Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4EC6857C6EE611F1BCAB0403CF1D38B0.roa
File: 4EC6857C6EE611F1BCAB0403CF1D38B0.roa (raw, json)
Hash identifier: IxWqFQV2Thn1aHDLRc5Xh98r90E6/jm8EfkQgmRq43s=
Subject key identifier: FC:5C:D8:E3:0A:2D:83:AC:98:DD:2A:9D:EF:95:30:D5:F2:ED:84:D8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BFC7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4EC6857C6EE611F1BCAB0403CF1D38B0.roa
Signing time: Tue 23 Jun 2026 09:31:27 +0000
ROA not before: Tue 23 Jun 2026 09:31:22 +0000
ROA not after: Sun 09 Aug 2026 09:31:22 +0000
asID: 395793
IP address blocks: 45.194.1.0/24 maxlen: 24
45.194.4.0/24 maxlen: 24
45.194.5.0/24 maxlen: 24
45.195.63.0/24 maxlen: 24
45.196.194.0/23 maxlen: 24
45.196.225.0/24 maxlen: 24
45.196.226.0/24 maxlen: 24
45.196.227.0/24 maxlen: 24
45.201.32.0/24 maxlen: 24
45.204.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114631 (0x1bfc7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 23 09:31:22 2026 GMT
Not After : Aug 9 09:31:22 2026 GMT
Subject: CN=6a3a526f-11b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:75:71:07:75:1a:2f:ea:b0:7c:aa:ba:29:d9:
29:21:fd:f5:60:41:ef:39:f6:37:d2:54:be:2c:36:
7c:a7:fd:fd:bb:78:8e:59:e1:9b:4f:1c:bb:c2:62:
b3:a9:86:8e:e4:d1:fd:32:bc:41:f3:7f:7a:ed:d1:
0f:27:2b:c9:8e:30:6f:e7:1d:03:53:40:ba:9e:e3:
df:78:4a:38:bc:56:51:36:1d:03:58:d5:4e:e2:96:
b2:cb:00:cd:00:29:61:9a:ea:17:2d:d8:2e:be:e1:
9f:84:47:b6:7c:07:a3:a0:52:4d:4a:b0:24:81:1e:
6e:90:ca:83:2a:32:91:2d:e5:31:2b:d0:6e:d1:11:
06:e4:54:01:84:67:79:a0:32:1a:b1:af:eb:cb:6c:
b9:69:a6:3d:1d:95:da:8d:0f:30:66:7d:ae:f0:9a:
4f:d4:8c:a3:03:30:5e:c9:61:e0:26:73:10:7c:62:
e2:43:9d:3e:84:10:54:01:c8:5a:56:11:9c:23:d3:
26:bd:c7:8a:e7:f4:b2:6e:56:ad:0b:f6:6d:7b:9c:
0a:43:80:40:12:16:d1:d3:f2:aa:d8:8f:92:3c:b4:
12:5a:bb:d6:1f:35:bf:97:4b:53:d3:6f:15:3b:99:
22:95:b1:8a:70:11:4a:2d:6a:70:30:00:57:67:af:
29:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:5C:D8:E3:0A:2D:83:AC:98:DD:2A:9D:EF:95:30:D5:F2:ED:84:D8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4EC6857C6EE611F1BCAB0403CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.1.0/24
45.194.4.0/23
45.195.63.0/24
45.196.194.0/23
45.196.225.0-45.196.227.255
45.201.32.0/24
45.204.147.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:c4:f0:87:d4:4d:3f:7f:ab:62:77:af:5f:b9:0f:72:50:8b:
5e:98:57:e8:39:a0:36:0f:d1:21:1f:a2:1e:f3:b1:dc:dd:7b:
64:39:0e:12:c1:7a:01:63:a2:c9:e3:97:f8:5f:f2:85:3c:cc:
2e:89:e1:25:24:cc:c0:04:54:52:ae:5b:bd:d1:8f:df:17:01:
aa:83:13:e4:7b:51:f7:be:4f:e4:5b:a4:d1:a9:38:55:52:d9:
e3:25:d3:27:39:30:4b:e9:2f:0b:be:06:9a:fa:7c:6c:57:0f:
88:f9:f0:66:02:64:49:7b:20:5b:9f:89:8f:25:b5:23:fd:ec:
d4:4f:c5:e5:cb:32:b2:ab:31:89:34:cd:36:9d:03:3c:24:8f:
9b:5f:fd:1c:63:e8:0a:bb:16:06:d0:58:6b:b6:f8:a3:f1:1b:
c9:8f:c0:48:0d:53:9b:e3:40:9d:e2:d6:94:fa:79:f9:4f:11:
fc:b1:14:bc:61:4f:07:da:a7:db:24:c3:db:f2:52:25:9d:ba:
78:8c:bc:e6:df:1a:a7:2c:6f:8f:f3:c1:8b:01:b9:4f:ad:ab:
a2:08:2f:18:a2:8b:8f:94:de:0d:bc:91:63:d5:d0:70:22:46:
77:1e:d3:f2:aa:52:24:50:62:74:50:e0:45:9b:58:b1:04:95:
36:02:cc:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:38 2026 by rpki-client