Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/94C8F718850611F18BBE6C15CF1D38B0.roa
File: 94C8F718850611F18BBE6C15CF1D38B0.roa (raw, json)
Hash identifier: +eVG1tjlIkinoIls2aBEwKm8V5KBnMmpapMGCP0EBfk=
Subject key identifier: C8:C2:2E:37:17:DF:CD:D2:B6:DA:69:01:E2:F6:71:A5:FA:8E:46:19
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C722
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/94C8F718850611F18BBE6C15CF1D38B0.roa
Signing time: Tue 21 Jul 2026 13:17:54 +0000
ROA not before: Tue 21 Jul 2026 13:17:50 +0000
ROA not after: Mon 07 Sep 2026 13:17:50 +0000
asID: 32043
IP address blocks: 45.201.10.0/24 maxlen: 24
45.201.11.0/24 maxlen: 24
45.201.100.0/24 maxlen: 24
45.201.101.0/24 maxlen: 24
45.201.110.0/24 maxlen: 24
45.201.111.0/24 maxlen: 24
45.201.112.0/24 maxlen: 24
45.201.113.0/24 maxlen: 24
45.201.120.0/24 maxlen: 24
45.201.121.0/24 maxlen: 24
45.201.122.0/24 maxlen: 24
45.201.123.0/24 maxlen: 24
45.201.124.0/24 maxlen: 24
45.203.35.0/24 maxlen: 24
45.203.36.0/24 maxlen: 24
45.203.37.0/24 maxlen: 24
45.203.38.0/24 maxlen: 24
45.203.39.0/24 maxlen: 24
45.204.54.0/24 maxlen: 24
45.204.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116514 (0x1c722)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 21 13:17:50 2026 GMT
Not After : Sep 7 13:17:50 2026 GMT
Subject: CN=6a5f7182-6488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:68:0b:5f:28:a3:98:94:ac:1c:3b:0c:00:2f:
8d:b8:db:f7:7f:dd:10:c7:60:f1:45:d5:4a:fe:48:
44:55:4d:cc:00:d0:4d:7b:ca:ac:4b:42:16:ff:d5:
69:ae:94:10:4d:ed:15:cb:14:cb:29:0f:20:01:c8:
27:b6:88:2e:b1:10:51:54:ca:83:c3:c4:05:c1:95:
39:ab:e3:e1:3f:42:f0:02:9e:7e:4f:8a:d0:aa:38:
3c:12:fa:9b:33:9e:78:0c:fb:d2:cd:60:4a:0e:a5:
ef:28:f9:ba:95:92:49:0c:65:ea:57:31:88:74:43:
ad:f3:9a:02:98:65:48:86:e1:00:de:60:53:e7:f0:
a9:f6:17:7f:6d:51:f3:a2:f3:ae:3a:3f:f8:09:97:
d2:dc:47:a0:29:f1:27:77:1a:b0:50:82:cf:4f:67:
c6:c4:16:e5:81:75:2b:70:a5:e5:6f:37:ff:b7:64:
db:28:53:d9:dd:39:63:47:c6:eb:36:2d:56:cf:9a:
98:32:33:6c:7f:00:ad:8d:e4:0a:0f:e6:a4:3f:c3:
62:95:af:87:9b:b2:72:79:e6:bd:3b:37:a7:8a:a9:
be:eb:f7:00:a4:a3:04:7c:cd:0a:d5:28:81:2b:3b:
e9:a3:32:03:68:63:a3:e1:29:c5:4e:90:c6:8f:f5:
12:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:C2:2E:37:17:DF:CD:D2:B6:DA:69:01:E2:F6:71:A5:FA:8E:46:19
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/94C8F718850611F18BBE6C15CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.10.0/23
45.201.100.0/23
45.201.110.0-45.201.113.255
45.201.120.0-45.201.124.255
45.203.35.0-45.203.39.255
45.204.54.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:07:1a:ac:93:27:16:27:01:0c:5c:1a:a1:05:28:c2:0d:f5:
f3:28:57:48:e9:6f:c6:c1:b0:e7:38:83:ef:07:81:14:ce:52:
06:4c:55:98:87:c2:fd:76:fe:09:9c:14:a9:fa:21:cf:1e:ef:
0a:2d:a0:ac:30:5d:07:ea:18:f6:89:39:97:bc:74:a0:3c:95:
90:08:42:39:94:e0:e4:17:2e:4e:66:f5:f0:d0:ee:c9:8c:4b:
9a:38:1b:89:bb:65:9f:08:9b:13:1c:48:8b:7c:5e:73:53:ea:
42:dd:52:8d:11:97:7e:b0:00:13:06:8b:51:94:db:53:95:32:
cf:e9:31:a1:06:a2:d9:8e:f0:7f:18:61:9e:26:71:8a:8b:f2:
d8:f3:c8:68:a8:0e:80:cb:d4:fa:d7:26:fa:4c:92:82:9d:63:
18:1b:1e:89:8c:d5:36:9f:96:03:7c:f5:37:a0:4f:85:ea:b9:
0a:a3:29:ab:df:62:1a:ed:ab:80:a1:0b:65:0f:e0:7a:4d:d6:
20:05:02:fc:ff:95:3a:b4:91:72:28:52:8c:cf:f2:33:79:af:
46:84:80:d7:76:83:86:3f:a8:21:46:62:68:3f:8b:e3:82:24:
98:9d:be:6a:96:1e:67:60:ae:46:01:6c:45:4e:6c:5a:20:c2:
bc:c1:cc:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:43:27 2026 by rpki-client