Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B667EDAC43A211F1897908A6CE1D38B0.roa
File: B667EDAC43A211F1897908A6CE1D38B0.roa (raw, json)
Hash identifier: tBDrQe53h/Nh1MR21Que8Y8Dc8sqd/b+AG/f9RcniWM=
Subject key identifier: BC:FE:75:15:F2:E9:D6:9E:B7:A9:FF:5B:49:16:61:22:A4:F1:79:43
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AFC5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B667EDAC43A211F1897908A6CE1D38B0.roa
Signing time: Wed 29 Apr 2026 08:09:15 +0000
ROA not before: Wed 29 Apr 2026 08:09:10 +0000
ROA not after: Wed 27 May 2026 08:09:10 +0000
asID: 138456
IP address blocks: 45.202.194.0/23 maxlen: 24
45.202.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110533 (0x1afc5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 29 08:09:10 2026 GMT
Not After : May 27 08:09:10 2026 GMT
Subject: CN=69f1bcab-52d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a0:b6:1d:c2:8d:b2:3d:bc:39:99:40:82:87:
50:ae:1a:14:e4:35:6c:9e:89:2b:c7:98:df:04:70:
63:96:fc:50:e3:bb:d8:02:bb:72:b1:8c:fd:9a:ad:
20:ef:b5:75:b7:43:31:1a:5c:8e:07:c0:32:69:82:
85:95:1f:19:59:5a:a1:5d:95:14:ee:50:eb:3e:dd:
61:76:27:1d:9d:df:3e:13:12:f8:23:e0:df:d7:c8:
25:c4:9d:9a:5d:cc:3f:97:50:ce:34:b8:3c:75:39:
1f:9d:20:c8:f5:44:7b:dd:4a:ac:30:3d:98:a3:71:
f1:37:81:0e:c8:70:1a:2b:9c:c7:3f:f0:de:79:2d:
25:57:c4:48:47:9b:5a:c1:e5:ec:22:c5:91:16:2f:
4f:36:7d:49:28:e8:c4:4d:c2:80:7c:81:b3:35:bc:
97:44:ac:75:64:26:82:b4:00:f1:5f:5d:99:a2:b2:
f1:33:32:43:d5:6c:fc:ff:d0:e2:0e:51:71:86:f3:
a2:33:a7:83:a8:f2:bb:37:b3:51:47:62:84:6c:4c:
e8:5c:ce:9b:f2:4a:9e:f0:ca:04:10:7a:bf:26:3c:
26:d7:38:1e:6a:a9:a8:0f:ae:91:2c:e6:f1:fe:00:
90:af:18:db:a6:7a:69:82:1a:9c:41:7e:20:d0:d7:
57:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:FE:75:15:F2:E9:D6:9E:B7:A9:FF:5B:49:16:61:22:A4:F1:79:43
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B667EDAC43A211F1897908A6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.194.0-45.202.196.255
Signature Algorithm: sha256WithRSAEncryption
8f:4d:49:a3:74:b5:63:d6:66:da:f8:ea:39:dd:21:84:f8:2a:
27:12:24:61:93:b4:cc:e3:9c:9e:00:40:e2:bf:1b:d2:70:c6:
35:c0:42:14:46:fb:d2:e5:27:88:3d:b1:cc:67:ce:52:bc:9f:
81:ed:1c:8b:56:3e:0e:b9:6e:ea:07:9c:ea:12:21:50:bb:e0:
b5:aa:b6:5a:9b:3a:20:29:6f:04:51:27:84:f4:35:d1:53:0f:
7d:62:95:02:a5:f4:77:a8:15:22:b1:6f:e7:57:16:47:86:dc:
67:83:6f:08:5c:14:02:8d:5d:16:fd:24:ce:7b:37:14:8c:db:
e4:90:b1:af:66:3c:ab:05:b2:86:2e:c0:ab:d0:9f:e0:50:fc:
00:8d:21:39:4a:be:93:bb:f4:0e:b2:42:a8:c6:75:83:ec:46:
33:a0:c1:4f:f9:ee:5a:22:50:03:fa:8a:09:94:0d:89:04:16:
d6:d5:62:02:e5:32:9f:83:2f:4d:eb:7b:a7:77:7d:b4:3c:1a:
ce:23:6f:0f:8f:3e:b1:c9:d7:93:68:66:59:ae:04:e8:48:24:
55:02:42:cf:5e:48:b3:93:4d:2a:06:2b:56:04:bd:2c:4b:b9:
10:34:1d:94:cd:ef:41:3b:2f:35:9a:61:6d:88:fc:cf:4a:fd:
10:2d:78:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:43:06 2026 by rpki-client