE:99:14
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BBFD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/98395AD860C011F1B98FD8C3CE1D38B0.roa
Signing time: Fri 05 Jun 2026 09:26:13 +0000
ROA not before: Fri 05 Jun 2026 09:26:09 +0000
ROA not after: Mon 03 Aug 2026 09:26:09 +0000
asID: 18186
IP address blocks: 45.194.16.0/24 maxlen: 24
45.194.17.0/24 maxlen: 24
45.194.18.0/24 maxlen: 24
45.194.19.0/24 maxlen: 24
45.194.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113661 (0x1bbfd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 5 09:26:09 2026 GMT
Not After : Aug 3 09:26:09 2026 GMT
Subject: CN=6a229635-e508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:28:e3:f6:95:b1:fb:5a:ee:1c:0e:f1:a5:58:
e4:e1:c0:f5:52:b1:6b:2a:72:42:d3:aa:da:c6:de:
d7:25:46:e8:fd:db:2f:30:2e:6b:56:36:b0:48:48:
4a:8c:e7:65:d3:90:42:2c:dc:7a:e0:25:0d:be:6d:
91:39:6f:7f:4d:92:01:72:3c:69:b3:7a:d0:9d:c9:
3c:58:47:6e:a6:7a:fc:7a:ac:8f:9f:e9:77:da:fa:
5c:1f:c3:85:82:79:9d:c0:fe:91:ae:44:3a:4c:c8:
ec:ed:9c:88:8d:7f:52:0d:b8:b9:b1:88:11:02:85:
25:6d:c0:7a:e8:8c:71:33:66:4a:21:35:86:54:67:
c2:ec:cf:84:f1:5d:98:25:a6:92:e5:92:cf:50:f6:
6a:a3:d6:48:22:de:d4:cd:86:3d:9d:5d:6d:d6:50:
ea:45:2e:c3:96:e7:26:ac:c8:04:46:9b:72:59:7b:
f6:ef:6c:6d:92:aa:57:8a:a7:4f:43:8a:ed:69:ce:
51:7b:cb:32:5d:51:ed:b6:b6:db:c1:0b:84:b8:44:
c1:7e:37:ad:03:fa:d3:80:b2:1c:69:98:9a:b3:b4:
33:2a:b3:0c:0f:db:b2:88:b6:3a:9a:85:93:04:d6:
b4:8e:15:5c:6f:ee:04:c4:17:97:dd:40:64:15:13:
1b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:31:38:6C:DC:37:AF:FB:AA:BA:D6:0C:FE:B8:13:67:01:EE:99:14
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/98395AD860C011F1B98FD8C3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.16.0/22
45.194.22.0/24
Signature Algorithm: sha256WithRSAEncryption
90:ce:f3:7b:de:f2:27:3f:f7:14:87:f9:cc:57:89:18:e9:c6:
d5:c6:f2:b6:fe:55:78:1d:ec:0a:d2:04:a1:ec:2c:cc:c9:cd:
e9:9b:95:c6:18:f1:ff:92:66:85:c5:fc:67:28:17:d4:48:ba:
ca:fd:1c:fe:65:e6:71:a3:83:d2:b0:b9:de:82:aa:cc:78:e0:
ec:51:1f:9d:e6:5f:62:4a:bc:7b:7e:f0:4e:71:d0:d9:87:e4:
82:4d:9b:46:77:fb:6b:3c:d9:3d:d9:b6:fd:da:2d:b9:5e:70:
74:a8:1d:09:f1:45:ba:d0:f3:89:1a:9b:29:b8:4f:d1:4c:ff:
22:68:9c:8c:e8:30:00:1c:83:a0:a2:0d:e4:2c:dd:3e:1a:84:
0d:e0:6c:04:e4:8d:ad:e1:bb:d0:73:1d:c4:d8:e8:8f:43:41:
17:eb:5e:2e:2c:4e:2f:9f:62:0f:de:d7:df:c2:7f:30:84:33:
ec:ae:af:79:dc:70:84:e8:c1:84:11:2b:dd:77:93:1a:9b:4f:
21:62:a8:55:46:ca:80:8d:8d:e6:4d:ab:b7:6b:72:8b:72:6e:
3e:4b:ce:ce:f4:43:e5:0f:9d:ba:1f:41:dd:73:b1:8a:dd:b6:
04:d3:26:85:58:2c:a3:ae:25:05:fd:54:0a:9a:ad:a9:f9:15:
4f:43:d0:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:57:36 2026 by rpki-client