Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EF12656A4ABE11F1AB743CE8CE1D38B0.roa
File: EF12656A4ABE11F1AB743CE8CE1D38B0.roa (raw, json)
Hash identifier: 5ZBhTac0PwRgJ6BvY7VhyPcskIqIbUOwn930ihxFgPQ=
Subject key identifier: EE:18:55:53:6F:03:22:53:FC:E8:44:04:09:2B:50:D3:43:3A:DF:D2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B2BF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EF12656A4ABE11F1AB743CE8CE1D38B0.roa
Signing time: Fri 08 May 2026 09:18:54 +0000
ROA not before: Fri 08 May 2026 09:18:49 +0000
ROA not after: Mon 18 May 2026 09:18:49 +0000
asID: 150706
IP address blocks: 45.192.176.0/24 maxlen: 24
45.192.177.0/24 maxlen: 24
45.192.184.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111295 (0x1b2bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 8 09:18:49 2026 GMT
Not After : May 18 09:18:49 2026 GMT
Subject: CN=69fdaa7e-2390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:5f:77:ae:1d:85:c7:69:f1:13:dd:86:8b:d8:
73:e2:95:39:e5:50:be:e5:b8:1c:9f:81:c8:e4:69:
4f:69:bc:10:2b:c0:42:53:82:16:fe:99:f2:ad:d6:
2e:6d:52:dc:86:3e:b5:f2:53:a6:81:0c:9b:17:9d:
77:dc:e5:e4:ff:32:95:12:47:1b:f4:7d:bf:3c:b0:
2b:05:46:a2:7d:bd:2c:46:6a:cb:e7:e7:ef:bd:da:
78:a7:33:10:09:22:11:7f:37:1e:c5:6b:69:04:d0:
07:01:e4:f0:60:4c:ac:56:82:ef:ad:23:62:84:7a:
54:a2:f7:ac:f0:fd:12:1c:ec:bc:d9:fe:47:4d:cf:
97:df:f5:83:2a:cb:0e:b4:33:e2:ce:36:a6:65:7d:
89:2c:22:b2:85:aa:bb:6d:60:cd:65:0c:f3:f0:01:
7f:9d:97:03:ac:95:35:28:62:f3:f7:e1:52:5c:ff:
4a:5a:09:9e:95:ea:3d:cc:43:1f:a0:03:4c:c3:36:
9e:5f:fe:36:90:7b:c6:6f:ae:10:cd:ff:70:2f:37:
12:c9:87:66:63:88:46:2b:93:ba:ed:74:63:b3:0c:
ec:43:bd:0f:f8:fd:84:05:79:58:64:48:5f:c5:9c:
39:59:f4:a2:8c:fc:e0:59:f1:b9:b4:02:a0:9f:ff:
a7:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:18:55:53:6F:03:22:53:FC:E8:44:04:09:2B:50:D3:43:3A:DF:D2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EF12656A4ABE11F1AB743CE8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.176.0/23
45.192.184.0/22
Signature Algorithm: sha256WithRSAEncryption
8f:45:ae:34:21:59:85:35:0b:9b:f7:cf:8d:0d:0b:f0:67:f3:
53:fd:6e:7b:fb:62:ef:31:48:1f:68:80:82:be:1f:4c:bb:13:
85:0f:91:ff:7d:54:28:6f:6c:d0:5a:5d:49:dd:de:71:33:99:
bf:0f:7a:91:0e:bd:f7:04:15:9d:14:fa:cc:20:67:f0:20:04:
6c:89:12:8a:0a:68:ec:7d:39:e6:cd:65:44:1a:8f:09:9e:28:
8b:0b:19:a0:7f:d1:8e:12:80:d7:20:4b:45:af:b6:84:35:5b:
2e:89:69:1e:be:6b:92:a6:7e:42:23:9d:87:c1:93:cb:47:d3:
ec:e2:6a:97:36:4e:a1:5b:5d:73:9d:a8:e3:9e:73:36:1c:c2:
fd:b9:5f:88:0e:d5:a4:51:33:36:f6:6d:a3:07:91:2f:1b:90:
0c:28:78:37:e7:c7:cc:4f:3d:cd:00:f9:7b:1d:0e:5b:dc:e0:
34:da:6e:5e:b3:fa:57:9e:bb:7e:d2:5e:30:50:16:36:03:43:
7b:58:1a:db:16:9a:8b:f4:99:c9:57:4f:c1:18:15:55:03:7a:
13:82:67:4a:ae:c2:c7:59:5b:02:fe:83:fb:8f:92:08:39:b7:
be:91:ad:7e:99:dc:be:09:99:3b:e0:8f:6e:32:df:f9:ce:65:
df:1e:8f:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:25:07 2026 by rpki-client