Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/14087AD259DB11F1AC64EFD4CE1D38B0.roa
File: 14087AD259DB11F1AC64EFD4CE1D38B0.roa (raw, json)
Hash identifier: Z3DVc1ksdpPTlHJNnRpEbsTJkx8I8/0yy240j3NjTek=
Subject key identifier: 28:B5:07:BE:5C:85:4D:43:E2:6A:08:B2:BD:B6:71:62:9C:20:A5:2E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BA47
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/14087AD259DB11F1AC64EFD4CE1D38B0.roa
Signing time: Wed 27 May 2026 14:48:10 +0000
ROA not before: Wed 27 May 2026 14:48:05 +0000
ROA not after: Thu 04 Jun 2026 14:48:05 +0000
asID: 38901
IP address blocks: 45.201.143.0/24 maxlen: 24
45.201.148.0/24 maxlen: 24
45.201.149.0/24 maxlen: 24
45.201.150.0/24 maxlen: 24
45.201.151.0/24 maxlen: 24
45.201.164.0/22 maxlen: 24
45.201.168.0/22 maxlen: 24
45.201.210.0/24 maxlen: 24
45.201.211.0/24 maxlen: 24
45.201.212.0/24 maxlen: 24
45.201.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 31 May 2026 06:35:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113223 (0x1ba47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 27 14:48:05 2026 GMT
Not After : Jun 4 14:48:05 2026 GMT
Subject: CN=6a17042a-6f76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b1:98:3d:6a:5e:a0:68:29:fa:53:6d:cc:0c:
a5:5d:d2:55:3f:b6:f6:a3:f1:33:98:95:0e:0b:55:
9c:e7:36:83:f3:dd:5b:4d:79:da:32:be:f4:62:17:
c9:75:30:9c:45:30:a0:fc:23:04:02:9f:ee:82:57:
6b:13:6b:86:75:6e:8f:81:4d:c0:c8:74:f1:e3:5f:
2d:fa:b2:b5:2b:5a:6c:c4:f0:5b:1a:07:a4:b2:bd:
6e:6a:c0:67:2f:fd:56:0a:7f:b1:d2:9f:df:e9:87:
1b:0e:34:09:99:c9:3d:40:c6:df:f8:5c:69:e8:ae:
b3:f8:da:11:ed:48:de:1a:71:ca:cc:9c:71:9c:c6:
f8:5f:9c:ad:21:c9:b6:26:c7:82:33:51:09:71:90:
8b:c4:1c:25:57:f6:77:fe:f4:b3:77:5e:af:f9:4e:
4e:df:4d:c3:c5:9d:f9:9c:c7:0f:a2:d5:ca:a1:b8:
a5:20:92:ce:8d:8f:19:55:3b:ea:8c:25:fd:d5:0a:
0e:50:27:bd:8b:26:18:8b:4d:e7:ec:52:36:72:3a:
c9:9c:df:0a:21:5c:44:ac:15:c7:0a:21:4b:d1:35:
ae:86:9b:8e:8e:99:c8:40:19:1e:e9:1c:2e:0b:38:
fa:76:cf:fc:f6:a5:85:81:af:6d:e0:b6:94:7d:b8:
80:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:B5:07:BE:5C:85:4D:43:E2:6A:08:B2:BD:B6:71:62:9C:20:A5:2E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/14087AD259DB11F1AC64EFD4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.143.0/24
45.201.148.0/22
45.201.164.0-45.201.171.255
45.201.210.0-45.201.213.255
Signature Algorithm: sha256WithRSAEncryption
0e:d0:1c:b1:31:c3:64:fd:97:ee:23:20:d6:f1:f9:45:dc:5a:
c8:97:69:b9:84:bd:83:37:27:e8:eb:69:4c:ab:67:86:bf:dd:
3d:3d:f8:7d:6b:12:7d:02:c9:99:dd:a4:18:2f:a7:0c:2e:92:
54:9d:a2:ba:c0:57:75:f5:f6:61:d6:b2:fb:05:40:f2:09:79:
ed:bf:32:2d:68:f9:04:bd:c4:51:73:ed:82:f8:22:18:2e:85:
22:45:94:4d:a0:9e:5b:7e:35:19:74:9a:60:9d:1b:90:a3:cb:
fa:ca:02:b8:57:10:01:fc:dd:08:7c:fc:27:e5:88:ef:09:84:
68:76:b6:d0:fb:6a:bd:8f:af:35:f2:73:c7:eb:27:e0:58:4d:
27:db:f2:dd:82:67:07:38:dc:c4:90:4f:f1:1e:7a:54:38:ea:
9a:72:ed:98:a6:af:5e:a6:c8:c7:ed:55:03:86:c9:5c:27:9d:
bf:f9:a1:c3:1b:f3:dc:dc:2c:38:8d:ea:a5:51:8c:a4:87:20:
61:33:cf:e8:5e:b6:f2:14:32:20:d4:13:3e:1f:b3:9c:16:87:
6a:04:66:68:03:69:67:8c:c8:9c:95:88:b2:dd:4a:c8:ca:90:
00:2e:05:02:f0:8b:7f:28:dd:75:4b:ce:e2:ea:f5:b9:73:42:
ca:b2:13:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 16:22:07 2026 by rpki-client