Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4E1D18F23BC911F1820CCB1ECF1D38B0.roa
File: 4E1D18F23BC911F1820CCB1ECF1D38B0.roa (raw, json)
Hash identifier: a7McZ3xSqFu5B5P8BdlVCbSC1f37WdHJrmauXrGLqFg=
Subject key identifier: F1:73:1C:72:A0:97:37:93:D9:38:92:41:80:9F:1C:31:E2:B3:A6:39
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01ADA7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4E1D18F23BC911F1820CCB1ECF1D38B0.roa
Signing time: Sun 19 Apr 2026 08:25:21 +0000
ROA not before: Sun 19 Apr 2026 08:25:16 +0000
ROA not after: Tue 26 May 2026 08:25:16 +0000
asID: 140869
IP address blocks: 45.203.213.0/24 maxlen: 24
45.203.214.0/24 maxlen: 24
45.203.215.0/24 maxlen: 24
45.203.216.0/24 maxlen: 24
45.203.217.0/24 maxlen: 24
45.203.218.0/24 maxlen: 24
45.203.219.0/24 maxlen: 24
45.203.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109991 (0x1ada7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 19 08:25:16 2026 GMT
Not After : May 26 08:25:16 2026 GMT
Subject: CN=69e49171-3b0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:01:69:56:b5:88:5f:75:38:3c:a3:ee:cf:ae:
83:ba:cf:f4:6c:15:44:9c:f7:dd:ac:b8:ba:6f:ca:
7a:c8:f8:ec:79:66:9e:67:12:51:77:a3:b8:38:b5:
82:9f:4e:fc:91:9d:04:63:2f:a7:02:90:af:3a:a7:
68:55:1c:01:3e:4b:67:40:e8:19:d6:d3:62:09:ae:
7b:cb:ff:3b:f7:56:8f:bd:aa:d9:f7:58:f3:6d:99:
47:d7:ae:ae:83:13:d7:88:f1:fc:31:67:92:29:fd:
21:13:23:d5:77:ce:60:e0:c1:d7:51:9d:5e:c9:51:
47:40:d3:38:91:a1:25:0a:96:1a:92:2e:0e:87:2d:
14:9f:33:32:fe:37:97:ff:55:1a:26:fb:2a:f7:86:
62:df:d5:68:7a:fb:e3:e8:73:32:a5:9e:c3:de:52:
ea:a2:51:55:07:db:aa:1b:7a:cb:6e:5d:83:94:56:
47:bf:22:06:93:7a:56:b9:75:96:f6:50:a1:4e:2d:
98:b7:1a:c3:0a:15:98:e7:53:01:8c:da:23:9f:e7:
97:e2:77:8c:f6:f2:36:6b:c6:04:72:5a:4e:8e:2e:
fe:4d:f5:b1:34:11:fb:af:2a:34:fa:76:d0:80:3a:
64:c5:1a:34:05:6a:53:cc:ca:13:9c:79:2b:5a:75:
a4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:73:1C:72:A0:97:37:93:D9:38:92:41:80:9F:1C:31:E2:B3:A6:39
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4E1D18F23BC911F1820CCB1ECF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.213.0-45.203.220.255
Signature Algorithm: sha256WithRSAEncryption
b2:d0:18:e2:ec:88:b0:1e:66:77:83:48:be:20:6d:5d:2b:ab:
fc:21:88:d9:f1:b2:98:05:d2:4c:d7:31:43:79:e5:60:30:b1:
a8:28:ea:88:d0:4f:7d:6a:a1:59:b2:d1:96:36:9b:70:b1:69:
02:80:f0:6e:c5:7c:38:e3:00:d5:a5:25:79:55:c4:84:f4:99:
30:06:62:3d:ac:fd:7a:81:14:82:43:ff:60:a5:9f:89:27:6d:
db:c1:9a:6b:cd:cc:2f:a0:33:ef:cb:79:7e:4d:30:60:0c:c8:
69:f1:90:24:17:40:11:72:6c:50:f4:7d:3d:0c:92:05:b3:15:
15:d3:7a:9a:39:ec:ff:59:07:de:47:4d:6a:6d:80:5a:18:c7:
b9:80:fc:6b:9e:24:fe:7f:0f:be:6c:d9:63:b4:19:33:2f:ec:
f8:fb:e3:cb:ff:c2:fa:74:9d:b7:eb:d0:27:20:08:68:76:26:
27:2e:6c:99:0a:1e:43:e4:8f:60:08:a4:eb:d4:cc:7e:c8:ae:
99:1e:f9:cd:6e:f1:6e:5a:6a:bb:5a:e2:a5:50:30:83:2a:24:
73:e2:fb:b0:63:b2:65:07:2b:2b:eb:68:c1:b5:8a:0e:64:06:
c4:39:2c:49:12:48:34:72:12:bd:97:03:02:ad:73:e2:ef:1c:
4d:53:18:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 12:31:48 2026 by rpki-client