Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CED8E76638CF11F1A47FFAEACE1D38B0.roa
File: CED8E76638CF11F1A47FFAEACE1D38B0.roa (raw, json)
Hash identifier: uOo66IkUc/kpfSFMji5YsHlvW9cGUBzWdMkQmZKwSJ4=
Subject key identifier: 91:67:F8:1E:69:DB:C9:08:ED:8C:0B:14:D5:D4:2D:17:34:07:3F:1A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01ACF0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CED8E76638CF11F1A47FFAEACE1D38B0.roa
Signing time: Wed 15 Apr 2026 13:34:21 +0000
ROA not before: Wed 15 Apr 2026 13:34:16 +0000
ROA not after: Thu 30 Apr 2026 13:34:16 +0000
asID: 9304
IP address blocks: 45.204.48.0/24 maxlen: 24
45.204.49.0/24 maxlen: 24
45.204.50.0/24 maxlen: 24
45.204.51.0/24 maxlen: 24
45.204.52.0/24 maxlen: 24
45.204.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:26:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109808 (0x1acf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 15 13:34:16 2026 GMT
Not After : Apr 30 13:34:16 2026 GMT
Subject: CN=69df93dd-e375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7b:59:1b:33:28:53:83:29:67:bc:e1:7b:8b:
1c:b4:81:58:f6:7c:1f:e4:42:27:79:0c:46:f2:ce:
08:22:8b:fe:da:dd:95:73:92:37:03:6d:7c:31:b4:
73:19:50:74:84:83:e6:78:a5:17:8e:8f:45:2e:85:
37:eb:ee:01:c6:eb:16:ab:7b:e1:ce:54:a2:8b:70:
ac:ed:73:f1:d3:b8:71:6d:af:c0:d5:2d:ee:8f:be:
77:dc:82:84:3a:c2:38:6d:8c:5b:64:c5:45:7b:ed:
08:5f:90:15:0b:0e:e7:90:bc:20:d9:a7:1f:68:17:
87:43:66:46:c4:b0:35:91:12:29:85:cb:8d:cd:a6:
ee:4f:dc:e1:20:4e:56:df:60:39:5e:29:43:14:14:
49:0b:2d:69:25:ae:3c:00:e8:2f:11:d0:dd:aa:3c:
f9:54:70:ad:b1:31:af:39:7a:ae:cb:8e:d3:fb:48:
22:e0:b7:e7:7c:79:bf:12:6d:91:5b:9d:ff:bf:f3:
e0:0f:7a:8d:90:76:74:58:81:b7:9a:40:16:fb:14:
1e:25:16:5d:0f:a2:af:7e:04:0d:38:a9:db:74:b5:
5f:92:e5:ed:4f:69:91:6c:70:42:be:f6:bb:d0:24:
96:cf:dd:71:bb:36:01:4b:27:bc:00:0f:7c:cf:76:
f7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:67:F8:1E:69:DB:C9:08:ED:8C:0B:14:D5:D4:2D:17:34:07:3F:1A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CED8E76638CF11F1A47FFAEACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.48.0-45.204.53.255
Signature Algorithm: sha256WithRSAEncryption
64:fc:2e:b8:8e:36:a0:28:f5:66:c8:fe:30:ad:07:ac:9d:26:
e9:33:83:c3:db:89:e3:97:ca:86:96:97:7e:8d:67:f1:7d:a8:
d6:61:ce:24:c0:84:b9:fa:7b:8f:db:8c:37:12:0b:d0:82:9f:
71:ff:01:9e:fb:ef:5b:24:c3:aa:ec:91:57:17:ba:37:08:8f:
8c:d1:58:01:4b:5c:b0:08:54:c1:28:62:09:4d:1f:27:48:13:
4e:51:14:e5:36:46:eb:59:8a:6a:1c:75:4f:fb:37:4e:94:dc:
87:86:57:b1:dc:a1:15:40:31:fd:d5:3f:63:0b:65:e9:e4:89:
6d:e8:7d:de:45:11:f2:5f:dc:1c:b4:22:58:7d:fa:c6:16:e2:
3b:88:c0:01:b3:f3:02:fd:71:f9:cb:48:9f:75:12:b6:40:0e:
a7:b7:0d:3c:7a:80:eb:fd:bc:de:07:e3:fd:c0:a5:c6:90:9d:
cc:ee:54:1e:a7:c4:03:b2:b3:c5:1a:80:22:a6:74:e4:63:fb:
d8:da:6a:e8:d4:63:52:35:9d:d6:91:7f:79:6d:e1:7d:9d:86:
40:38:23:5d:d7:6f:6b:4a:71:d1:2e:62:9f:2e:6b:4e:59:98:
16:be:f4:ce:93:60:35:7d:68:5b:b2:64:f6:6f:33:56:b6:74:
03:9a:48:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:38:07 2026 by rpki-client