Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8BD06A804B8911F18441FEB7CE1D38B0.roa
File: 8BD06A804B8911F18441FEB7CE1D38B0.roa (raw, json)
Hash identifier: 2tEVWmqCQRh000bqn9SIy1jknheknxXXJAb9anxE9TQ=
Subject key identifier: 5C:C7:91:79:66:59:22:7B:9E:FC:A4:83:2C:D9:9B:01:81:F7:7D:EB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B312
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8BD06A804B8911F18441FEB7CE1D38B0.roa
Signing time: Sat 09 May 2026 09:29:16 +0000
ROA not before: Sat 09 May 2026 09:29:10 +0000
ROA not after: Tue 16 Jun 2026 09:29:10 +0000
asID: 142032
IP address blocks: 45.192.96.0/20 maxlen: 24
45.192.96.0/21 maxlen: 24
45.192.96.0/22 maxlen: 24
45.192.100.0/22 maxlen: 24
45.192.104.0/21 maxlen: 24
45.192.104.0/22 maxlen: 24
45.192.108.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111378 (0x1b312)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 9 09:29:10 2026 GMT
Not After : Jun 16 09:29:10 2026 GMT
Subject: CN=69fefe6b-f1cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a9:1e:3d:01:35:51:05:b2:59:d3:45:e4:55:
5b:21:26:72:9f:cd:ed:2b:0f:12:0a:d5:70:fd:d1:
6a:a8:b1:86:89:fa:0c:9b:40:fe:fe:39:b2:60:75:
55:01:cf:72:90:5d:8c:31:87:5b:22:0a:70:e7:c3:
c0:89:34:4a:78:d5:1d:34:ff:ff:6e:5e:c7:54:51:
d3:6e:01:76:5d:99:a0:97:34:35:02:22:f9:9e:49:
0b:42:7f:4a:fa:73:c1:a2:e3:d6:47:75:67:1f:dd:
d7:c3:6d:48:e2:29:eb:b9:42:8b:41:39:e0:2c:2b:
72:f4:05:bf:89:e1:a4:ad:1a:2a:9b:13:91:00:e1:
28:36:63:1f:28:6c:19:86:1c:5b:70:fe:43:31:61:
7c:6d:8a:8a:15:b5:9b:86:e8:cd:b7:b2:30:e8:82:
4f:2c:61:e5:1c:69:98:fe:1f:5e:da:ce:43:ff:0b:
d5:b0:f5:0e:c7:30:2a:8a:b8:49:4d:9b:d2:cb:ba:
13:df:08:92:4a:37:5a:f6:7d:03:a6:9c:2b:06:ab:
86:18:00:39:9b:c6:d2:78:d7:b6:7a:e5:7b:1d:c7:
ba:20:d7:f3:53:2b:5e:9e:f4:5e:7c:04:b7:31:66:
04:8b:65:0b:7c:7b:17:ad:4e:43:88:ae:2f:1b:6b:
94:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:C7:91:79:66:59:22:7B:9E:FC:A4:83:2C:D9:9B:01:81:F7:7D:EB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8BD06A804B8911F18441FEB7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.96.0/20
Signature Algorithm: sha256WithRSAEncryption
35:2a:c2:11:be:42:a6:2e:a4:75:89:02:f5:55:62:13:51:9a:
6d:d9:c8:39:72:24:63:06:8e:de:a1:35:52:f9:e6:1d:3b:7e:
c2:03:fa:88:ae:fe:e7:fe:f1:bc:6b:65:23:ed:65:ea:81:ab:
b6:f9:92:af:98:fd:5d:d4:f7:97:d7:8c:21:ab:19:1e:6a:b6:
3f:0b:e0:b9:8c:49:20:77:48:b2:c0:b8:23:2e:7b:42:b7:d1:
e1:4e:8e:7d:d8:3e:a0:82:c4:4c:b6:97:e6:91:63:4c:55:6e:
bc:66:6e:d5:4e:78:70:89:b4:8b:50:65:50:e7:b7:e2:1d:ca:
cb:70:fb:96:8e:7a:e8:5a:00:1f:c7:11:14:bb:9b:a7:32:62:
3a:73:96:b6:b8:5b:af:91:6c:3e:57:46:12:3a:76:6c:66:d2:
95:f5:05:a5:7f:50:e0:63:26:f8:69:0d:86:29:5e:6f:1e:a8:
49:82:33:46:80:e2:4d:16:69:74:b0:4b:fd:16:a6:0e:0f:f6:
70:f0:c9:09:26:f8:31:4a:33:b7:04:10:d8:f6:82:d4:1f:a3:
2d:39:9f:06:e2:fc:51:f9:4c:d7:b2:f5:dd:1b:c6:fe:07:56:
7e:43:b9:85:5b:60:80:26:9d:20:dd:65:4b:dd:b1:79:80:c6:
b1:05:7e:62
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAbMSMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNTA5MDkyOTEwWhcNMjYwNjE2MDkyOTEwWjAYMRYw
FAYDVQQDEw02OWZlZmU2Yi1mMWNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAvakePQE1UQWyWdNF5FVbISZyn83tKw8SCtVw/dFqqLGGifoMm0D+/jmy
YHVVAc9ykF2MMYdbIgpw58PAiTRKeNUdNP//bl7HVFHTbgF2XZmglzQ1AiL5nkkL
Qn9K+nPBouPWR3VnH93Xw21I4inruUKLQTngLCty9AW/ieGkrRoqmxORAOEoNmMf
KGwZhhxbcP5DMWF8bYqKFbWbhujNt7Iw6IJPLGHlHGmY/h9e2s5D/wvVsPUOxzAq
irhJTZvSy7oT3wiSSjda9n0DppwrBquGGAA5m8bSeNe2euV7Hce6INfzUytenvRe
fAS3MWYEi2ULfHsXrU5DiK4vG2uUmQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFFzH
kXlmWSJ7nvykgyzZmwGB933rMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC84QkQwNkE4MDRCODkxMUYxODQ0MUZFQjdDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQELcBgMA0GCSqGSIb3DQEBCwUA
A4IBAQA1KsIRvkKmLqR1iQL1VWITUZpt2cg5ciRjBo7eoTVS+eYdO37CA/qIrv7n
/vG8a2Uj7WXqgau2+ZKvmP1d1PeX14whqxkearY/C+C5jEkgd0iywLgjLntCt9Hh
To592D6ggsRMtpfmkWNMVW68Zm7VTnhwibSLUGVQ57fiHcrLcPuWjnroWgAfxxEU
u5unMmI6c5a2uFuvkWw+V0YSOnZsZtKV9QWlf1DgYyb4aQ2GKV5vHqhJgjNGgOJN
Fml0sEv9FqYOD/Zw8MkJJvgxSjO3BBDY9oLUH6MtOZ8G4vxR+UzXsvXdG8b+B1Z+
Q7mFW2CAJp0g3WVL3bF5gMaxBX5i
-----END CERTIFICATE-----
Generated at Wed May 13 15:04:08 2026 by rpki-client