Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2E4A593455ED11F18D4017E9CE1D38B0.roa
File: 2E4A593455ED11F18D4017E9CE1D38B0.roa (raw, json)
Hash identifier: UAnrRScHjhAvXCuEpx7r6maMnEgLu/jJahmyrCCQr0Y=
Subject key identifier: 85:56:AA:57:A6:94:BA:95:EE:F0:5F:CF:35:B1:4C:33:19:0A:2E:5B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B816
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2E4A593455ED11F18D4017E9CE1D38B0.roa
Signing time: Fri 22 May 2026 14:47:40 +0000
ROA not before: Fri 22 May 2026 14:47:34 +0000
ROA not after: Fri 26 Jun 2026 14:47:34 +0000
asID: 140869
IP address blocks: 45.203.213.0/24 maxlen: 24
45.203.214.0/24 maxlen: 24
45.203.215.0/24 maxlen: 24
45.203.216.0/24 maxlen: 24
45.203.217.0/24 maxlen: 24
45.203.218.0/24 maxlen: 24
45.203.219.0/24 maxlen: 24
45.203.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112662 (0x1b816)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 22 14:47:34 2026 GMT
Not After : Jun 26 14:47:34 2026 GMT
Subject: CN=6a106c8c-b718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:76:74:0a:3b:8d:b2:b3:a9:a7:b0:73:51:fa:
8e:c8:47:2e:53:f7:78:7a:fe:23:d2:e3:1c:7d:17:
5c:34:ff:b0:aa:95:7e:32:ca:ed:4a:04:c3:a5:16:
f1:e2:43:6a:1b:ea:a9:b7:2e:22:bc:ed:2d:d8:37:
24:a3:b2:9a:47:fd:b1:4a:20:cd:07:41:73:0a:5b:
66:6b:e2:c2:57:52:f8:c2:1b:68:1c:fe:7c:b1:be:
f4:24:25:7c:3b:cd:f8:2d:7d:76:27:5c:e9:f3:e5:
d7:ac:b9:7e:eb:76:1f:1b:03:8c:85:3c:9e:23:b4:
9e:62:5e:64:3d:d1:54:e7:ea:c4:2a:14:54:e6:cb:
8b:5d:ba:95:a5:59:59:96:2d:e3:34:db:f3:1d:7c:
18:8a:b7:4b:52:e0:1c:f1:6b:ef:40:2b:4a:ab:05:
88:01:f9:1a:8d:b2:8b:0e:ea:7e:0f:97:e8:bf:91:
92:9d:27:02:dc:df:70:47:4f:1a:47:92:4e:e2:a0:
3d:a4:67:06:a5:57:29:b7:c7:c3:5e:be:f6:20:86:
f4:88:c9:3b:97:0c:c4:b4:33:93:c1:dc:c0:f9:cf:
33:36:fc:b6:14:f6:da:b0:89:23:87:6e:c1:40:e1:
33:c0:56:96:4f:9e:71:29:9f:84:cf:2b:79:9f:1d:
a3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:56:AA:57:A6:94:BA:95:EE:F0:5F:CF:35:B1:4C:33:19:0A:2E:5B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2E4A593455ED11F18D4017E9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.213.0-45.203.220.255
Signature Algorithm: sha256WithRSAEncryption
89:88:cc:12:30:f6:71:99:f0:ac:4e:bc:77:71:fa:fb:77:ce:
22:56:96:86:22:7b:92:b8:2f:ac:6d:8c:cf:c3:60:a4:37:40:
65:0a:7d:0f:1b:bc:f4:a1:53:10:9e:31:3a:aa:2b:dc:eb:d4:
d4:36:14:9f:6a:5a:d7:6b:f0:eb:53:e3:40:30:47:6d:4b:75:
0d:1f:63:ff:3a:08:d4:c2:b2:72:c8:08:e9:93:fb:6b:91:3f:
0e:b0:32:07:20:ac:b6:51:21:ff:6f:57:1d:d5:c3:ff:64:2d:
de:90:99:8d:9f:99:4a:f2:29:e3:a0:f9:54:33:4c:f8:fb:e2:
cd:85:49:49:59:eb:48:09:d7:b6:f7:58:64:79:62:3e:b7:c4:
9e:fa:a9:7a:55:52:cb:c6:47:0e:21:64:f3:c5:6c:17:30:03:
de:08:c2:79:65:da:18:13:00:b8:39:56:75:a4:00:41:1b:40:
4e:41:d9:ca:15:db:1d:00:ec:5a:07:50:ae:df:72:48:08:4f:
a8:44:02:b9:1a:5c:d4:42:8b:d1:a9:67:f7:a3:e8:05:46:36:
a3:65:cb:4b:85:80:18:98:9c:be:61:96:ee:98:a3:cf:b7:58:
01:e5:dc:f4:a2:e1:e1:1d:c8:95:ce:f7:fd:75:b0:28:69:a8:
4c:88:57:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:29:00 2026 by rpki-client