Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3BC6D21A58DE11F1A56300DDCE1D38B0.roa
File: 3BC6D21A58DE11F1A56300DDCE1D38B0.roa (raw, json)
Hash identifier: 3KvmH+0FlAWCzFgecuas3aNnY9h04t8KLuZnGq7z8Ps=
Subject key identifier: DE:77:4F:61:C3:BA:ED:13:C6:3A:C5:FA:FF:00:8D:AA:A3:8A:E7:6B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B9C5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3BC6D21A58DE11F1A56300DDCE1D38B0.roa
Signing time: Tue 26 May 2026 08:38:14 +0000
ROA not before: Tue 26 May 2026 08:38:09 +0000
ROA not after: Sun 28 Jun 2026 08:38:09 +0000
asID: 202656
IP address blocks: 45.199.255.0/24 maxlen: 24
45.200.160.0/24 maxlen: 24
45.200.161.0/24 maxlen: 24
45.200.162.0/24 maxlen: 24
45.200.163.0/24 maxlen: 24
45.200.164.0/24 maxlen: 24
45.200.165.0/24 maxlen: 24
45.200.166.0/24 maxlen: 24
45.200.167.0/24 maxlen: 24
45.200.168.0/24 maxlen: 24
45.200.169.0/24 maxlen: 24
45.200.170.0/24 maxlen: 24
45.200.171.0/24 maxlen: 24
45.200.172.0/24 maxlen: 24
45.200.173.0/24 maxlen: 24
45.200.174.0/24 maxlen: 24
45.200.175.0/24 maxlen: 24
45.200.176.0/24 maxlen: 24
45.200.177.0/24 maxlen: 24
45.200.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113093 (0x1b9c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 26 08:38:09 2026 GMT
Not After : Jun 28 08:38:09 2026 GMT
Subject: CN=6a155bf6-ff06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:76:0a:41:8a:cd:0c:04:47:cf:d8:66:41:b1:
77:6f:b8:6d:f2:1c:07:56:43:77:95:c4:5b:cb:e4:
3f:09:f4:37:14:5b:c7:c5:da:58:a9:09:e8:d4:e1:
d2:4b:7c:f5:01:b3:13:e3:10:cc:5e:b7:73:fe:cc:
97:d5:b7:41:9e:0b:b0:a2:10:ca:1b:8a:0a:33:77:
46:0c:8e:88:6d:79:22:81:b6:9e:84:2b:b1:21:4c:
8c:8c:c0:cf:63:fc:8a:d1:0e:88:dd:80:04:a9:fd:
25:01:92:b7:12:d0:de:8c:86:a1:58:6c:48:6c:5a:
be:78:83:e1:4a:86:c3:cc:0d:17:6b:a9:d1:78:95:
86:23:90:04:cb:cc:e9:72:f9:a6:c7:71:76:79:b6:
f5:35:b7:13:08:af:a4:15:1e:d7:3f:80:8d:09:71:
ae:12:1e:f1:7b:ed:7b:c8:2d:73:80:4a:84:2b:bc:
e9:77:af:1b:19:52:1f:90:ff:4a:ad:b9:a1:cf:04:
da:25:57:57:c9:81:43:9f:4c:97:48:32:5b:d5:c7:
57:ab:a2:00:16:75:bb:14:03:fd:5a:29:e9:5b:82:
6f:fa:aa:d9:08:7a:00:22:ad:0a:db:b0:49:e8:f7:
c9:99:84:27:d3:9b:84:e8:4b:65:e4:67:f5:23:e5:
02:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:77:4F:61:C3:BA:ED:13:C6:3A:C5:FA:FF:00:8D:AA:A3:8A:E7:6B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3BC6D21A58DE11F1A56300DDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.255.0/24
45.200.160.0-45.200.178.255
Signature Algorithm: sha256WithRSAEncryption
b6:ec:44:ab:88:03:dc:e1:3d:24:a1:3e:b0:08:2c:3e:13:c3:
e2:fe:8b:f3:eb:63:8f:ee:e8:a7:14:65:42:59:7d:1b:4d:1c:
0e:d3:74:2c:03:e0:42:f1:cf:d9:2f:fd:b3:ef:fb:90:69:a1:
90:a6:6f:bb:99:0c:dc:e1:da:d3:a6:a4:38:37:43:7e:60:a5:
f9:bd:0f:52:b2:dc:b9:34:b3:97:88:f8:52:77:2f:90:ff:fa:
c9:df:9c:60:a8:ff:9f:72:08:3d:71:09:e5:cb:77:39:d5:fd:
9f:db:70:67:0e:50:f1:33:8f:59:2a:94:d0:d4:64:69:4b:d7:
ab:09:a2:e1:01:c7:69:70:2b:65:8a:ed:02:b8:84:7d:e8:be:
f0:94:51:fe:93:be:d4:4e:ec:e8:cc:44:99:c8:ff:52:91:29:
b3:25:8d:b1:b9:e9:d9:01:a5:68:c1:71:81:11:ab:a5:ed:ea:
d1:ab:3d:aa:39:e6:f3:11:29:16:ae:d6:3d:a5:9a:b0:d8:ef:
c5:ab:6b:58:2f:66:03:37:cb:21:ef:ff:4c:ba:d5:7a:80:08:
4e:85:ad:3e:89:11:59:7a:b8:41:ab:dd:f1:47:ad:c5:c0:45:
ae:96:d6:3d:67:b7:9d:57:cf:4d:fe:3b:5f:35:14:c2:ce:7d:
b3:dc:10:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:07:20 2026 by rpki-client