Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7AEED62A568D11F1A58CACC3CE1D38B0.roa
File: 7AEED62A568D11F1A58CACC3CE1D38B0.roa (raw, json)
Hash identifier: oQJ8OK3fW5YifQ4YGx6OZdjpwMIoRpCNaJdXsG36hfc=
Subject key identifier: E7:9A:FC:60:95:FD:3E:30:BE:74:02:5D:32:A0:7C:69:FF:27:FB:5F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B870
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7AEED62A568D11F1A58CACC3CE1D38B0.roa
Signing time: Sat 23 May 2026 09:55:08 +0000
ROA not before: Sat 23 May 2026 09:55:03 +0000
ROA not after: Fri 10 Jul 2026 09:55:03 +0000
asID: 9304
IP address blocks: 45.196.206.0/23 maxlen: 24
45.196.228.0/24 maxlen: 24
45.196.250.0/23 maxlen: 24
45.196.252.0/23 maxlen: 24
45.196.254.0/23 maxlen: 24
45.198.183.0/24 maxlen: 24
45.204.48.0/24 maxlen: 24
45.204.49.0/24 maxlen: 24
45.204.50.0/24 maxlen: 24
45.204.51.0/24 maxlen: 24
45.204.52.0/24 maxlen: 24
45.204.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112752 (0x1b870)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 23 09:55:03 2026 GMT
Not After : Jul 10 09:55:03 2026 GMT
Subject: CN=6a11797c-47c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:96:1c:5d:18:a5:17:6d:cf:8d:6d:46:0c:ca:
7e:76:c6:14:64:24:1f:f6:b5:22:79:b4:15:d5:f8:
cf:bd:bc:41:96:ae:73:75:ce:1f:56:c0:3b:3f:fa:
cc:16:76:3f:f6:b6:cc:78:90:63:47:99:3c:96:e4:
c5:21:71:04:9d:04:10:2e:45:ea:f2:5d:13:29:2d:
bd:79:a4:4a:b4:4d:65:ad:5e:51:fb:1d:ea:f7:c0:
ff:97:c7:44:69:cb:7e:a1:00:7f:60:ad:5a:b3:a7:
65:0c:39:b3:76:0f:6c:02:91:47:14:95:04:66:95:
01:fa:ca:1d:99:69:57:e6:e8:1a:c4:42:13:9d:8e:
8a:c8:89:db:f2:05:85:e2:58:61:43:94:99:dd:db:
9c:e4:03:fa:19:c4:cf:da:c0:e9:60:59:1d:f0:fc:
ee:95:92:36:58:49:80:43:e4:d6:4b:50:e1:1d:a6:
b7:d3:88:03:a0:6a:34:d6:21:b9:21:9a:a4:f2:41:
c6:eb:c1:77:31:5d:17:e2:38:84:6b:7e:5c:4c:cd:
02:7b:e8:5b:b4:c4:11:14:26:8b:b6:a3:f6:c3:0f:
f6:94:e9:24:1f:51:54:fc:73:31:f2:1f:d3:bd:f3:
3d:f3:33:50:3a:5b:ec:54:15:69:89:4a:3f:a6:0c:
20:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:9A:FC:60:95:FD:3E:30:BE:74:02:5D:32:A0:7C:69:FF:27:FB:5F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7AEED62A568D11F1A58CACC3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.206.0/23
45.196.228.0/24
45.196.250.0-45.196.255.255
45.198.183.0/24
45.204.48.0-45.204.53.255
Signature Algorithm: sha256WithRSAEncryption
8d:92:64:b3:90:f0:02:68:44:81:a8:ef:05:68:06:47:9a:9c:
45:77:7c:04:a3:c7:42:29:0f:96:ec:c9:f3:43:d4:18:52:76:
17:65:3f:d7:83:3a:b7:12:78:7f:53:2b:ec:d4:a1:69:91:64:
29:3e:b1:2f:73:f4:35:4f:eb:d5:be:58:0e:07:65:96:f0:e4:
28:32:f5:36:9e:42:95:0c:31:68:52:91:5e:bf:be:b4:c1:8b:
58:ae:b9:71:fe:1a:b6:1a:cc:f2:d8:ca:de:af:9b:ab:a5:be:
fb:d7:5d:84:29:e5:bc:e6:52:31:03:2e:f1:b5:e8:be:db:ec:
f5:a9:c6:ed:14:1a:50:85:bf:2e:03:c7:5e:51:99:03:dc:db:
0b:d0:25:9a:51:33:05:0d:e6:be:67:d9:48:d0:d1:7c:9d:4c:
87:6b:b2:f3:3c:dc:2a:6c:ea:a6:fe:40:90:39:d1:d3:90:6e:
91:e5:b7:26:c8:e3:8c:e4:5f:14:ee:f6:25:61:f6:43:1f:c9:
d6:72:3e:26:89:6b:bc:37:b4:84:c6:4a:a5:e2:2e:76:20:43:
71:71:1b:5a:17:b5:ae:ad:82:07:0f:43:bf:a2:fe:b2:a1:5a:
4d:70:70:45:96:15:ba:ca:e7:9d:e7:45:7d:86:48:54:b3:d1:
46:0a:bd:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 20:52:58 2026 by rpki-client