Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2848A97057AD11F18221320CCF1D38B0.roa
File: 2848A97057AD11F18221320CCF1D38B0.roa (raw, json)
Hash identifier: FECrW7rLB5YN7Kc5NNK4qZBYTOhKlbw2kfmC0FRWlIw=
Subject key identifier: F6:3C:7B:19:4E:8E:09:24:5B:39:1C:BC:2A:F0:3A:69:DB:3D:8C:97
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B937
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2848A97057AD11F18221320CCF1D38B0.roa
Signing time: Sun 24 May 2026 20:14:26 +0000
ROA not before: Sun 24 May 2026 20:14:18 +0000
ROA not after: Fri 10 Jul 2026 20:14:18 +0000
asID: 401783
IP address blocks: 45.192.236.0/24 maxlen: 24
45.196.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112951 (0x1b937)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 24 20:14:18 2026 GMT
Not After : Jul 10 20:14:18 2026 GMT
Subject: CN=6a135c22-91ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4f:5f:7c:a3:c9:8d:86:24:da:5d:3a:ae:ee:
24:b5:25:54:21:40:90:a0:ad:17:96:5e:3e:9b:32:
c3:76:b3:c2:b5:78:85:28:2d:79:6d:03:58:af:8b:
b1:4a:da:2d:e0:d7:99:60:98:3f:5b:35:fe:7b:14:
5d:ed:a1:05:e8:7a:44:5b:a3:d0:2e:17:b1:93:07:
60:dc:f6:c3:9e:26:1b:85:c4:2a:61:df:cb:7d:da:
0e:73:c1:2f:f6:79:72:df:0c:ea:e0:56:1d:cd:56:
07:64:25:df:2b:e5:7a:1a:9d:1f:49:48:d9:c0:48:
12:04:e7:bc:02:cf:90:35:39:b1:87:7c:a6:02:27:
ac:7b:5c:5f:69:5a:d3:c8:ab:75:e3:3f:79:0c:b4:
b7:f9:e4:7c:8f:b1:1d:fd:43:41:ef:e8:5b:50:31:
4a:99:9c:fd:4e:5c:ea:70:58:45:78:e6:32:09:bf:
89:a6:ef:75:a9:39:3b:75:2a:96:e3:62:bc:5c:fa:
ac:2b:58:0f:02:8d:7d:4e:ac:ec:cc:bb:8c:e4:dd:
d9:a7:b5:c1:b2:ca:71:17:5e:1b:85:c3:cf:dd:ae:
3e:42:f4:2c:5c:a0:c4:9f:04:b4:01:fa:61:23:ae:
2d:27:9b:43:b4:dc:7e:66:36:2e:fe:18:8e:10:59:
db:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:3C:7B:19:4E:8E:09:24:5B:39:1C:BC:2A:F0:3A:69:DB:3D:8C:97
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2848A97057AD11F18221320CCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.236.0/24
45.196.194.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:90:6c:1c:2c:af:a8:bd:53:d9:c3:f6:5a:3d:c5:ea:c8:21:
c5:c0:82:8a:b1:73:92:d7:70:b0:bd:28:59:96:cc:be:3f:24:
1f:2e:b9:9e:d9:b2:ba:51:95:86:4b:b9:31:35:08:64:2f:16:
2f:b9:ae:7e:c1:7a:b0:7b:6a:07:09:e9:0b:9e:dd:c7:7a:63:
0f:c9:35:7f:9a:fe:ce:4f:61:d6:e0:d9:80:58:8e:50:38:ef:
16:59:40:f4:55:29:93:84:34:8f:69:a5:6c:a5:4e:34:97:72:
5e:cc:39:a9:73:fd:95:f5:87:33:81:5c:58:db:aa:58:f7:a3:
8f:14:82:fe:2c:e9:28:30:2f:90:5b:f8:25:d3:38:59:d1:15:
d4:5e:d3:41:30:da:e9:a6:8d:0b:29:93:fa:5c:98:4e:2c:fc:
04:b1:c8:33:72:b3:79:17:51:f7:ae:09:35:13:17:e9:e5:14:
b7:d0:18:ad:a9:e3:bd:f8:9d:c6:f4:fd:48:71:58:1f:83:88:
3e:12:71:5f:aa:bf:f8:d2:c7:b1:97:cf:d0:23:4a:34:c4:00:
52:e7:69:28:ee:97:7c:10:40:08:b2:25:49:42:62:05:90:64:
a1:04:73:3d:ec:cf:44:86:77:a3:8d:5f:c2:ce:d6:0f:62:df:
52:9f:18:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:14:21 2026 by rpki-client