Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FFADB45C84E711F183D10FDECE1D38B0.roa
File: FFADB45C84E711F183D10FDECE1D38B0.roa (raw, json)
Hash identifier: tqX+dK8/snvrD8tlXmltmJFsD7BzdZOgE3vQNMI+8aU=
Subject key identifier: 84:5C:88:62:53:09:07:BC:07:D4:1F:ED:7A:46:02:63:56:91:13:EF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C6C4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FFADB45C84E711F183D10FDECE1D38B0.roa
Signing time: Tue 21 Jul 2026 09:38:59 +0000
ROA not before: Tue 21 Jul 2026 09:38:55 +0000
ROA not after: Sat 29 Aug 2026 09:38:55 +0000
asID: 44559
IP address blocks: 45.192.52.0/24 maxlen: 24
45.192.53.0/24 maxlen: 24
45.195.161.0/24 maxlen: 24
45.195.177.0/24 maxlen: 24
45.195.179.0/24 maxlen: 24
45.195.181.0/24 maxlen: 24
45.195.186.0/24 maxlen: 24
45.199.207.0/24 maxlen: 24
45.199.208.0/24 maxlen: 24
45.199.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116420 (0x1c6c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 21 09:38:55 2026 GMT
Not After : Aug 29 09:38:55 2026 GMT
Subject: CN=6a5f3e33-a134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b7:2c:b3:2f:26:b5:42:97:0f:f4:a5:29:78:
2f:78:57:cb:49:61:09:8b:7a:7a:9e:97:f7:4e:28:
ff:49:32:15:2f:ac:a6:e6:d8:68:e7:2a:1e:8d:5e:
11:f7:46:f6:12:8f:b6:8b:85:fa:8f:a6:07:2c:26:
dc:49:44:41:7e:36:f3:3e:a6:52:e1:df:9b:67:27:
cd:db:3d:13:2e:1f:9f:27:bc:6e:f4:25:ec:2b:6e:
b1:1f:e9:0b:84:52:e3:53:45:79:46:4c:73:7f:5a:
75:a5:9d:dc:c0:41:d2:dc:6e:72:c0:69:47:36:2a:
6c:80:c4:7e:55:a6:46:22:f6:d5:8d:d5:da:6b:55:
dd:b2:14:83:bb:a3:f5:88:06:7a:f0:7b:7e:e7:0d:
d9:4b:ab:b1:d7:b2:5d:a6:00:d0:95:f7:f6:e5:a7:
5c:29:a8:7d:05:e3:45:12:eb:7b:bd:a6:ce:31:9f:
f9:93:67:3d:e4:3c:db:10:73:7c:6a:e3:bd:28:a5:
97:f5:58:20:02:f9:80:9f:c7:93:11:3e:92:1d:87:
06:7f:8b:42:ee:35:ea:78:08:8d:f1:1f:8d:09:06:
68:5c:73:53:d4:bd:d0:ee:8e:40:61:16:a4:fe:ce:
e9:75:1a:4d:21:de:0a:bd:1c:3b:90:c4:da:05:a7:
7c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:5C:88:62:53:09:07:BC:07:D4:1F:ED:7A:46:02:63:56:91:13:EF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FFADB45C84E711F183D10FDECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.52.0/23
45.195.161.0/24
45.195.177.0/24
45.195.179.0/24
45.195.181.0/24
45.195.186.0/24
45.199.207.0-45.199.209.255
Signature Algorithm: sha256WithRSAEncryption
8b:f9:30:23:5f:ca:42:7e:28:02:78:5e:ff:bb:62:9a:06:ed:
62:f5:3d:ed:a7:83:7c:1a:04:ed:9d:8d:64:74:a8:44:a5:aa:
0e:e2:0b:3f:6f:80:f3:ab:07:34:31:68:a1:35:d1:ac:48:e4:
dc:c3:93:a4:f5:9b:41:af:d5:7d:9c:bb:7f:a7:f6:25:9c:b6:
cf:10:e8:8a:2d:5a:ad:b8:da:8e:5e:df:92:c8:90:7b:88:17:
3e:98:66:17:42:d1:60:28:a5:70:8b:42:97:61:96:be:15:f6:
ca:ed:ea:54:44:7d:1d:9f:d0:e8:c5:79:38:71:26:6f:79:47:
33:36:19:47:e6:7f:6d:a4:3a:be:b5:4f:c9:90:90:8c:0b:9c:
53:ab:ff:f8:f4:df:c3:d9:0a:78:3f:fc:9c:30:31:e2:32:14:
6c:57:32:91:07:a2:5a:b2:da:c8:d2:d5:12:97:bc:bd:dd:36:
00:30:60:71:46:60:87:5e:3a:52:30:df:e4:51:bf:f6:9a:63:
b6:2f:e3:9b:45:08:c1:e4:97:04:e0:b5:a5:04:1d:73:18:7a:
24:5c:99:32:e1:cb:95:80:a4:67:9d:69:99:50:27:8b:b0:62:
a6:3e:eb:d7:65:2f:de:97:09:a1:6e:2e:c1:cb:be:a5:00:93:
66:a4:ed:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:01:48 2026 by rpki-client