Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D9D2CEE6624811F190D7BA18CF1D38B0.roa
File: D9D2CEE6624811F190D7BA18CF1D38B0.roa (raw, json)
Hash identifier: CLqo6nLW8wVMezx47/gms1JYr99trCwsEZG8p0v6Vpo=
Subject key identifier: E5:0E:1E:3D:09:77:90:3D:28:A3:8F:0A:76:86:55:99:C9:10:4C:F4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BC43
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D9D2CEE6624811F190D7BA18CF1D38B0.roa
Signing time: Sun 07 Jun 2026 08:14:06 +0000
ROA not before: Sun 07 Jun 2026 08:14:01 +0000
ROA not after: Mon 27 Jul 2026 08:14:01 +0000
asID: 134824
IP address blocks: 45.192.129.0/24 maxlen: 24
45.194.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113731 (0x1bc43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 7 08:14:01 2026 GMT
Not After : Jul 27 08:14:01 2026 GMT
Subject: CN=6a25284e-c6b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:63:c2:62:b7:ea:f9:36:94:11:b3:37:85:d6:
d1:44:57:fb:8d:23:47:fc:70:f2:a8:15:5e:55:f6:
b5:33:99:fd:8a:8e:c0:20:43:e5:12:83:f1:d0:ad:
71:48:6c:fe:86:e4:ec:61:cd:d9:01:97:ee:20:fd:
98:dc:29:b1:2e:c2:7b:48:bc:6c:06:74:0f:b5:69:
49:5c:9c:bb:05:c5:71:5a:ff:63:98:c3:03:b3:e3:
3b:aa:2d:c0:ba:f9:6a:36:c1:aa:e0:1e:40:1e:5a:
7a:24:b4:7d:c2:b0:75:7d:98:fb:70:c6:76:bc:ef:
5f:a2:55:17:c4:7f:ee:03:91:3b:12:96:9d:e2:4b:
7c:01:9c:8e:6a:88:ba:50:86:c3:1c:c8:0d:ae:61:
6c:d6:23:a9:24:1a:09:f5:15:63:fd:cd:f2:20:50:
c3:69:64:ae:df:3c:8a:12:e7:70:10:60:19:55:f0:
19:8a:45:23:82:e1:58:ae:7c:56:64:d5:9e:ce:c7:
56:84:ae:81:7c:2d:1e:30:0a:4c:ff:0d:3f:19:ca:
fa:01:9b:54:c7:7d:cb:9b:06:55:27:06:08:b4:30:
8d:e3:17:96:24:6c:40:cd:a1:e2:0b:82:f2:58:81:
ec:51:9e:b7:32:5c:f9:d4:be:4a:4d:a2:33:ef:6d:
52:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:0E:1E:3D:09:77:90:3D:28:A3:8F:0A:76:86:55:99:C9:10:4C:F4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D9D2CEE6624811F190D7BA18CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.129.0/24
45.194.93.0/24
Signature Algorithm: sha256WithRSAEncryption
13:f0:b0:67:34:cd:b6:66:f3:4f:86:93:50:b1:8b:6b:ca:a1:
88:1b:3f:fd:7e:4e:41:55:24:3b:74:b9:e2:f8:95:ef:d1:78:
cf:fc:fe:a4:20:26:a2:9e:e9:84:dc:6f:40:07:32:96:0b:56:
89:a0:39:cc:2a:ee:5f:fd:2f:da:d9:b8:07:95:03:fc:64:bf:
6e:59:99:07:99:28:0b:b7:47:19:b5:dc:e2:f3:b3:a2:13:0e:
d0:60:3a:f5:d9:1a:48:c8:66:31:7e:e2:69:c1:ae:9e:b2:f6:
3b:a2:72:cc:59:44:98:0e:1d:7f:55:39:1d:92:e5:46:2d:8f:
e0:de:4f:c1:67:32:61:36:09:a8:ad:98:b0:9f:be:23:aa:8f:
9f:a4:4e:8a:5d:4f:63:b9:42:b8:ee:e3:6f:85:d9:ec:f8:c5:
4b:03:e6:6d:58:66:1d:20:e7:ea:0b:e3:42:57:9c:03:d8:d1:
1a:9a:d0:d9:1b:67:46:f0:ea:fe:24:97:85:f7:80:c2:ef:f0:
ef:d9:14:46:cf:9f:e2:51:a1:5c:91:6c:af:ba:7d:f2:32:f1:
0f:5d:46:30:2e:48:00:48:0a:3b:2e:fd:82:6b:49:2f:93:63:
89:ce:65:df:2b:b3:55:e3:6a:60:a6:0d:ad:56:76:2c:98:f2:
d8:28:19:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:55:44 2026 by rpki-client