Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6420DFAC407F11F1AE3F5008CF1D38B0.roa
File: 6420DFAC407F11F1AE3F5008CF1D38B0.roa (raw, json)
Hash identifier: p08vn6lk9DYceSH5GowQS2hrqad1Zth1fU6rHTK36LE=
Subject key identifier: C3:D1:AF:C6:A6:40:56:4B:B3:59:8D:C6:52:46:FE:D0:17:AF:B6:19
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AF15
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6420DFAC407F11F1AE3F5008CF1D38B0.roa
Signing time: Sat 25 Apr 2026 08:18:51 +0000
ROA not before: Sat 25 Apr 2026 08:18:46 +0000
ROA not after: Mon 01 Jun 2026 08:18:46 +0000
asID: 984
IP address blocks: 45.196.101.0/24 maxlen: 24
45.196.102.0/24 maxlen: 24
45.196.103.0/24 maxlen: 24
45.196.113.0/24 maxlen: 24
45.202.103.0/24 maxlen: 24
45.202.104.0/24 maxlen: 24
45.203.248.0/24 maxlen: 24
45.203.249.0/24 maxlen: 24
45.203.251.0/24 maxlen: 24
45.206.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110357 (0x1af15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 25 08:18:46 2026 GMT
Not After : Jun 1 08:18:46 2026 GMT
Subject: CN=69ec78eb-5e94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:be:e2:0c:32:47:03:a2:b8:f6:6c:18:0e:f1:
97:f3:51:dc:df:55:38:d2:d7:7e:90:16:03:ad:2c:
05:6a:ea:fa:8c:a5:54:26:dc:30:e0:49:63:a3:55:
17:77:43:9c:95:2c:a3:bc:18:b8:d0:fa:35:ab:37:
34:15:21:a6:7a:73:62:00:dd:09:26:59:2a:70:a7:
0a:8b:f0:b5:7c:35:a9:08:b1:e9:5f:71:13:e2:2e:
be:4a:4f:24:f4:17:29:3a:00:de:03:91:18:e7:26:
08:b2:f5:30:46:75:5a:ce:50:75:88:68:bd:c3:41:
9f:7f:5c:ae:7e:12:79:d6:60:3c:26:b3:c4:75:4d:
af:e5:13:10:ff:23:4e:be:f1:df:01:c1:94:15:9b:
0e:f5:2b:c9:34:34:c3:a2:e3:0c:b6:35:bf:3d:f9:
d1:23:c7:6c:e5:a1:f0:40:f6:9b:bc:72:b4:4d:07:
45:1a:a7:85:4c:9c:72:73:a9:5e:e6:af:9f:6e:c0:
c6:01:0f:42:19:39:32:57:f4:67:6f:14:45:cc:12:
64:b6:be:33:3a:99:88:62:e3:60:e8:e5:e2:a2:3c:
ff:de:49:16:3c:9d:72:b1:d6:e9:b5:14:9d:d1:56:
49:e8:a2:9a:89:62:f8:d7:23:95:95:3e:55:fe:9b:
1a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:D1:AF:C6:A6:40:56:4B:B3:59:8D:C6:52:46:FE:D0:17:AF:B6:19
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6420DFAC407F11F1AE3F5008CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.101.0-45.196.103.255
45.196.113.0/24
45.202.103.0-45.202.104.255
45.203.248.0/23
45.203.251.0/24
45.206.53.0/24
Signature Algorithm: sha256WithRSAEncryption
57:6f:17:66:d4:a3:be:ae:c6:fa:27:30:3f:c2:cf:68:be:13:
34:59:53:53:aa:e8:a4:0f:6f:2b:a9:77:3b:05:e8:37:a1:f9:
ba:1d:55:7c:dc:da:ee:51:fa:cd:b7:df:0f:0a:7f:9d:50:b1:
f0:68:31:e6:11:d5:03:01:4b:23:46:e4:67:64:a3:74:b4:e6:
22:0e:41:de:cd:1a:3a:32:49:01:c0:1d:52:dd:4b:8c:ae:d5:
e0:85:c7:52:f1:a8:a5:12:a6:f0:47:fc:47:56:e8:c4:b3:3b:
b2:16:c9:1d:db:8d:1a:5c:1a:2f:63:c3:de:d9:43:55:83:a4:
1d:3e:4d:3e:20:80:14:28:53:ed:84:4f:20:23:83:e1:84:ee:
84:34:7a:e8:ba:a5:39:7f:8a:3f:96:f7:c0:40:4b:c0:8d:50:
b5:3c:3a:09:34:39:29:80:c7:7a:79:81:27:ac:3e:14:ee:5f:
34:ca:4e:48:5a:7f:a3:87:41:a0:b4:ce:bc:3d:53:6b:c2:ef:
9a:9b:fc:0a:09:fe:af:71:ba:c7:eb:5b:92:92:8f:1c:0d:68:
c5:6a:00:a5:99:e5:45:6a:56:5a:0d:4f:32:be:d1:7e:49:6e:
73:8e:15:58:a1:88:5f:5d:28:37:e3:6b:dd:e1:6e:b8:19:c2:
27:60:05:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:14:30 2026 by rpki-client