Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6D9C75763E4C11F18BC0180ECF1D38B0.roa
File: 6D9C75763E4C11F18BC0180ECF1D38B0.roa (raw, json)
Hash identifier: kdTGCO1B38BD/NLx6JOcUsQMpBC5AUcTWkFik/5OEd8=
Subject key identifier: B0:DE:A9:93:03:F5:36:B8:5F:9B:0D:4B:DE:BF:8D:C7:7A:DC:B1:12
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AE19
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6D9C75763E4C11F18BC0180ECF1D38B0.roa
Signing time: Wed 22 Apr 2026 13:09:01 +0000
ROA not before: Wed 22 Apr 2026 13:08:56 +0000
ROA not after: Tue 09 Jun 2026 13:08:56 +0000
asID: 395793
IP address blocks: 45.194.12.0/23 maxlen: 24
45.197.6.0/23 maxlen: 24
45.201.32.0/24 maxlen: 24
45.204.147.0/24 maxlen: 24
45.204.148.0/24 maxlen: 24
45.204.149.0/24 maxlen: 24
45.204.150.0/24 maxlen: 24
45.204.151.0/24 maxlen: 24
45.206.65.0/24 maxlen: 24
45.206.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110105 (0x1ae19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 22 13:08:56 2026 GMT
Not After : Jun 9 13:08:56 2026 GMT
Subject: CN=69e8c86c-e3ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:59:c6:4e:38:e4:e7:0e:a4:4e:58:19:4d:c1:
1e:1b:7b:5d:d8:c6:04:a2:87:72:fb:90:a5:c7:1d:
56:0d:e1:77:1c:c8:d5:69:e9:71:a3:a5:2c:e8:43:
33:15:31:af:02:01:2e:86:2b:23:a9:64:b3:0a:ab:
25:dc:b8:64:60:f4:87:cf:e2:3e:d4:77:50:25:c8:
6f:d2:21:89:9a:8b:b6:49:06:05:a1:ff:62:a3:28:
bc:98:86:05:d3:0c:d4:cd:69:7b:35:af:24:e9:0d:
17:be:37:fe:ad:51:91:95:78:e5:04:bd:67:c0:bc:
7f:2e:8f:4a:f1:9b:9f:44:c3:40:b7:da:98:34:32:
46:19:a2:e0:35:51:97:34:bf:36:5e:ed:3a:68:77:
30:4d:e4:81:0d:82:df:76:e3:7b:b1:65:1a:ba:d7:
4f:cd:af:fc:57:64:ea:d8:27:0d:05:9b:a5:5d:74:
cb:00:b5:af:0c:92:3a:83:15:31:88:f4:8c:1a:12:
cb:e4:e0:a0:34:f0:e4:a6:7a:3d:57:03:13:7f:4c:
89:3b:3e:91:62:44:2f:20:c6:6e:58:59:df:a1:a8:
3f:25:a1:ca:2e:52:0e:48:18:1d:70:33:dd:0c:cc:
76:74:ff:32:1f:24:b7:41:9c:aa:8f:b0:e8:22:45:
2f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:DE:A9:93:03:F5:36:B8:5F:9B:0D:4B:DE:BF:8D:C7:7A:DC:B1:12
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6D9C75763E4C11F18BC0180ECF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.12.0/23
45.197.6.0/23
45.201.32.0/24
45.204.147.0-45.204.151.255
45.206.65.0-45.206.66.255
Signature Algorithm: sha256WithRSAEncryption
33:e8:82:55:d0:c1:42:36:33:a7:f8:f7:03:98:32:0f:ba:2a:
4f:87:08:fa:f6:31:40:01:d1:e6:3d:a9:18:f5:38:fe:2f:83:
14:cb:a5:a3:03:0b:21:14:41:ea:5e:8a:92:0b:36:56:ef:fa:
3f:49:6c:a5:a6:aa:be:d7:5e:2a:80:db:67:a2:52:4d:18:8e:
3e:f6:f1:25:b2:e4:d4:0c:98:a0:33:ad:4f:14:d1:36:06:00:
8f:15:a9:17:1f:e2:17:5c:c9:7a:75:f0:1d:e9:b6:6e:32:8f:
20:a8:35:7d:bd:15:b8:d1:6e:46:2a:26:4e:89:3e:e8:4d:80:
b8:ad:1b:61:c1:97:31:b1:e9:74:12:d3:7f:8b:e1:b6:c6:1a:
0d:a4:a7:f8:08:ce:a7:5d:14:31:76:99:14:dc:b4:90:89:08:
34:85:0f:4d:1d:df:ce:c8:00:4c:f3:3e:9e:3b:49:db:48:1d:
1d:a2:21:ad:1a:27:4a:57:c8:06:76:28:5f:46:49:5e:15:fc:
4d:a3:25:0e:00:27:ce:df:7a:15:c2:d0:9c:ba:ec:d3:9f:f1:
15:2d:a2:43:67:4e:e7:a7:0c:cc:62:0f:4e:66:17:4c:a5:bb:
69:f9:6b:58:ac:02:f2:23:e7:24:64:02:4a:0a:26:b7:21:45:
72:b7:0f:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:23:10 2026 by rpki-client