Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E1B17314292311F197A89AA6DAE4EC9C.roa
File: E1B17314292311F197A89AA6DAE4EC9C.roa (raw, json)
Hash identifier: ITvyhrVENhb+ISqPfgyyld+BtV0UD6/CmS3r0SybJ4I=
Subject key identifier: 57:06:92:0E:30:A0:AA:3A:78:6D:0B:1F:9A:37:B4:D8:91:22:0F:A4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A784
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E1B17314292311F197A89AA6DAE4EC9C.roa
Signing time: Thu 26 Mar 2026 14:55:52 +0000
ROA not before: Thu 26 Mar 2026 14:55:46 +0000
ROA not after: Sun 03 May 2026 14:55:46 +0000
asID: 135222
IP address blocks: 45.195.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108420 (0x1a784)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 26 14:55:46 2026 GMT
Not After : May 3 14:55:46 2026 GMT
Subject: CN=69c548f8-3089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d6:76:98:4d:35:4e:c9:d3:82:0a:ea:f4:c2:
99:af:31:54:2a:77:18:3b:d6:93:51:d6:3d:ca:d8:
cf:0e:14:b8:81:0e:fc:7e:95:2d:1f:27:5a:8b:81:
e6:95:64:3d:8d:ad:20:a4:19:5c:4f:64:6f:7b:cd:
ec:9d:6d:7d:c8:5c:f8:d1:0e:37:be:4c:2f:19:4b:
ba:97:1c:d6:aa:dc:99:6e:78:ea:c5:4b:c1:9f:05:
12:86:e0:e0:57:1b:eb:c8:1c:65:2d:fe:22:cf:6e:
b5:25:0f:0e:0b:48:a0:79:6f:f6:9a:ef:22:eb:8c:
da:c4:78:d0:d3:43:3d:90:d4:ce:d4:af:ca:28:81:
1b:19:55:04:22:f3:4c:f2:3d:f6:de:c7:a5:5f:50:
db:44:8b:e7:92:98:3e:fa:b3:3d:23:d3:c2:3d:1f:
24:4f:c0:10:d1:fb:f4:d3:8e:15:7f:5c:61:44:85:
6d:84:81:f3:48:d2:ec:95:9c:a8:96:5a:25:53:cb:
48:b8:bf:55:5b:14:63:15:00:66:b5:7a:c5:0d:83:
bd:86:c1:6f:f7:d2:a1:71:f0:e5:98:10:51:2f:16:
29:3a:12:a2:6a:5a:92:e3:c4:cb:9e:8a:fd:82:70:
bd:ba:5f:bc:31:6d:84:60:5d:31:7f:af:2a:8f:f0:
1c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:06:92:0E:30:A0:AA:3A:78:6D:0B:1F:9A:37:B4:D8:91:22:0F:A4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E1B17314292311F197A89AA6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.159.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:a2:cb:7e:f1:28:40:a7:bc:04:4d:de:b0:1b:a6:4b:d5:90:
20:cc:8d:20:7a:dd:22:77:98:f7:77:74:8e:4e:10:1b:55:1a:
53:85:91:f2:64:ba:fb:dc:f3:36:42:6d:bd:8d:95:6f:45:a7:
13:6e:e8:e5:1d:88:74:2e:33:35:7b:27:72:45:7e:6d:a1:1c:
9c:2a:4e:74:20:a2:79:49:ad:76:8d:1a:d5:b3:99:8d:63:27:
44:3c:e7:f4:1d:bb:18:9e:dd:44:cd:6e:0a:75:63:bf:16:a7:
5f:f8:54:ea:de:4a:65:d0:a2:02:06:11:35:f7:52:01:23:84:
3e:dc:40:4d:9e:a8:3b:47:0a:d1:a1:b1:34:60:34:d3:c4:5b:
76:b1:eb:74:04:e4:19:0f:e1:18:7e:31:6f:e6:5e:32:37:e0:
b0:e5:db:b0:f2:e1:24:f2:56:a4:01:45:f1:9a:bb:a1:51:b0:
87:17:a5:64:c8:8c:62:cb:1b:92:71:28:9d:f3:e5:f0:b0:1c:
65:79:39:dd:3b:01:12:34:31:74:8c:e7:bd:13:5a:7a:cf:a2:
0f:80:19:a0:c9:a9:ce:7b:9e:bc:e5:82:8e:c9:16:e7:9d:85:
b8:d2:86:18:8a:0f:fa:2a:6f:19:3b:96:66:e6:50:75:c2:32:
6f:78:70:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:56:06 2026 by rpki-client