Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/86C87BA25B3F11F181962ACFCE1D38B0.roa
File: 86C87BA25B3F11F181962ACFCE1D38B0.roa (raw, json)
Hash identifier: AAVMZcdSHbdiI8gjQOwNV2+WbwxHsv2o3jfC8680vEQ=
Subject key identifier: 97:92:1D:4E:D4:E2:FF:30:AF:3A:77:39:59:52:50:FB:AB:6F:65:8D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BAB4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/86C87BA25B3F11F181962ACFCE1D38B0.roa
Signing time: Fri 29 May 2026 09:19:43 +0000
ROA not before: Fri 29 May 2026 09:19:38 +0000
ROA not after: Sun 28 Jun 2026 09:19:38 +0000
asID: 202656
IP address blocks: 45.192.59.0/24 maxlen: 24
45.192.63.0/24 maxlen: 24
45.195.101.0/24 maxlen: 24
45.195.102.0/24 maxlen: 24
45.195.161.0/24 maxlen: 24
45.195.162.0/24 maxlen: 24
45.195.163.0/24 maxlen: 24
45.195.164.0/24 maxlen: 24
45.195.165.0/24 maxlen: 24
45.195.167.0/24 maxlen: 24
45.195.168.0/24 maxlen: 24
45.195.170.0/24 maxlen: 24
45.195.174.0/24 maxlen: 24
45.195.175.0/24 maxlen: 24
45.195.176.0/24 maxlen: 24
45.195.189.0/24 maxlen: 24
45.195.190.0/24 maxlen: 24
45.202.192.0/24 maxlen: 24
45.202.193.0/24 maxlen: 24
45.202.213.0/24 maxlen: 24
45.207.2.0/24 maxlen: 24
45.207.3.0/24 maxlen: 24
45.207.6.0/24 maxlen: 24
45.207.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113332 (0x1bab4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 29 09:19:38 2026 GMT
Not After : Jun 28 09:19:38 2026 GMT
Subject: CN=6a195a2f-0949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9c:4b:e9:71:1d:2f:ea:95:ae:34:e2:b9:60:
f5:86:1d:30:89:97:f4:32:13:9e:89:e4:6c:ab:79:
81:85:c7:b6:ce:4b:b3:93:a4:33:a6:1d:5d:dd:49:
b7:4a:e9:e9:fa:df:43:b4:12:07:38:65:9b:d4:d5:
e3:97:6c:01:34:53:ea:a7:a0:b1:fa:ed:69:4f:eb:
cd:f7:58:e9:69:1a:1f:57:41:7b:1d:3c:5b:37:9f:
f7:da:1e:4c:fa:3f:ee:0e:21:29:44:e2:ba:e9:ed:
f5:27:7a:4a:01:0d:0c:e7:3d:28:fc:50:73:3a:bd:
a4:14:46:68:13:56:00:d9:76:00:eb:5f:45:31:0c:
e1:62:99:5f:62:e3:8c:5c:47:85:bd:31:01:11:5e:
c7:50:e0:88:47:11:30:e0:74:eb:bb:84:40:0a:3d:
3c:df:c8:ea:88:ec:a8:a6:a0:b4:b9:9b:5c:78:00:
03:75:39:13:4c:dc:b6:9f:2a:4b:cb:20:73:cc:fd:
a6:39:7c:2a:2a:a8:cd:58:95:6a:36:e6:15:2e:6b:
c2:3b:d1:7a:95:ee:d7:76:f7:40:ed:fa:d5:13:7a:
c5:41:3a:0f:83:62:94:34:a5:1f:30:24:3b:c5:f5:
90:56:c5:41:4e:77:b7:2e:1f:b9:75:ca:42:bd:57:
c2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:92:1D:4E:D4:E2:FF:30:AF:3A:77:39:59:52:50:FB:AB:6F:65:8D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/86C87BA25B3F11F181962ACFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.59.0/24
45.192.63.0/24
45.195.101.0-45.195.102.255
45.195.161.0-45.195.165.255
45.195.167.0-45.195.168.255
45.195.170.0/24
45.195.174.0-45.195.176.255
45.195.189.0-45.195.190.255
45.202.192.0/23
45.202.213.0/24
45.207.2.0/23
45.207.6.0/24
45.207.148.0/24
Signature Algorithm: sha256WithRSAEncryption
09:75:00:67:be:80:38:36:12:b8:9c:7d:34:0c:7e:b5:8f:12:
3c:b4:18:8c:13:92:74:6f:67:e9:21:c1:7d:05:e1:eb:96:2f:
6d:49:be:c5:71:8d:d0:34:2b:9e:98:2f:61:63:1f:cf:a5:c7:
19:d8:4d:a8:f7:18:4f:f7:d3:4b:96:67:75:a1:4b:30:c9:21:
16:79:fd:e5:eb:9f:b8:e6:99:0a:be:0c:59:e5:33:5d:c3:65:
c0:68:eb:bf:ea:a9:91:46:3f:45:eb:5e:3d:7c:b8:4e:f3:a7:
62:da:fc:44:ab:f5:fd:a5:e6:22:ff:78:90:ad:c5:b3:29:c9:
8c:87:97:0f:d6:32:38:08:f8:a5:3e:e8:00:fa:ea:cb:05:29:
dc:ab:bf:c1:c1:1a:57:41:67:d2:d8:38:78:cd:8c:88:71:c4:
01:20:33:56:5b:85:ae:19:13:69:f5:11:a0:f2:fc:7d:76:e3:
6a:bf:e2:e8:5b:37:95:11:92:3d:41:c4:65:f7:06:38:b6:34:
81:74:d3:38:01:fc:bd:85:57:b7:98:e2:35:c2:64:c9:4c:b2:
a1:ea:5f:31:30:0b:31:ee:ff:c9:c8:b0:53:b4:57:0b:69:5f:
9c:ef:2e:67:ad:49:1f:25:c8:0a:5e:2b:f1:46:81:0b:d9:62:
4d:76:40:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:06:48 2026 by rpki-client