Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CEF86F5A3EE211F1BD80A8B0CE1D38B0.roa
File: CEF86F5A3EE211F1BD80A8B0CE1D38B0.roa (raw, json)
Hash identifier: EXIPVSV0v0E+lz9+VdmF+3Yzr6OPWO+ZTqQhVfqmdWU=
Subject key identifier: 98:3C:92:56:EE:68:48:22:2D:4B:FB:B4:C0:67:D8:A3:C6:C8:A3:DD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AE97
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CEF86F5A3EE211F1BD80A8B0CE1D38B0.roa
Signing time: Thu 23 Apr 2026 07:05:28 +0000
ROA not before: Thu 23 Apr 2026 07:05:24 +0000
ROA not after: Wed 27 May 2026 07:05:24 +0000
asID: 6079
IP address blocks: 45.197.208.0/20 maxlen: 24
45.197.240.0/20 maxlen: 24
45.198.185.0/24 maxlen: 24
45.198.186.0/23 maxlen: 24
45.198.192.0/24 maxlen: 24
45.203.139.0/24 maxlen: 24
45.203.196.0/23 maxlen: 24
45.205.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110231 (0x1ae97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 23 07:05:24 2026 GMT
Not After : May 27 07:05:24 2026 GMT
Subject: CN=69e9c4b8-6630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fc:f2:ec:4b:b5:00:c7:12:23:cb:e8:e6:9e:
cd:6a:a1:1c:6b:5b:2b:7d:1b:2a:23:b2:7d:99:25:
6e:08:62:b7:af:53:1a:d9:85:8c:72:fc:dd:16:19:
54:bd:e5:db:2d:73:ac:53:d6:c7:0c:42:af:e4:61:
ee:77:6d:7b:a4:6b:73:8c:09:8a:ce:38:43:ed:03:
db:82:83:65:b6:2e:e2:1d:9c:4c:5a:47:62:5b:8d:
d7:73:b9:d1:c2:70:9e:c0:9d:b8:c4:f5:98:c5:2a:
bf:02:4c:a9:0b:f1:3f:c7:9f:c8:69:11:22:18:7c:
d2:08:bb:c8:c2:2b:a4:60:77:6d:d7:90:52:af:04:
5f:23:11:cc:25:76:5b:39:0c:6e:9e:8f:97:ca:65:
d2:a5:1f:a8:35:4c:17:e3:5e:cd:84:19:1e:0f:01:
4c:32:d0:fa:5a:59:d6:0e:96:d9:31:7c:12:f8:f9:
87:7a:56:0e:d1:f0:77:d5:f6:60:a7:a6:43:ef:d2:
2b:8c:17:fd:23:25:7e:06:b4:93:bd:fc:6a:ab:65:
98:30:d2:e3:95:45:ce:4a:9a:c6:05:94:a1:c1:72:
56:43:fd:54:23:8d:17:e2:f9:2e:c6:be:86:1f:53:
c5:69:58:37:9f:b6:bd:b4:44:df:59:fc:e9:76:e1:
dc:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:3C:92:56:EE:68:48:22:2D:4B:FB:B4:C0:67:D8:A3:C6:C8:A3:DD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CEF86F5A3EE211F1BD80A8B0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.208.0/20
45.197.240.0/20
45.198.185.0-45.198.187.255
45.198.192.0/24
45.203.139.0/24
45.203.196.0/23
45.205.151.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:06:5d:94:57:0e:7b:b5:a3:3a:3b:dd:5d:c5:4e:0a:f0:67:
38:cf:54:27:6c:2b:0f:4e:f8:29:a6:19:83:ac:0e:29:ad:de:
5d:84:fd:1f:2f:4f:8f:74:05:b8:2e:cb:7c:5e:5d:b0:b8:e1:
a0:d4:15:95:3f:25:48:45:a4:6f:0a:52:b7:ec:c1:fc:1c:b2:
6e:fa:97:19:85:de:4f:41:9d:66:f8:35:6a:ce:3f:3e:3b:cd:
61:c4:6c:6a:e3:94:6a:64:a3:ae:fc:87:cb:08:87:a0:70:27:
ca:53:93:f6:98:98:2d:ae:47:2e:8f:8d:58:b9:8c:13:66:4c:
57:51:f2:a4:7f:86:6d:76:ac:39:16:77:d7:a4:2f:7d:26:9e:
49:dd:81:e0:4d:e1:99:e9:58:10:87:5d:f5:1f:cf:9e:db:c4:
b0:86:c7:7b:d7:c3:c5:03:e9:d5:76:06:ca:fe:a4:37:18:24:
71:ba:a4:3a:e7:60:1e:7d:5a:88:8c:34:62:c3:39:ed:db:21:
d7:9b:cc:da:f3:b6:7f:45:5b:e4:8b:c3:fa:b8:ed:5a:ed:78:
c8:90:96:04:27:6c:90:6d:0b:07:9a:3b:e7:1c:32:71:72:97:
7b:0d:cd:d8:32:ed:59:39:7b:62:86:63:0f:68:08:0a:ec:2b:
9f:10:e3:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:36:08 2026 by rpki-client