Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6346D5F6574E11F1944194D9CE1D38B0.roa
File: 6346D5F6574E11F1944194D9CE1D38B0.roa (raw, json)
Hash identifier: KRg6PfQBmTD1dBSncv3D5nb0i11rQ0reMxdR0qFWYZI=
Subject key identifier: E7:7C:EB:5B:7B:C2:BE:00:E2:AF:E0:17:2C:63:A5:11:10:18:86:8A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B8E0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6346D5F6574E11F1944194D9CE1D38B0.roa
Signing time: Sun 24 May 2026 08:56:01 +0000
ROA not before: Sun 24 May 2026 08:55:57 +0000
ROA not after: Tue 30 Jun 2026 08:55:57 +0000
asID: 401783
IP address blocks: 45.197.3.0/24 maxlen: 24
45.197.8.0/24 maxlen: 24
45.197.10.0/24 maxlen: 24
45.197.11.0/24 maxlen: 24
45.198.5.0/24 maxlen: 24
45.201.35.0/24 maxlen: 24
45.201.41.0/24 maxlen: 24
45.201.42.0/24 maxlen: 24
45.201.48.0/24 maxlen: 24
45.201.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112864 (0x1b8e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 24 08:55:57 2026 GMT
Not After : Jun 30 08:55:57 2026 GMT
Subject: CN=6a12bd21-33ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:6d:cd:68:0e:13:f3:17:7e:76:f9:81:2e:a7:
4d:9a:48:b3:20:79:1d:69:0d:e3:89:59:29:65:8b:
1a:6b:31:36:ed:24:4d:db:99:f1:2d:c0:dc:6c:af:
8e:7b:a6:21:14:d4:4a:87:fa:43:26:c3:5c:86:1f:
f4:19:7e:b8:6e:4f:ee:c3:00:51:1d:29:ca:46:b7:
4d:27:03:a5:64:e4:3d:e2:23:7f:49:97:63:11:93:
cb:14:37:44:fc:66:24:8c:0a:79:d9:61:f2:4b:08:
e7:08:57:d1:d3:08:8a:8d:8b:81:c1:ba:68:83:f2:
1e:00:32:20:61:99:d9:7d:2a:e1:c7:a1:3a:0e:d1:
df:b7:5c:68:03:6b:7f:cf:a0:aa:ea:c3:ce:b3:0d:
90:66:60:b4:d1:10:e4:9b:e3:99:ef:15:7f:07:e2:
73:8f:e8:28:43:df:3e:5f:3c:d2:d0:42:43:4c:f1:
6b:b2:a4:2e:7b:57:61:fb:b6:8e:e2:2d:93:46:a0:
e9:bc:bd:22:5d:42:77:d5:4d:0a:d4:5f:38:99:b8:
47:13:44:43:8a:bd:93:d7:cd:be:78:6c:9f:ba:81:
f3:92:5a:6c:f5:92:88:b2:f1:99:c0:0e:45:43:f6:
d1:e5:67:4a:f4:d0:8f:56:72:d6:cf:a9:f0:57:4c:
54:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:7C:EB:5B:7B:C2:BE:00:E2:AF:E0:17:2C:63:A5:11:10:18:86:8A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6346D5F6574E11F1944194D9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.3.0/24
45.197.8.0/24
45.197.10.0/23
45.198.5.0/24
45.201.35.0/24
45.201.41.0-45.201.42.255
45.201.48.0/24
45.201.61.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:f1:9e:26:14:06:01:ce:7a:f4:a0:7d:ff:68:a0:83:d2:60:
15:2f:c5:bb:25:49:e8:77:44:f3:ad:7d:4e:84:a4:64:fb:76:
66:99:0e:c1:6c:06:8e:25:0c:d7:f6:1b:9b:66:fb:66:9d:76:
19:bf:80:41:14:51:42:38:d5:0f:65:11:aa:74:10:15:24:65:
75:43:a3:bc:5d:b0:9c:b4:f1:9d:e9:34:26:9a:8c:d9:77:7c:
67:65:9e:eb:7e:49:23:87:33:9a:13:ef:a8:eb:82:8e:33:20:
6d:1c:20:2c:70:7d:64:81:6e:00:8e:8b:aa:2e:53:07:99:81:
4d:5d:4b:d4:dd:40:55:e7:c1:86:7e:f4:8f:9d:ca:79:12:29:
bc:ab:b8:78:06:3c:e7:25:d9:61:f2:d7:cd:54:54:ec:bf:65:
28:5b:62:7d:02:ec:44:10:94:72:66:db:f4:35:4e:e7:2d:32:
9d:8d:8c:94:5f:fd:4c:30:c5:0f:02:ee:97:90:2b:33:c4:eb:
d7:b6:2f:6b:11:7f:78:ab:b2:a5:15:d1:6b:5c:f0:03:8f:df:
9a:9f:c9:ca:98:68:ff:e0:f8:07:b7:f8:51:a5:06:de:d3:3a:
f7:57:8e:a7:09:84:36:da:d5:49:a0:1f:3d:61:b5:90:0a:af:
87:84:15:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:07:32 2026 by rpki-client