Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/02002F2A568811F1AEA61FA3CE1D38B0.roa
File: 02002F2A568811F1AEA61FA3CE1D38B0.roa (raw, json)
Hash identifier: F9K2WP4mHxvyNe2hdOt3cdiXIvtb28VtSftjOwaIpVI=
Subject key identifier: F0:5F:B0:69:8A:DE:85:92:3B:FC:E0:6F:4B:78:15:BA:43:DA:C5:80
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B868
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/02002F2A568811F1AEA61FA3CE1D38B0.roa
Signing time: Sat 23 May 2026 09:15:59 +0000
ROA not before: Sat 23 May 2026 09:15:53 +0000
ROA not after: Wed 01 Jul 2026 09:15:53 +0000
asID: 395793
IP address blocks: 45.192.112.0/24 maxlen: 24
45.192.115.0/24 maxlen: 24
45.194.0.0/24 maxlen: 24
45.194.12.0/23 maxlen: 24
45.194.24.0/24 maxlen: 24
45.195.133.0/24 maxlen: 24
45.195.255.0/24 maxlen: 24
45.196.64.0/22 maxlen: 24
45.197.6.0/23 maxlen: 24
45.198.183.0/24 maxlen: 24
45.198.184.0/24 maxlen: 24
45.201.32.0/24 maxlen: 24
45.201.40.0/24 maxlen: 24
45.204.147.0/24 maxlen: 24
45.204.148.0/24 maxlen: 24
45.204.149.0/24 maxlen: 24
45.204.150.0/24 maxlen: 24
45.204.151.0/24 maxlen: 24
45.206.65.0/24 maxlen: 24
45.206.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112744 (0x1b868)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 23 09:15:53 2026 GMT
Not After : Jul 1 09:15:53 2026 GMT
Subject: CN=6a11704f-5e28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3f:7d:7f:3b:8a:56:97:cd:1e:96:1b:15:c9:
05:7a:fa:d4:00:27:1b:dd:4d:fc:22:23:38:5c:2a:
10:d3:d7:dd:ff:8b:a9:5e:0b:c0:7d:cb:ce:0b:fe:
2e:65:17:61:01:f7:78:8d:72:b7:77:53:ca:92:59:
f8:84:8a:0e:8a:76:fe:2d:ed:dd:69:e0:cc:d7:24:
c8:1d:af:b5:bc:f1:c0:80:07:aa:dc:6a:5a:6d:fa:
47:ff:82:23:08:0c:48:59:bf:b9:e5:29:84:09:58:
9b:11:02:9a:25:04:4c:e3:b5:7b:f5:b9:f9:d5:76:
c6:7b:b1:75:c8:b9:0e:b8:4f:46:84:98:31:7f:14:
5e:c8:4c:bc:b3:eb:08:cd:44:83:fa:50:56:eb:3e:
82:ae:54:1c:df:46:2a:a7:f5:c5:90:6a:e5:67:1b:
91:5d:bf:49:f5:8d:44:76:c4:19:e0:66:6e:a0:63:
d8:38:5a:fc:f4:d6:73:82:e8:77:10:5f:a0:92:5b:
d7:2b:ad:0c:51:d7:62:8b:72:df:ae:d5:ab:48:02:
b0:f4:c4:67:86:a6:2e:2f:2f:b0:5e:1d:5e:3e:26:
c7:45:b2:47:0f:59:b8:e4:b5:63:28:11:75:b4:4e:
e7:0d:7d:bb:dd:fc:52:1b:db:5e:24:c8:a6:32:d8:
b1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:5F:B0:69:8A:DE:85:92:3B:FC:E0:6F:4B:78:15:BA:43:DA:C5:80
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/02002F2A568811F1AEA61FA3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.112.0/24
45.192.115.0/24
45.194.0.0/24
45.194.12.0/23
45.194.24.0/24
45.195.133.0/24
45.195.255.0/24
45.196.64.0/22
45.197.6.0/23
45.198.183.0-45.198.184.255
45.201.32.0/24
45.201.40.0/24
45.204.147.0-45.204.151.255
45.206.65.0-45.206.66.255
Signature Algorithm: sha256WithRSAEncryption
86:9d:d8:eb:4a:3d:57:ad:23:ac:5c:b8:2e:98:a8:9d:a2:73:
ad:8f:81:6c:9d:82:f6:e1:92:f4:de:56:0c:d2:2c:31:06:bc:
bb:46:cc:d1:61:ab:9f:fc:00:07:1f:44:c9:3a:fb:c3:f1:94:
1d:84:8a:a8:da:de:81:fb:2f:ad:f7:b4:d1:93:e0:a6:63:06:
3e:4e:a2:0d:33:75:65:4f:e9:d3:6b:de:ad:46:15:78:8b:f1:
c9:25:e7:06:cc:67:6d:98:ac:4e:23:dd:96:8b:e9:85:cb:b3:
0a:75:26:90:1e:98:31:14:0b:53:92:03:8a:e1:b4:ad:71:83:
d4:cb:99:1c:a5:4a:ba:3e:53:25:dd:11:d8:e2:89:54:16:1f:
a6:7b:a0:00:a6:7b:df:9f:4b:1b:40:ab:0b:a4:33:29:8c:c3:
58:39:d6:6e:89:c2:0b:c5:9b:7e:60:84:c8:33:f5:6b:50:0e:
c7:0f:11:49:02:2b:61:6f:99:d9:f2:f8:3e:fc:10:1c:a2:6b:
a1:29:5f:4d:84:c0:2a:81:d2:28:1d:00:71:43:f0:9f:d2:33:
ab:54:c7:82:c7:c1:3b:29:5b:ee:0a:fd:56:4f:f7:54:2c:5a:
f6:28:30:f8:b4:bd:9b:7c:ba:e0:45:b5:01:8b:78:28:1e:2f:
61:01:54:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:35:51 2026 by rpki-client