Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/27CB3D7A535511F1821DDA18CF1D38B0.roa
File: 27CB3D7A535511F1821DDA18CF1D38B0.roa (raw, json)
Hash identifier: xFfsiC3m1DdU/0qDJPx2QmTDfQic78yQJmJFcmmUPR8=
Subject key identifier: 29:58:78:D2:6D:C8:F1:E4:41:8A:E8:D2:F0:28:D3:A4:0B:0E:D0:8A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B5AB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/27CB3D7A535511F1821DDA18CF1D38B0.roa
Signing time: Tue 19 May 2026 07:34:24 +0000
ROA not before: Tue 19 May 2026 07:34:18 +0000
ROA not after: Sat 08 Aug 2026 07:34:18 +0000
asID: 63787
IP address blocks: 45.192.176.0/24 maxlen: 24
45.192.177.0/24 maxlen: 24
45.192.178.0/24 maxlen: 24
45.192.179.0/24 maxlen: 24
45.192.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112043 (0x1b5ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 19 07:34:18 2026 GMT
Not After : Aug 8 07:34:18 2026 GMT
Subject: CN=6a0c127f-c5bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:9c:61:e1:e1:56:24:6e:0f:37:71:da:fc:6b:
44:83:9c:4d:ad:34:8f:67:7a:e3:07:66:b3:dc:95:
da:78:d4:5f:82:44:12:b1:a8:32:75:aa:b4:f0:cc:
64:8e:16:1d:35:f9:7b:78:56:fa:18:3a:f9:a6:5a:
aa:46:4e:59:85:d4:82:e9:37:5b:07:cb:32:1d:a9:
e3:1e:7c:c7:8f:90:45:86:a6:ec:3b:ce:bd:51:e3:
dc:e4:c1:85:77:c9:9b:64:f6:57:22:f8:91:ef:4e:
c5:0d:13:a3:5d:bb:f7:40:24:21:51:d9:41:61:3e:
a8:79:48:61:89:3e:a5:c8:43:9d:dc:a0:f6:1f:a0:
03:dd:74:a9:49:bc:62:c2:58:1f:bd:4c:bb:c4:73:
ae:2a:01:42:d4:0f:e1:11:f4:d8:2e:61:e2:fe:8c:
be:6e:4d:bb:c5:ca:56:ca:9a:29:76:42:fd:8a:42:
69:c4:ce:7d:37:0b:18:52:f0:15:fe:12:9c:52:c6:
4f:29:f9:ae:f4:b2:18:2a:37:58:88:fb:62:66:8d:
f0:d9:1b:2c:82:5d:ff:e4:f6:be:57:4c:a3:4b:22:
c5:ff:ee:7a:33:67:8f:d4:d9:33:0d:d5:a0:fc:ce:
cd:3e:1c:b2:63:09:1c:6e:cd:99:19:94:81:0a:5b:
a5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:58:78:D2:6D:C8:F1:E4:41:8A:E8:D2:F0:28:D3:A4:0B:0E:D0:8A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/27CB3D7A535511F1821DDA18CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.176.0-45.192.180.255
Signature Algorithm: sha256WithRSAEncryption
73:2b:b9:05:e5:d6:b5:9c:c2:d5:7a:6d:71:69:4e:6c:bb:24:
39:ce:61:28:37:dd:8a:0b:2a:d2:3b:ab:87:9a:20:77:33:59:
93:c3:29:5c:87:4b:29:8d:85:5a:4e:cf:67:27:16:cc:43:a0:
42:2e:d7:69:61:c3:8c:27:a7:cb:f9:cb:1a:96:b1:88:95:47:
f2:df:2a:cc:ac:de:9b:3d:36:20:42:2e:dc:c3:90:0e:68:11:
3b:f8:52:ef:6f:1f:e3:5a:83:d5:57:5f:9c:71:25:77:31:e4:
12:7d:28:e4:03:67:7e:a3:6d:0f:b7:bc:c4:16:19:e1:67:c4:
a4:67:74:6b:42:f1:e0:b9:22:7c:3e:85:69:f2:0c:cc:f9:d1:
24:9a:21:69:1c:02:9a:f9:f5:d7:51:4e:d0:e2:25:c1:a4:49:
c9:d1:fb:ba:c3:f6:09:ce:9e:8f:00:37:33:3f:38:be:9c:9b:
28:ca:45:85:a1:c2:9c:ca:8f:ba:ea:0d:39:e1:37:55:18:d4:
fd:04:55:89:d3:6e:56:19:c1:92:95:63:0b:dc:6a:a3:16:b3:
c6:02:f5:81:ea:d4:71:89:cf:95:ce:46:17:a9:20:1a:bb:94:
b2:f4:a2:43:3b:af:ad:fa:b4:df:62:76:4d:3b:c6:78:5f:ce:
16:31:53:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:35:52 2026 by rpki-client