Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/862378E8463911F1BD8EBEE1CE1D38B0.roa
File: 862378E8463911F1BD8EBEE1CE1D38B0.roa (raw, json)
Hash identifier: kYV0+C2dTJGcCuQj62UOqdvRxQEK+JOJAgRahM9WEh4=
Subject key identifier: 65:67:D2:DF:C9:32:83:F1:06:1F:E6:8F:46:94:DE:E1:2D:50:13:96
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B153
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/862378E8463911F1BD8EBEE1CE1D38B0.roa
Signing time: Sat 02 May 2026 15:13:51 +0000
ROA not before: Sat 02 May 2026 15:13:45 +0000
ROA not after: Wed 02 May 2029 15:13:45 +0000
asID: 17561
IP address blocks: 45.204.192.0/24 maxlen: 24
45.204.193.0/24 maxlen: 24
45.204.194.0/24 maxlen: 24
45.204.195.0/24 maxlen: 24
45.204.196.0/24 maxlen: 24
45.204.197.0/24 maxlen: 24
45.204.198.0/24 maxlen: 24
45.204.199.0/24 maxlen: 24
45.204.200.0/24 maxlen: 24
45.204.201.0/24 maxlen: 24
45.204.202.0/24 maxlen: 24
45.204.203.0/24 maxlen: 24
45.204.204.0/24 maxlen: 24
45.204.205.0/24 maxlen: 24
45.204.206.0/24 maxlen: 24
45.204.207.0/24 maxlen: 24
45.204.208.0/24 maxlen: 24
45.204.209.0/24 maxlen: 24
45.204.210.0/24 maxlen: 24
45.204.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110931 (0x1b153)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 2 15:13:45 2026 GMT
Not After : May 2 15:13:45 2029 GMT
Subject: CN=69f614ae-6845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2c:9c:13:50:f1:27:4e:ff:52:c9:a5:1a:4e:
c8:92:1e:d4:fc:94:7d:27:7e:8c:bb:05:ad:e6:62:
b3:3d:50:5e:59:ed:ab:dd:b2:fa:03:3d:a6:88:00:
a5:59:af:83:22:0d:b1:79:6f:80:5b:17:98:32:fb:
f4:53:31:a1:9e:9d:7c:f3:47:5e:e6:67:ff:29:97:
6f:53:04:b0:70:f7:f6:2e:60:25:f0:8a:56:c9:24:
de:73:c7:0e:81:04:6b:74:66:f9:00:6b:9f:76:40:
58:f8:b9:54:d6:b4:3f:4d:f2:3f:55:e8:24:11:a2:
7b:92:7e:2e:8b:4e:b9:c3:9a:d1:0a:4a:fd:63:12:
c1:21:2c:5c:0b:15:fd:d9:7a:3e:f2:11:d0:e1:ee:
e3:3c:f2:1e:9a:78:9b:e8:16:a9:5c:d8:9e:b7:8e:
c0:43:44:ed:e9:13:59:91:88:fa:f3:72:ab:06:f0:
dd:22:3b:90:ec:bd:c3:dc:80:cc:d6:d8:ee:b1:0b:
e8:1c:8c:2a:ef:39:6b:1b:eb:95:ed:69:e5:3a:0d:
70:7b:4e:a0:e9:34:52:c7:4c:eb:a6:43:06:77:10:
cf:f2:a8:80:f8:64:bf:48:2d:00:8a:97:8e:e5:cb:
72:13:b6:31:3f:aa:45:d0:d8:37:8c:43:9d:9c:ed:
9e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:67:D2:DF:C9:32:83:F1:06:1F:E6:8F:46:94:DE:E1:2D:50:13:96
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/862378E8463911F1BD8EBEE1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.192.0-45.204.211.255
Signature Algorithm: sha256WithRSAEncryption
83:81:24:7f:c2:a3:ff:87:09:9b:6a:ed:83:c6:80:b0:68:d4:
d7:90:f8:7b:27:f1:df:d8:60:cf:2a:11:4c:df:26:cf:d0:04:
2e:f0:4b:7f:f9:31:2c:81:ef:0d:fd:44:8e:d9:a9:51:5f:2f:
6e:b8:ff:27:91:d1:6d:99:da:4f:71:20:09:72:de:7b:06:61:
90:5e:7a:5b:31:55:4b:ed:b9:ad:38:38:84:02:81:04:ad:e5:
d8:b7:06:8e:8a:76:c1:fd:09:64:bc:ed:cb:5c:b7:59:72:91:
44:d3:f8:74:44:76:ae:4f:7b:3b:da:e0:eb:e1:8b:f2:07:3a:
1d:9a:6f:bd:df:89:b3:8d:2d:69:2e:10:e1:18:24:50:83:6e:
00:2f:f2:36:ad:a9:72:de:a6:10:2c:bf:39:bc:77:8f:0f:96:
78:0d:9e:f1:18:c9:c5:9c:7a:d6:0d:a4:70:9a:a7:58:45:ee:
0b:b5:cb:65:6d:49:da:90:f5:f8:32:12:9d:56:2a:45:a2:66:
5b:ab:72:2f:8a:b7:a3:59:33:2a:93:5b:c2:8d:6a:98:41:a0:
64:36:1f:04:70:e5:b0:ec:49:70:a0:a7:85:17:77:0b:a4:28:
ce:ad:44:de:47:20:44:03:98:2a:e8:f7:32:78:5a:1d:5a:72:
3e:51:60:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:17:02 2026 by rpki-client