Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2E54DBFA7C3C11F1BE711BD1CE1D38B0.roa
File: 2E54DBFA7C3C11F1BE711BD1CE1D38B0.roa (raw, json)
Hash identifier: 56ge2ulp4Lj47fKatKaI5xXRddCtAhIl6JmERc6FXgg=
Subject key identifier: 30:F1:5C:C8:D4:E9:17:EB:5D:09:98:45:19:94:9A:8A:F5:3E:5A:AF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C442
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2E54DBFA7C3C11F1BE711BD1CE1D38B0.roa
Signing time: Fri 10 Jul 2026 08:48:55 +0000
ROA not before: Fri 10 Jul 2026 08:48:50 +0000
ROA not after: Mon 17 Aug 2026 08:48:50 +0000
asID: 139613
IP address blocks: 45.194.85.0/24 maxlen: 24
45.195.60.0/24 maxlen: 24
45.195.62.0/24 maxlen: 24
45.195.192.0/24 maxlen: 24
45.195.196.0/24 maxlen: 24
45.195.197.0/24 maxlen: 24
45.197.1.0/24 maxlen: 24
45.197.2.0/24 maxlen: 24
45.197.4.0/24 maxlen: 24
45.197.5.0/24 maxlen: 24
45.199.191.0/24 maxlen: 24
45.202.8.0/24 maxlen: 24
45.202.9.0/24 maxlen: 24
45.202.10.0/24 maxlen: 24
45.202.11.0/24 maxlen: 24
45.202.63.0/24 maxlen: 24
45.204.1.0/24 maxlen: 24
45.204.64.0/24 maxlen: 24
45.204.71.0/24 maxlen: 24
45.207.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115778 (0x1c442)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 10 08:48:50 2026 GMT
Not After : Aug 17 08:48:50 2026 GMT
Subject: CN=6a50b1f6-7178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bc:04:de:a9:12:fb:4a:a8:c3:31:1b:9f:60:
c6:00:ae:e7:ce:7c:9b:5b:75:2e:c6:bf:c8:4e:3f:
d1:f4:79:91:b3:17:cf:20:64:1b:25:87:66:91:1b:
98:8b:fb:c5:7e:2b:e8:2e:16:71:77:99:6f:47:ea:
64:6b:17:20:1f:83:09:5e:51:9c:c3:4f:00:1d:46:
5c:0b:a7:62:90:67:ab:cf:12:73:21:dc:2d:0c:09:
dd:f7:dc:56:10:ec:87:fc:d5:6e:34:d7:40:c8:f9:
99:17:ea:ba:88:44:98:40:ff:34:21:96:13:c3:7b:
60:07:2f:f6:46:82:b5:ba:24:77:1a:3e:d4:32:f2:
b5:79:bb:55:9d:f9:13:4c:c6:19:1f:66:ea:79:eb:
1e:32:dd:c6:00:1d:b9:ac:c5:5d:ec:fa:86:52:d2:
22:92:4b:62:bb:80:27:01:2d:70:04:43:1a:6d:94:
4b:a7:d8:a2:7c:d8:4b:6a:ce:ca:63:16:9f:13:b0:
76:62:c0:70:aa:0a:75:07:3e:c9:fa:d1:61:d7:2f:
32:07:54:36:b1:24:b4:28:4a:0f:8f:cb:33:b3:b1:
59:64:0a:14:96:60:97:68:ec:b6:62:c7:eb:da:65:
a6:b7:df:e5:f4:6a:14:0a:9d:ce:00:49:cb:69:c1:
7b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:F1:5C:C8:D4:E9:17:EB:5D:09:98:45:19:94:9A:8A:F5:3E:5A:AF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2E54DBFA7C3C11F1BE711BD1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.85.0/24
45.195.60.0/24
45.195.62.0/24
45.195.192.0/24
45.195.196.0/23
45.197.1.0-45.197.2.255
45.197.4.0/23
45.199.191.0/24
45.202.8.0/22
45.202.63.0/24
45.204.1.0/24
45.204.64.0/24
45.204.71.0/24
45.207.163.0/24
Signature Algorithm: sha256WithRSAEncryption
99:75:68:f5:d6:29:00:4f:58:02:2a:7b:fc:ad:eb:83:a0:fc:
f1:d9:ff:41:7a:0d:04:7d:8d:36:d2:af:d2:07:7a:63:9e:41:
a3:aa:9e:b3:a0:08:ce:94:8e:bb:3d:b0:e0:69:1c:ab:a0:15:
d8:2e:31:86:a7:bf:45:a7:8f:76:05:32:bb:21:1d:20:d6:a7:
e1:d4:ca:05:5e:61:1f:3e:fc:02:50:e9:71:2a:b9:02:d5:7a:
69:3e:c9:a8:79:54:53:a6:04:c7:2d:bc:e5:9f:ff:dc:75:80:
6c:29:e4:3f:0b:bd:1c:40:df:6c:83:d5:45:65:5f:39:70:49:
6c:16:58:df:cd:de:b0:68:ae:58:de:3a:d6:bc:4e:53:5e:d3:
50:23:55:7b:42:00:a6:f9:67:c2:f2:42:9d:26:10:71:f1:8e:
a3:28:da:1d:fd:fc:8c:99:1c:bf:04:86:e5:a8:8f:ad:b5:c2:
e2:31:10:ec:52:2a:2e:ca:9f:72:cb:f5:8f:3a:16:c5:90:aa:
8b:fa:3d:8a:64:eb:0b:6c:a7:64:7d:ed:ef:50:4e:ba:2e:ef:
92:4a:61:58:27:21:12:ee:8c:d9:75:07:c4:7d:75:92:e1:36:
40:82:bb:d6:c2:90:0f:f4:6f:4b:be:3e:11:7b:96:c9:d2:27:
27:7a:77:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:17 2026 by rpki-client