Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D60C6AD04AC711F18EAF7419CF1D38B0.roa
File: D60C6AD04AC711F18EAF7419CF1D38B0.roa (raw, json)
Hash identifier: l/DvXjzOWbPwrr40MQxsbpzlxBsvp5Kep9VNgfS68nU=
Subject key identifier: F4:A2:15:15:9C:82:C9:59:93:5A:79:EF:42:61:A1:9C:FB:71:84:E3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B2D1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D60C6AD04AC711F18EAF7419CF1D38B0.roa
Signing time: Fri 08 May 2026 10:22:38 +0000
ROA not before: Fri 08 May 2026 10:22:33 +0000
ROA not after: Tue 09 Jun 2026 10:22:33 +0000
asID: 63099
IP address blocks: 45.192.16.0/24 maxlen: 24
45.192.115.0/24 maxlen: 24
45.192.231.0/24 maxlen: 24
45.196.68.0/24 maxlen: 24
45.198.231.0/24 maxlen: 24
45.201.30.0/24 maxlen: 24
45.201.31.0/24 maxlen: 24
45.201.32.0/24 maxlen: 24
45.201.36.0/24 maxlen: 24
45.201.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111313 (0x1b2d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 8 10:22:33 2026 GMT
Not After : Jun 9 10:22:33 2026 GMT
Subject: CN=69fdb96e-4bf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:84:54:38:b9:3b:1d:b4:f5:27:b4:49:df:b3:
7c:1c:22:a9:94:2e:99:5a:1c:10:7f:84:66:d3:52:
8e:cb:e5:75:07:12:91:93:fd:33:90:15:23:63:bd:
76:80:6b:9c:de:51:a3:f5:f6:bc:9d:69:cd:40:30:
7c:e7:52:8b:4d:57:4c:1a:a3:3d:76:8a:53:77:fe:
53:0b:a6:f9:c6:c1:d2:cc:ce:e5:c3:af:6d:2e:c9:
a8:88:6f:e5:a5:b8:1f:12:e6:34:b8:06:35:fd:90:
7e:c5:51:28:d4:91:c4:df:f1:5a:ce:cc:01:ec:58:
40:a5:a7:8c:cf:77:08:e9:53:cc:e6:a3:5f:02:bd:
55:7a:68:71:c7:94:3c:f8:f0:36:49:ba:be:ed:8e:
12:e2:ae:71:13:af:04:ac:20:7c:49:e3:f9:6f:b5:
9b:d8:6d:9b:f9:c5:d7:ff:4d:9f:2a:dc:a8:c0:d9:
32:11:72:29:ce:55:f2:f8:67:ee:2c:c6:5d:0b:a3:
48:7f:cf:b6:88:19:90:68:1c:7c:64:c9:a7:02:f9:
dd:6e:e8:c0:13:ff:d4:84:c8:59:a9:1e:d3:fb:ad:
74:92:38:b2:28:97:24:dc:9b:c4:30:d7:83:15:28:
31:c4:e9:51:00:83:29:ab:52:9d:66:c9:bc:48:74:
a7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:A2:15:15:9C:82:C9:59:93:5A:79:EF:42:61:A1:9C:FB:71:84:E3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D60C6AD04AC711F18EAF7419CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.16.0/24
45.192.115.0/24
45.192.231.0/24
45.196.68.0/24
45.198.231.0/24
45.201.30.0-45.201.32.255
45.201.36.0/24
45.201.39.0/24
Signature Algorithm: sha256WithRSAEncryption
87:a7:f1:39:34:c8:9f:6f:59:35:2b:85:bf:aa:22:28:08:20:
05:8c:b9:63:07:06:f4:03:12:fc:96:74:a4:c4:79:eb:57:00:
47:a1:5e:81:7a:38:b7:86:22:d1:7b:c4:68:d4:4e:5a:a7:0b:
e4:e4:39:76:d9:e5:8d:04:3f:59:d3:35:38:02:11:6c:24:74:
39:cb:0d:66:4c:6d:12:a8:f8:9f:08:f4:e1:a0:93:1b:c7:84:
bc:84:22:3d:79:63:6b:71:66:5a:07:d0:4d:16:9f:6e:3f:27:
cb:60:61:52:a9:5c:37:31:d3:7b:0e:4e:1b:db:cf:e1:ef:5c:
71:3c:f1:40:9f:0e:bb:ce:62:68:bc:b2:d9:ad:3e:0a:4d:b4:
a8:2d:88:d5:23:04:d6:0c:0a:91:dd:1b:d5:1b:37:c5:0d:5d:
c7:b3:41:e4:e3:d2:d5:62:0b:54:51:1d:00:17:96:fb:33:50:
c5:76:94:a4:23:c1:b0:76:31:6f:5f:ec:de:50:f0:7b:27:78:
b6:05:40:ae:1e:d9:86:cd:54:a7:cf:dd:42:d2:f9:4a:4b:97:
05:71:d2:97:46:66:0c:4f:3e:aa:58:2e:05:ab:1f:f8:60:84:
21:d4:90:9f:fa:91:c4:03:6a:71:0e:9c:65:b2:14:1a:af:86:
36:b8:29:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:11:08 2026 by rpki-client