Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CD0F39F02F3111F1BEE5AFBCDAE4EC9C.roa
File: CD0F39F02F3111F1BEE5AFBCDAE4EC9C.roa (raw, json)
Hash identifier: RLqJik2KelPZDQWfJwScbmLIH6F74zyChpMw5qElolo=
Subject key identifier: 9F:72:D1:D0:EC:27:02:13:DB:DD:F7:70:46:2E:F4:F6:40:13:D8:11
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A998
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CD0F39F02F3111F1BEE5AFBCDAE4EC9C.roa
Signing time: Fri 03 Apr 2026 07:50:37 +0000
ROA not before: Fri 03 Apr 2026 07:50:32 +0000
ROA not after: Sun 10 May 2026 07:50:32 +0000
asID: 271916
IP address blocks: 45.194.48.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108952 (0x1a998)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 3 07:50:32 2026 GMT
Not After : May 10 07:50:32 2026 GMT
Subject: CN=69cf714d-d9b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:64:38:3d:b8:e0:c7:2d:3d:9e:7b:c6:80:41:
47:e4:e3:fa:b9:33:11:6d:ee:b7:21:4f:ea:5b:bc:
56:56:9e:31:68:91:e4:f7:b4:33:2e:ee:8e:0d:55:
fe:e4:20:d5:f5:36:6e:d5:35:5d:7f:40:d6:95:1f:
ef:7c:6c:7f:7b:f8:24:13:7c:95:c7:10:3d:c3:7c:
74:75:1d:56:f2:26:65:ee:f4:d2:0a:00:f6:17:4d:
38:73:77:46:df:94:c0:5b:7d:d1:72:3d:5b:33:77:
71:16:b6:9d:c4:ee:a0:48:49:2a:f5:b3:c4:9a:d6:
a4:64:44:45:34:13:65:12:e3:1f:63:90:a0:12:3f:
e1:25:af:bb:b2:71:5a:ea:cb:8f:8c:9f:ef:d3:69:
ae:c9:df:0b:4c:aa:4b:af:d7:b6:b1:fb:a1:8d:20:
95:16:84:f9:c0:4f:d3:cf:ba:c5:f0:0c:3f:27:68:
42:d0:37:3f:eb:71:58:b3:7b:fa:0c:92:e8:1c:2b:
23:96:f9:8d:b4:0b:38:f0:ac:f9:4d:49:39:e3:90:
4c:57:cc:aa:41:36:4f:17:03:58:1c:42:90:2e:36:
28:5f:94:12:ab:4c:40:ce:4d:62:49:1c:f3:db:6f:
f5:39:d6:0e:77:1a:88:5e:8d:35:17:32:50:e0:22:
1f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:72:D1:D0:EC:27:02:13:DB:DD:F7:70:46:2E:F4:F6:40:13:D8:11
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CD0F39F02F3111F1BEE5AFBCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.48.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:35:07:4f:41:f8:a8:be:92:8c:12:b8:80:ca:62:49:eb:8f:
3a:90:2c:d9:e5:8d:9b:0a:08:96:42:2f:aa:38:b5:e9:32:60:
85:7e:f6:50:3e:c2:a6:1b:13:37:c9:54:37:41:d9:11:74:4d:
27:3d:87:b1:54:d8:a8:0a:80:4d:38:57:78:bd:92:9b:7f:6b:
53:c0:4b:9a:6c:b0:dd:bf:2a:95:60:f3:23:2a:be:2b:3a:1f:
50:c7:ea:38:35:56:61:d7:d4:d8:50:a8:71:d2:97:13:6f:cf:
96:09:1e:b5:b2:67:81:b1:82:d5:54:8b:47:8a:6e:31:07:41:
eb:40:8e:7b:cc:1a:bd:35:04:55:b8:f0:1d:d4:d5:8a:13:a0:
10:51:08:f0:6e:ad:29:64:11:db:88:62:3c:a4:e1:ad:7b:f1:
46:24:8d:68:62:c5:aa:28:ee:67:c6:da:94:63:07:3e:e9:60:
25:ad:bd:6d:ce:56:c9:c8:fb:57:b0:fd:84:73:ac:e5:c1:ba:
ed:84:1e:00:b2:11:be:99:c5:e7:cf:f3:c4:00:1f:26:62:d5:
48:2d:de:45:8e:d0:17:12:29:20:3e:36:0a:8c:94:97:b5:6c:
6f:e1:93:1d:b7:2d:23:8f:78:fe:c8:53:22:c5:90:9b:bd:66:
7e:d0:01:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:07:02 2026 by rpki-client