Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E23E206A60B511F19D910004CF1D38B0.roa
File: E23E206A60B511F19D910004CF1D38B0.roa (raw, json)
Hash identifier: VAzi/+sjr+ldMKeOM4DmTTZFN18JgO73t62MrEYWJ+Q=
Subject key identifier: DD:B9:87:76:FC:51:B3:46:FA:C9:FE:4E:7D:1B:75:20:DC:9E:0E:3A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BBE9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E23E206A60B511F19D910004CF1D38B0.roa
Signing time: Fri 05 Jun 2026 08:09:33 +0000
ROA not before: Fri 05 Jun 2026 08:09:28 +0000
ROA not after: Sun 12 Jul 2026 08:09:28 +0000
asID: 40779
IP address blocks: 45.207.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113641 (0x1bbe9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 5 08:09:28 2026 GMT
Not After : Jul 12 08:09:28 2026 GMT
Subject: CN=6a22843d-5708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f1:60:4a:43:c0:17:05:a4:ff:dc:b5:de:4a:
4e:8f:c6:4a:41:e6:c8:e6:da:7c:0f:46:c5:6f:e7:
ba:38:96:52:aa:ef:20:4d:96:b0:66:4d:1f:ea:d4:
ca:4d:c5:c3:b8:1b:95:63:18:cb:9a:4c:62:d4:08:
50:47:22:d0:ca:ba:76:b8:f1:04:de:84:be:9d:7b:
e4:3e:db:de:4f:49:d1:c2:3b:de:e9:87:56:9d:bf:
e1:0f:92:56:5f:5a:93:7d:25:2a:d4:32:c8:d3:26:
cf:9a:49:22:a5:25:1f:40:70:e0:3e:a8:bf:4d:45:
ab:1e:a6:85:87:80:ad:60:43:f0:a2:a3:c9:a3:d2:
e5:2c:e6:1c:00:74:b7:7f:cf:b4:67:32:75:e3:e9:
7e:cf:bc:dd:52:36:bf:0d:de:21:a5:82:d9:0b:a5:
dc:6a:9a:94:36:ec:db:a5:e8:e4:40:27:4a:20:36:
01:69:b2:3c:69:15:61:5c:c4:17:ed:66:3c:e4:ac:
56:d3:10:8d:81:97:ba:ad:43:34:0a:60:86:0b:20:
cf:ca:41:18:25:7c:ef:40:d3:08:38:c8:ba:95:1e:
9b:ba:f4:9f:79:6d:bc:12:75:7d:9c:2d:2b:37:0c:
d4:c8:36:f8:e4:ad:36:92:85:ca:ee:c8:46:fb:47:
02:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:B9:87:76:FC:51:B3:46:FA:C9:FE:4E:7D:1B:75:20:DC:9E:0E:3A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E23E206A60B511F19D910004CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.192.0/19
Signature Algorithm: sha256WithRSAEncryption
bb:15:95:69:2b:4c:f2:08:a5:8f:d7:e4:d0:19:9b:53:ce:cc:
7d:34:57:68:b5:2f:80:9b:f0:47:83:86:aa:9f:79:38:ec:71:
67:21:ea:4e:89:82:ba:7f:bc:a2:0e:d2:ce:85:69:ad:72:5a:
30:c1:8e:13:31:d4:18:94:5b:1d:9c:65:fe:f7:b9:7b:02:69:
d6:c6:6e:89:42:e3:ad:ba:70:7c:5b:bf:82:90:5b:aa:ef:58:
ab:0a:23:5e:a5:cc:4d:f1:f9:b8:4b:19:25:63:fa:70:2f:d3:
f7:1a:6c:eb:c2:b1:ce:e6:f1:88:a3:c5:74:ff:30:93:fc:ba:
d3:39:9a:0c:6f:64:5d:69:01:e1:05:b9:e1:e7:c0:b3:da:bf:
09:74:00:3c:28:f7:f3:2e:91:73:c1:08:0b:98:b2:90:ea:8b:
ec:9c:d9:16:64:d9:60:d2:33:61:f9:3f:2a:a5:7c:99:fd:ff:
08:b4:27:18:50:ef:32:8f:47:1c:93:75:68:5b:2a:63:ad:f3:
58:a7:cf:f5:9b:85:bc:91:7d:50:06:fc:40:34:30:d9:25:7e:
46:5a:98:75:e8:25:56:e5:de:f5:2e:02:84:e8:b3:76:9f:12:
3e:e6:69:b0:9c:4d:4f:57:9b:4f:90:3f:4c:1d:18:d3:27:52:
18:45:b6:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:17:12 2026 by rpki-client