Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7C74440E460111F1B2473312CF1D38B0.roa
File: 7C74440E460111F1B2473312CF1D38B0.roa (raw, json)
Hash identifier: tXQUf2DRCU9Hl6lfoPcTbFoSaEoH3IMc19d6ZWXkY04=
Subject key identifier: 25:12:10:91:E6:32:F8:EF:1A:18:45:F7:3F:20:99:49:56:9E:29:B5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B12B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7C74440E460111F1B2473312CF1D38B0.roa
Signing time: Sat 02 May 2026 08:32:42 +0000
ROA not before: Sat 02 May 2026 08:32:38 +0000
ROA not after: Tue 09 Jun 2026 08:32:38 +0000
asID: 63139
IP address blocks: 45.197.98.0/24 maxlen: 24
45.197.99.0/24 maxlen: 24
45.197.100.0/24 maxlen: 24
45.197.101.0/24 maxlen: 24
45.197.102.0/24 maxlen: 24
45.197.115.0/24 maxlen: 24
45.197.116.0/24 maxlen: 24
45.197.117.0/24 maxlen: 24
45.197.118.0/24 maxlen: 24
45.197.119.0/24 maxlen: 24
45.197.120.0/24 maxlen: 24
45.197.121.0/24 maxlen: 24
45.197.122.0/24 maxlen: 24
45.197.123.0/24 maxlen: 24
45.197.124.0/24 maxlen: 24
45.197.125.0/24 maxlen: 24
45.197.126.0/24 maxlen: 24
45.197.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110891 (0x1b12b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 2 08:32:38 2026 GMT
Not After : Jun 9 08:32:38 2026 GMT
Subject: CN=69f5b6aa-31fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e1:c4:c8:f6:1d:2e:de:64:f4:84:76:d3:a3:
ef:00:9e:4c:7a:6e:38:87:4d:9e:fc:9b:03:61:a9:
04:07:e2:2a:08:8d:b7:29:19:2b:73:67:7f:05:f5:
91:24:26:89:f2:8c:c7:69:42:b0:87:4a:3f:be:8a:
04:61:19:87:b0:f4:19:80:1d:6e:1b:9e:6b:14:bf:
dd:e9:b2:a6:20:40:99:a0:0c:4d:f2:ec:a7:61:91:
50:ce:ce:56:2f:ba:d0:22:fd:e4:1e:12:f2:19:0a:
e7:8a:18:e9:d9:e3:2c:a6:c4:3e:a1:82:ac:6a:65:
2f:f2:dd:9d:97:10:b3:f3:4d:2d:5f:f0:76:61:09:
4f:f8:1e:c0:41:d6:81:2e:e6:78:e7:95:d5:c1:83:
57:b6:1f:b5:56:41:dc:aa:9b:fc:9a:3a:54:cd:1b:
85:53:21:cb:08:fb:50:df:fb:03:f9:c4:bc:c8:3a:
fa:6b:e0:cc:d0:d6:3c:b1:67:a8:dd:d4:01:ad:c5:
c3:e8:71:92:5d:41:58:6b:56:82:ef:58:e5:26:4c:
f4:fd:86:01:69:bc:1a:97:4f:48:fe:65:c8:30:05:
aa:a7:a0:bc:ad:86:95:0b:7a:0d:6e:1f:c3:07:98:
29:ff:71:8d:b5:a2:df:c4:6a:2b:ac:08:61:ff:9e:
e4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:12:10:91:E6:32:F8:EF:1A:18:45:F7:3F:20:99:49:56:9E:29:B5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7C74440E460111F1B2473312CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.98.0-45.197.102.255
45.197.115.0-45.197.127.255
Signature Algorithm: sha256WithRSAEncryption
6e:22:c2:77:d5:8f:84:ca:dd:ce:32:50:3e:fe:ee:74:a9:52:
19:f1:9e:a5:9e:c0:df:92:2c:42:bb:cc:88:fc:5f:f5:7a:fb:
b9:77:ef:86:1d:74:40:f1:df:b8:33:e3:77:e2:9c:45:c6:d7:
78:3a:3a:d6:70:a6:b3:23:23:30:7c:aa:3a:f9:cd:ac:94:95:
4f:cf:b7:63:29:53:9e:66:2c:f4:22:c2:f4:eb:d7:99:25:df:
a7:9e:e7:2b:c6:8a:98:fd:58:d3:49:66:5f:1f:b8:cb:3f:41:
11:96:f9:9d:85:7d:c9:5a:34:1b:9c:58:23:32:f1:d5:05:7b:
02:b3:c8:12:bc:25:e0:6d:1c:2d:84:2f:5f:ab:31:c2:6e:bf:
be:c6:50:04:81:13:d7:2d:15:e5:7d:d0:51:65:a6:8b:2a:7b:
84:30:28:42:7d:17:06:84:c3:bb:45:3c:19:ed:57:d2:12:b7:
11:a3:ff:69:36:61:f0:6e:42:a0:b7:52:fd:db:b2:a6:50:0a:
f1:45:b5:ca:69:40:74:c4:d3:d7:05:c4:6f:03:fd:8e:81:04:
b5:a8:73:f3:62:bd:01:9e:cc:11:e6:28:35:c5:17:e8:e3:6e:
2c:b4:f8:c6:7c:22:fc:1b:92:a9:1c:1e:72:a8:ca:34:ce:9b:
09:a5:91:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:21:15 2026 by rpki-client