Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D645558E2F5611F1B144DA90DAE4EC9C.roa
File: D645558E2F5611F1B144DA90DAE4EC9C.roa (raw, json)
Hash identifier: rnduORoM4FZnsaR2RhqilDzx1v4mVfpFEaX06PiaQ5M=
Subject key identifier: B9:E6:3F:EF:EB:15:DA:4B:F1:E3:F5:C6:B3:46:E9:67:75:BC:04:EE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A9C1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D645558E2F5611F1B144DA90DAE4EC9C.roa
Signing time: Fri 03 Apr 2026 12:15:44 +0000
ROA not before: Fri 03 Apr 2026 12:15:32 +0000
ROA not after: Sun 10 May 2026 12:15:32 +0000
asID: 61254
IP address blocks: 45.196.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108993 (0x1a9c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 3 12:15:32 2026 GMT
Not After : May 10 12:15:32 2026 GMT
Subject: CN=69cfaf70-3ada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:bd:2f:31:af:6f:b4:3c:28:b7:fa:05:4c:4e:
4f:a6:94:07:35:1e:72:2c:95:04:75:f0:d9:40:c6:
10:48:50:ed:b2:8e:7a:30:87:7d:db:05:8d:52:d2:
b1:a0:2a:78:cc:6d:d3:bc:ae:ae:1f:67:76:3a:4d:
76:54:31:33:3b:fc:3f:46:6f:19:9c:2b:be:39:d8:
24:07:5d:35:4a:d7:94:f0:53:08:f0:26:9e:54:37:
dd:06:91:9f:7c:46:11:a8:4f:20:e6:b3:72:20:dd:
43:b8:01:85:c5:84:1f:71:42:ff:e2:aa:5b:ee:83:
a2:dd:a4:f5:6d:c3:95:aa:47:90:1d:68:a0:12:26:
e5:f9:f8:b6:bf:3e:9b:07:ce:c6:85:3c:ec:67:56:
af:1b:ee:12:16:e2:ac:95:2b:2f:3a:93:d4:b6:32:
0f:e7:22:ec:2e:8a:6c:ef:27:4d:21:2b:79:de:0c:
04:f2:a8:d8:3d:fe:3f:25:df:69:c0:70:fa:32:c2:
b6:ce:50:8f:af:27:03:5a:1e:e5:e6:9e:ae:f4:ba:
e1:33:4f:21:cc:be:a8:0e:9b:71:6c:c5:39:af:1b:
de:cc:8c:b8:59:f2:77:f7:d5:49:da:ae:5b:77:23:
c9:de:ba:a3:eb:f0:72:2c:58:ea:0d:c7:6d:b6:f2:
33:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:E6:3F:EF:EB:15:DA:4B:F1:E3:F5:C6:B3:46:E9:67:75:BC:04:EE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D645558E2F5611F1B144DA90DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.229.0/24
Signature Algorithm: sha256WithRSAEncryption
25:ee:0f:d2:ec:90:a0:d4:27:f2:d1:41:a1:fa:e9:79:39:c8:
22:ac:a3:b2:bd:ac:b8:cf:37:59:64:f7:a4:b2:d6:07:f1:b6:
b8:2e:af:89:5d:59:5a:e9:99:03:d7:b9:4d:22:c8:09:a8:18:
f8:ce:49:72:2c:5a:a7:92:40:af:14:c8:4f:6c:6e:c2:f8:04:
d1:a7:4d:b6:25:78:c5:d4:af:0d:e7:df:40:41:cd:df:78:78:
11:f8:5f:67:61:e0:40:87:29:2a:01:49:60:7d:ec:5f:67:5c:
a2:bd:9e:f8:e6:d1:a1:a6:ff:80:20:1d:2b:59:ff:42:db:28:
3e:c3:6b:60:c3:c5:49:59:d7:fe:30:27:ce:45:95:77:ef:10:
57:77:e2:39:d1:e4:ef:02:2c:17:27:09:26:89:d0:49:8f:ed:
da:17:eb:f6:de:5c:e7:d9:ff:9e:8c:d2:4b:cd:e4:a5:ab:5e:
e8:cf:8d:0a:db:e2:44:a4:9f:7b:9c:a0:e1:99:6b:cf:51:6d:
b5:30:7d:55:13:fb:f7:b0:3c:5a:62:d0:ca:33:8b:b5:06:99:
da:af:0b:90:cc:f3:83:4d:cb:b1:12:7d:55:ef:ef:c0:41:96:
7c:81:31:13:52:de:21:a0:66:9b:52:3f:7c:2e:82:b4:68:60:
15:8e:3d:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:54:51 2026 by rpki-client