Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/232E2ED0730311F1BF8879FECE1D38B0.roa
File: 232E2ED0730311F1BF8879FECE1D38B0.roa (raw, json)
Hash identifier: FzElvvMQ+f3lLTZoo015rkL+kO7hKANHl8KLWuT/M80=
Subject key identifier: 5E:EF:24:1B:D5:7C:B5:11:F5:0E:89:32:70:27:BF:91:68:27:BD:84
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C167
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/232E2ED0730311F1BF8879FECE1D38B0.roa
Signing time: Sun 28 Jun 2026 15:07:54 +0000
ROA not before: Sun 28 Jun 2026 15:07:49 +0000
ROA not after: Thu 30 Jul 2026 15:07:49 +0000
asID: 9304
IP address blocks: 45.204.48.0/24 maxlen: 24
45.204.49.0/24 maxlen: 24
45.204.50.0/24 maxlen: 24
45.204.51.0/24 maxlen: 24
45.204.52.0/24 maxlen: 24
45.204.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115047 (0x1c167)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 28 15:07:49 2026 GMT
Not After : Jul 30 15:07:49 2026 GMT
Subject: CN=6a4138ca-de53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:97:ee:bc:9c:a8:60:bb:08:23:0c:54:69:41:
a9:95:f4:b2:f8:9c:a8:72:2a:80:7a:ad:c1:c9:35:
f2:83:7d:84:a1:2d:84:e2:1d:67:5e:bf:03:ae:98:
ac:81:78:9c:b3:ae:07:da:b3:2e:a1:10:29:d5:32:
28:f7:f4:4c:f6:48:82:a9:9a:bb:0b:4a:6b:a6:f1:
29:22:60:c1:dc:61:72:19:b5:aa:7e:22:20:92:70:
2b:39:cc:78:44:40:d5:48:77:9f:a8:a5:33:53:0f:
3b:14:6d:01:b3:c9:e0:8a:e3:f6:aa:8e:cf:7b:15:
54:2f:26:96:af:af:84:33:dd:23:17:42:e0:e7:4a:
f3:96:4f:c0:7c:91:5d:60:98:0e:17:61:5b:2d:f4:
2b:6d:66:08:b1:8e:0c:72:4d:e6:96:ac:de:55:c9:
4c:b5:b6:dc:59:61:11:14:69:ec:c8:ba:11:94:a5:
bf:0c:2f:59:aa:33:ab:22:d3:76:ea:ff:19:aa:31:
f9:21:02:fa:ee:1f:80:7f:c8:11:0f:23:38:6e:da:
cc:f3:47:70:97:57:0f:76:c4:60:8d:68:6a:db:d5:
51:ea:34:35:f6:4c:3e:85:e9:5d:01:90:66:b7:19:
14:a3:83:72:16:8c:dd:2f:56:2d:b9:0a:31:ec:d5:
76:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:EF:24:1B:D5:7C:B5:11:F5:0E:89:32:70:27:BF:91:68:27:BD:84
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/232E2ED0730311F1BF8879FECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.48.0-45.204.53.255
Signature Algorithm: sha256WithRSAEncryption
41:94:59:20:5f:9d:3f:e6:da:1b:0f:a7:18:20:22:9a:d6:85:
a2:25:01:2e:78:a4:21:2b:8c:be:e9:bc:bd:20:52:4d:57:b7:
a6:5a:77:93:88:b3:2b:6f:0b:b6:51:78:8b:c0:a5:2a:f8:32:
c8:be:4f:96:dd:fe:a8:2e:2c:fe:e6:7b:27:55:c4:c2:18:e2:
4c:58:17:35:e8:50:66:c0:04:da:a8:83:6a:f5:2f:5c:80:0e:
4d:f2:56:b2:4e:e1:88:99:21:f9:a0:4b:13:31:14:38:37:84:
9d:49:6c:39:85:97:0d:1f:0f:1c:7f:87:55:a7:44:dc:6a:3d:
12:a0:1e:44:9a:82:af:07:08:ce:c0:b7:f9:2e:6f:98:6f:55:
f8:db:64:0a:2a:e4:52:43:da:12:37:5a:88:92:9d:1b:e9:4e:
3c:cb:ab:7a:38:56:50:ab:17:b1:e0:0d:3a:dc:73:d7:46:bf:
48:4b:13:59:4d:78:c1:58:9f:48:ff:f8:0f:4e:0b:09:fb:e0:
96:cf:93:74:ce:45:16:5a:e5:a9:5a:ef:f9:05:55:be:30:6f:
57:56:5e:35:c9:b0:47:32:78:5c:c9:3f:c8:83:26:28:4e:e7:
44:6c:b8:17:63:9a:a9:ff:ce:5a:1b:c8:8c:dc:1e:50:09:c9:
20:f9:14:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:41:46 2026 by rpki-client