Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F0E0D2504DD411F180E196AACE1D38B0.roa
File: F0E0D2504DD411F180E196AACE1D38B0.roa (raw, json)
Hash identifier: t15HDOQtG6jHWw5K7sT31PpEMUtZ6xiaeQ16AINNBL4=
Subject key identifier: 33:7D:89:18:AB:9B:44:D7:55:73:41:68:17:17:8E:98:80:00:87:04
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B3D1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F0E0D2504DD411F180E196AACE1D38B0.roa
Signing time: Tue 12 May 2026 07:34:00 +0000
ROA not before: Tue 12 May 2026 07:33:55 +0000
ROA not after: Wed 17 Jun 2026 07:33:55 +0000
asID: 54801
IP address blocks: 45.195.62.0/24 maxlen: 24
45.195.199.0/24 maxlen: 24
45.197.20.0/24 maxlen: 24
45.199.130.0/24 maxlen: 24
45.199.131.0/24 maxlen: 24
45.199.134.0/24 maxlen: 24
45.204.1.0/24 maxlen: 24
45.204.64.0/24 maxlen: 24
45.204.71.0/24 maxlen: 24
45.207.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111569 (0x1b3d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 12 07:33:55 2026 GMT
Not After : Jun 17 07:33:55 2026 GMT
Subject: CN=6a02d7e8-0678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2c:dc:26:83:5e:95:52:84:eb:33:5c:ae:27:
7d:4c:47:37:87:67:67:95:9b:47:26:f7:12:fc:71:
c6:48:a9:bd:7d:92:27:b9:d8:df:71:31:d4:aa:2b:
2c:f8:b2:b6:33:6f:a8:4c:7b:02:59:b9:aa:d9:69:
ea:23:58:f7:4a:29:65:de:61:87:7a:84:ec:72:e3:
67:e8:83:bc:4f:82:cd:e7:ea:d1:84:c7:11:94:df:
70:33:7d:f1:b2:07:6a:00:58:f6:29:8c:4a:3c:17:
66:52:f4:6d:f4:31:ed:eb:d2:00:57:20:c2:36:33:
22:11:a8:9e:13:f0:3a:89:b3:f7:f8:f9:0a:c9:98:
c0:7e:91:8b:16:5d:97:53:ed:f2:2f:9c:ce:35:62:
79:ba:61:49:26:0f:bb:9a:df:ff:26:29:61:43:f0:
9a:9e:5b:78:32:76:4d:22:3a:21:5e:3b:fc:f5:3c:
4d:fb:b6:15:06:14:0b:53:6f:b0:9c:2b:68:b6:fa:
10:e7:2a:75:7e:0a:0a:82:ae:fe:49:2f:05:9a:c5:
64:8a:2e:c1:2a:18:4e:ef:ee:7d:3c:fc:fc:61:31:
60:d4:96:f4:16:ba:f5:9e:95:97:76:e9:9d:8d:8b:
88:d2:ae:b3:9e:e8:14:6e:1f:3d:45:62:1a:04:3c:
fe:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:7D:89:18:AB:9B:44:D7:55:73:41:68:17:17:8E:98:80:00:87:04
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F0E0D2504DD411F180E196AACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.62.0/24
45.195.199.0/24
45.197.20.0/24
45.199.130.0/23
45.199.134.0/24
45.204.1.0/24
45.204.64.0/24
45.204.71.0/24
45.207.163.0/24
Signature Algorithm: sha256WithRSAEncryption
15:c0:1d:c7:c6:e6:d3:15:52:15:d1:d9:82:9e:d3:af:1b:71:
bf:62:c0:7f:13:32:e4:83:85:56:14:d7:62:53:ee:50:c9:f7:
fa:7a:88:58:00:17:32:1b:26:a4:ea:d9:4e:54:ea:73:41:65:
f5:94:78:ec:ca:52:79:d9:78:2e:72:09:5a:f2:8b:af:4b:02:
37:ea:0d:77:78:b4:ee:be:95:f4:3f:5b:0b:5c:7d:41:34:55:
a3:3e:42:ed:8c:e5:8a:9f:ae:90:92:85:54:93:d8:6e:91:af:
5d:06:ca:4c:61:d4:eb:a7:9d:5a:3e:b8:25:8c:98:a6:3a:04:
42:ac:26:e8:81:9e:be:3d:33:9d:f0:05:06:f2:55:ae:8a:1b:
66:0d:8d:1e:ba:9a:4b:d3:e7:80:72:26:4d:bf:08:e9:a8:63:
12:9c:4e:7d:6b:0d:51:a8:82:65:44:13:25:21:c5:e2:0f:6b:
97:d0:bb:ed:f4:5f:ca:8b:1a:cc:a7:34:da:69:2a:aa:3f:28:
f0:80:cc:62:43:95:f3:63:6d:68:1b:56:d2:b9:18:dd:34:e6:
fa:e2:35:5e:4e:8b:d2:8c:65:de:d8:2b:41:b9:40:8c:24:d9:
21:5b:75:94:90:0b:f7:27:65:f7:c2:99:35:b7:f2:7b:20:e2:
4d:fb:a7:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:07:49 2026 by rpki-client