Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0B539FC44DD911F1BC9B07C4CE1D38B0.roa
File: 0B539FC44DD911F1BC9B07C4CE1D38B0.roa (raw, json)
Hash identifier: HIgU1QYTGD8eY89N+IIfL+faywQH3JSOtQDFwA1pXTQ=
Subject key identifier: 93:FD:60:83:EF:0B:2E:7B:52:33:62:11:78:BF:CB:B8:A7:DA:B6:8C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B3E1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0B539FC44DD911F1BC9B07C4CE1D38B0.roa
Signing time: Tue 12 May 2026 08:03:22 +0000
ROA not before: Tue 12 May 2026 08:03:18 +0000
ROA not after: Wed 17 Jun 2026 08:03:18 +0000
asID: 139613
IP address blocks: 45.194.85.0/24 maxlen: 24
45.195.60.0/24 maxlen: 24
45.195.192.0/24 maxlen: 24
45.195.196.0/24 maxlen: 24
45.195.197.0/24 maxlen: 24
45.197.1.0/24 maxlen: 24
45.197.2.0/24 maxlen: 24
45.197.4.0/24 maxlen: 24
45.197.5.0/24 maxlen: 24
45.199.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111585 (0x1b3e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 12 08:03:18 2026 GMT
Not After : Jun 17 08:03:18 2026 GMT
Subject: CN=6a02deca-7a63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c8:2c:bb:67:aa:5d:2d:ca:65:52:4d:9c:91:
9a:3b:51:81:28:1b:7f:54:fd:33:8d:0f:80:1d:40:
f2:8e:7c:1c:f0:be:b7:8f:bc:c9:86:b3:ce:1f:c5:
34:27:d8:4f:b3:49:cc:8f:4f:af:5b:ac:0c:d3:67:
56:3d:28:19:7d:d2:5f:be:6c:42:cd:45:4a:40:e8:
6c:b0:e5:20:20:4d:11:46:3d:cb:cb:4a:bb:94:94:
f7:b1:a4:df:5c:35:ca:61:ae:12:12:bf:fd:12:58:
fb:e5:81:6d:3d:d5:0f:97:c7:9f:e9:96:26:72:4c:
1f:37:4e:eb:5c:0d:e1:a5:f2:4e:9b:1c:2b:b4:cf:
9e:e3:5a:2c:0f:12:ca:f5:8a:a2:af:56:cd:4b:b7:
27:83:65:71:bc:d3:13:67:a4:a5:c2:e7:62:28:a4:
b7:92:a8:d5:06:6a:7d:db:d9:d9:0c:08:4a:1e:11:
52:ff:4b:a2:4e:12:10:83:2a:5f:31:78:f7:25:ca:
cf:74:72:24:70:26:46:91:26:4b:2f:e9:cf:a1:ea:
5e:63:fb:d9:b3:0f:3e:b5:4a:d8:23:0f:93:e6:47:
88:16:4e:d4:87:a9:ef:9e:7a:1a:13:12:d1:af:22:
6d:15:1e:24:8f:2a:2f:5d:8a:03:15:d2:e0:e1:2c:
28:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:FD:60:83:EF:0B:2E:7B:52:33:62:11:78:BF:CB:B8:A7:DA:B6:8C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0B539FC44DD911F1BC9B07C4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.85.0/24
45.195.60.0/24
45.195.192.0/24
45.195.196.0/23
45.197.1.0-45.197.2.255
45.197.4.0/23
45.199.191.0/24
Signature Algorithm: sha256WithRSAEncryption
30:25:90:2d:24:1d:71:76:f0:5e:18:07:8a:a7:f7:cb:83:e6:
6f:3e:11:99:48:0e:a4:20:b3:7e:ea:19:6e:8a:64:2d:67:f9:
bc:a2:c7:d2:b7:bb:d5:25:08:71:f6:59:fa:46:63:54:89:9f:
42:55:28:3c:c4:b5:2a:01:f9:1b:a8:89:19:d1:e2:72:d4:99:
4a:cf:56:07:ee:11:d4:59:38:cb:09:08:29:0a:5c:a8:dc:5f:
9f:f6:fa:8f:17:23:3e:ac:44:48:f7:7e:bc:f3:cc:c4:e8:62:
e3:4e:96:62:54:4c:ee:16:ca:f2:60:05:9b:15:49:71:6f:0b:
0d:da:27:4d:09:f7:ec:14:34:49:ff:8a:ac:51:fa:58:55:99:
48:f6:d6:d5:10:22:7a:f5:c5:d7:47:92:ee:b8:2f:2b:06:a9:
db:5c:08:19:f4:72:cc:ee:50:4d:11:31:37:8c:c6:36:1f:03:
da:b4:9c:ec:62:d7:63:2a:d3:b7:d6:d2:09:7e:a9:a8:e5:3f:
d3:a8:a8:9e:d2:75:94:bf:dc:09:7a:78:10:ac:a3:db:78:85:
6c:d6:51:6a:f1:ae:10:16:2e:55:66:67:d1:8c:32:c7:4d:2c:
2b:ce:a8:d9:ac:90:6e:d8:d4:b3:36:44:51:fc:79:6a:01:92:
79:2c:ad:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:19:14 2026 by rpki-client