Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A4D74323A3011F182DCDADCCE1D38B0.roa
File: 9A4D74323A3011F182DCDADCCE1D38B0.roa (raw, json)
Hash identifier: To9j1+Md9xepBdhsWZSYDHYqVSndqdNq8o9e9uaYfT4=
Subject key identifier: 2B:36:EE:93:6F:0C:03:65:D0:D2:B4:39:78:9B:1C:77:25:90:83:4D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AD62
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A4D74323A3011F182DCDADCCE1D38B0.roa
Signing time: Fri 17 Apr 2026 07:39:45 +0000
ROA not before: Fri 17 Apr 2026 07:39:39 +0000
ROA not after: Thu 30 Apr 2026 07:39:39 +0000
asID: 142002
IP address blocks: 45.195.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109922 (0x1ad62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 17 07:39:39 2026 GMT
Not After : Apr 30 07:39:39 2026 GMT
Subject: CN=69e1e3c1-d46c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d9:be:a5:9a:cf:a6:80:c2:17:8f:7b:20:62:
3e:0f:1e:d9:1c:f6:79:e7:9e:22:21:46:c4:5b:5c:
9c:94:5f:57:88:a1:1b:0c:b2:23:11:6c:21:35:cd:
53:75:7f:00:ab:e1:0e:cb:3e:5a:a6:38:cb:0a:8f:
47:15:fe:59:8a:8f:0b:d8:9b:2e:fa:ff:94:42:78:
57:87:d6:12:ae:bb:6f:70:8b:be:cf:c3:32:82:5a:
53:1a:15:32:10:f9:ef:92:df:37:14:72:fc:04:f8:
a4:0a:f7:a7:65:14:bf:3a:87:f9:65:e3:6c:b9:7c:
b1:0c:67:65:d9:25:c1:f5:37:c6:36:5e:25:35:5e:
ca:3d:8e:9c:f8:90:99:37:a0:0c:56:d7:20:5a:3f:
f1:08:45:09:ce:29:3f:2d:7d:39:ba:c7:a2:c5:e3:
70:65:1e:6c:9b:cc:0b:ba:c8:09:c5:69:ed:77:ef:
9a:b2:26:9f:b2:28:c0:dc:4d:99:2f:c1:01:e3:86:
80:37:92:a4:82:06:8a:dd:35:c3:f0:16:fe:9e:ee:
a0:b1:f6:98:8f:93:a8:2f:ee:dd:d0:64:55:98:d1:
82:27:94:2b:4d:89:6a:14:d0:95:3f:b6:46:60:ff:
a2:c1:65:4c:fc:67:09:fd:c1:8b:da:b6:71:96:ff:
28:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:36:EE:93:6F:0C:03:65:D0:D2:B4:39:78:9B:1C:77:25:90:83:4D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A4D74323A3011F182DCDADCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.8.0/24
Signature Algorithm: sha256WithRSAEncryption
49:f2:53:d6:68:1f:d8:96:67:96:85:97:0d:b7:27:64:5b:16:
be:60:68:4a:a1:32:4d:60:b1:18:69:84:ba:48:64:e8:e4:c9:
01:58:d8:99:4a:e0:f0:5f:7b:02:b2:3e:02:d0:f6:53:9b:30:
f2:c7:6c:c4:5f:8b:09:cf:61:a7:49:6d:4a:42:b0:41:c1:bd:
e9:7e:59:7a:e3:76:59:34:d7:28:0f:14:8b:28:ed:ab:22:21:
f1:2a:dd:b2:bf:75:99:99:e6:25:38:a9:5b:07:46:e2:8f:60:
5b:a0:be:9d:d3:a8:dd:cd:23:d9:49:3f:bf:95:43:53:d7:9f:
95:a6:15:a8:00:cc:e3:63:42:cc:cd:fd:78:d3:1e:1c:0a:01:
83:fd:3f:23:17:b9:1f:e7:f6:f1:56:91:33:e0:80:27:21:a7:
34:95:9d:f2:03:68:80:74:97:fd:f8:e1:aa:53:10:db:81:17:
74:88:f4:fa:44:98:f3:75:ec:41:4f:3f:40:51:c8:67:37:9f:
1c:55:26:16:28:dd:92:30:4b:bc:6d:0a:e1:d0:b8:c1:9c:92:
da:30:31:cb:4e:11:ac:e9:08:aa:60:9e:9f:2a:06:3e:8b:0c:
07:ac:c1:5a:0b:9c:1d:40:01:ef:77:ac:11:e2:1b:e1:40:13:
14:05:cd:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:59:42 2026 by rpki-client