Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EAD674DC33F311F1B42DDFD9CE1D38B0.roa
File: EAD674DC33F311F1B42DDFD9CE1D38B0.roa (raw, json)
Hash identifier: iiq0fyEamgAjjglRoqzyMIPq4dSsgCpuQlOENvb+r2c=
Subject key identifier: A9:16:3A:4B:B0:7F:A0:05:4C:64:C3:B0:1E:55:87:93:8F:AA:A0:58
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AB32
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EAD674DC33F311F1B42DDFD9CE1D38B0.roa
Signing time: Thu 09 Apr 2026 09:10:14 +0000
ROA not before: Thu 09 Apr 2026 09:10:09 +0000
ROA not after: Sat 16 May 2026 09:10:09 +0000
asID: 53808
IP address blocks: 45.196.238.0/23 maxlen: 24
45.196.238.0/24 maxlen: 24
45.196.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109362 (0x1ab32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 9 09:10:09 2026 GMT
Not After : May 16 09:10:09 2026 GMT
Subject: CN=69d76cf6-d8af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8d:26:cb:b5:0f:3b:9e:57:05:9a:33:eb:33:
25:8e:4e:04:d5:52:f2:aa:52:f4:f1:2e:b6:dd:9e:
11:de:a8:a9:a5:c2:8c:af:f8:1f:03:81:ee:8d:71:
50:3d:86:9c:f7:29:e7:60:48:c0:7a:b9:0c:7f:ed:
8d:6e:41:d5:af:64:42:55:6f:a1:a0:0d:a2:6a:ad:
b8:37:38:58:d5:a7:26:97:cd:93:81:a7:f9:e7:54:
f5:05:79:e0:61:56:c3:88:20:cd:84:7f:6c:ea:58:
b2:b7:2f:1b:1c:b8:6b:50:8b:62:e9:bd:0b:dc:dc:
fe:4f:aa:86:e6:00:89:c7:1c:9b:fe:8a:75:01:33:
0b:63:7b:7a:5a:eb:65:32:b3:92:46:55:fe:75:2c:
de:06:3b:51:84:f5:b3:95:4c:5c:2c:49:b7:6d:b7:
e5:90:50:5e:ed:c4:68:fc:ef:7d:f5:1f:78:4b:21:
38:b6:53:d0:c8:6d:9e:60:3c:ce:2a:31:cf:55:be:
bb:ed:16:f4:11:b5:16:8c:03:ea:5c:39:2d:3b:f2:
b6:39:af:ad:7d:26:e9:66:f2:01:84:4e:40:c5:90:
5a:48:83:de:6f:47:38:74:31:93:40:79:00:f8:ea:
31:2a:c3:e0:1f:98:9c:4d:f3:92:3d:ae:7c:67:75:
b3:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:16:3A:4B:B0:7F:A0:05:4C:64:C3:B0:1E:55:87:93:8F:AA:A0:58
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EAD674DC33F311F1B42DDFD9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.238.0/23
Signature Algorithm: sha256WithRSAEncryption
16:ff:f3:fe:1f:49:35:ba:12:62:0c:eb:b8:4d:2b:db:9e:23:
9d:d4:6a:93:4c:28:68:a6:71:aa:7b:89:b9:a7:30:ca:83:3f:
6f:38:d1:f6:3e:b4:12:61:a8:8b:61:08:99:4d:29:3b:46:d9:
4b:f0:26:c0:02:6d:de:ce:0b:eb:1a:0c:56:94:4a:1b:37:39:
5b:f9:1c:d6:50:c3:ae:25:1e:a2:87:27:5a:e7:ff:b5:a3:5e:
f3:d1:fa:ea:d2:c7:a8:f7:e2:7a:69:77:3a:9a:04:3b:88:29:
1a:d5:91:2e:70:c3:5c:9d:e7:95:eb:dc:11:e8:03:0c:9d:2b:
3a:88:0e:b8:bc:f0:64:d1:7a:c3:a5:b7:c1:1e:37:ff:d4:2e:
7e:c9:57:c8:2e:5d:a1:10:89:1c:2a:0a:c5:5d:1a:f9:f6:7e:
fd:5d:d6:80:23:1d:ff:36:54:da:ea:8a:21:ca:81:39:21:7f:
f3:20:81:91:16:18:f4:21:da:f9:32:ed:af:c2:16:a3:5c:eb:
5a:e2:d0:ad:4b:44:25:33:87:22:53:76:48:c7:6c:6a:89:b5:
c7:f6:3e:f2:e2:c5:af:31:f8:a0:4b:4c:76:3d:d1:e0:ea:f0:
81:f1:a1:2a:09:ad:85:fc:e2:14:0c:20:02:cd:29:1e:79:3e:
66:8f:6a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:55:04 2026 by rpki-client