Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8B95B168542811F1B98653A1CE1D38B0.roa
File: 8B95B168542811F1B98653A1CE1D38B0.roa (raw, json)
Hash identifier: gXuzqpU5BPia5bXayfsoAhFjQEkgsB/hWfcBr3+fbTg=
Subject key identifier: BD:E2:22:60:67:D7:F4:6B:DA:E5:62:4C:D5:E8:6E:B7:C1:6B:64:85
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B618
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8B95B168542811F1B98653A1CE1D38B0.roa
Signing time: Wed 20 May 2026 08:47:34 +0000
ROA not before: Wed 20 May 2026 08:47:30 +0000
ROA not after: Tue 20 Jul 2027 08:47:30 +0000
asID: 328608
IP address blocks: 45.202.80.0/24 maxlen: 24
45.202.81.0/24 maxlen: 24
45.202.82.0/24 maxlen: 24
45.202.83.0/24 maxlen: 24
45.202.84.0/24 maxlen: 24
45.202.85.0/24 maxlen: 24
45.202.86.0/24 maxlen: 24
45.202.87.0/24 maxlen: 24
45.202.89.0/24 maxlen: 24
45.202.115.0/24 maxlen: 24
45.202.118.0/24 maxlen: 24
45.202.126.0/24 maxlen: 24
45.207.24.0/24 maxlen: 24
45.207.25.0/24 maxlen: 24
45.207.28.0/24 maxlen: 24
45.207.30.0/24 maxlen: 24
45.207.44.0/24 maxlen: 24
45.207.47.0/24 maxlen: 24
45.207.56.0/24 maxlen: 24
45.207.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112152 (0x1b618)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 20 08:47:30 2026 GMT
Not After : Jul 20 08:47:30 2027 GMT
Subject: CN=6a0d7526-d286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0f:42:83:cf:07:bc:34:93:c0:6e:f9:51:25:
42:8f:91:57:26:57:8b:9e:9d:96:0b:d9:26:4c:9b:
cf:e9:aa:6a:c5:20:20:13:62:a8:3a:14:2b:3e:27:
e9:f3:d3:e5:56:9f:07:71:ef:3f:44:af:77:3d:f7:
ed:7b:1f:25:d3:f5:58:ed:9e:45:48:02:62:5d:2a:
c8:dc:11:a7:c9:0f:8a:92:ec:4f:5c:14:46:ea:aa:
dc:fb:02:d7:2e:05:e2:15:8e:3b:f6:f9:1c:87:43:
bc:63:2f:9c:a1:4e:46:67:a1:2b:91:92:9e:fa:cd:
25:08:1c:41:41:4e:da:b6:d5:d8:2a:54:49:6b:c8:
98:28:59:40:ee:09:33:d5:3c:48:9f:93:1e:7b:61:
8c:9c:22:d9:2e:30:e6:23:ee:64:98:31:3c:dc:ce:
13:d3:77:b0:a6:d4:63:e1:f6:18:ce:d3:cc:e8:38:
dc:85:44:8a:89:0e:aa:58:45:0a:25:6a:7f:4f:b0:
6c:b4:f2:b8:27:12:fb:ce:5a:16:e7:32:71:ed:5b:
42:e2:7a:6f:08:d8:7e:53:ba:b9:d0:54:b5:62:03:
12:ac:0a:45:91:3a:ba:eb:76:4f:e1:ea:2e:59:91:
90:ae:4c:3e:48:02:5d:7d:fa:37:fc:a4:40:58:a9:
4f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:E2:22:60:67:D7:F4:6B:DA:E5:62:4C:D5:E8:6E:B7:C1:6B:64:85
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8B95B168542811F1B98653A1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.80.0/21
45.202.89.0/24
45.202.115.0/24
45.202.118.0/24
45.202.126.0/24
45.207.24.0/23
45.207.28.0/24
45.207.30.0/24
45.207.44.0/24
45.207.47.0/24
45.207.56.0/23
Signature Algorithm: sha256WithRSAEncryption
50:2d:6a:0e:2a:7e:10:e7:17:0b:39:ee:7d:30:47:c9:71:f4:
96:dd:af:26:e4:12:4b:3e:bd:9b:14:43:ab:cf:ad:90:02:fe:
47:f1:3d:a3:60:76:e4:e2:fb:1e:21:2f:eb:23:88:d4:54:e9:
e5:eb:6c:30:51:8d:ab:14:c9:b4:9a:c8:b2:59:01:a7:ff:bd:
7f:ef:24:f7:26:15:fa:2b:5f:5b:bc:7c:6f:e5:64:d2:8f:1b:
2a:66:2d:01:4b:c3:2c:a2:5f:88:68:da:a1:f9:6e:60:08:fe:
21:91:0d:9f:bb:37:c2:ec:93:fd:35:c6:06:05:c3:8c:c1:ad:
7e:01:26:17:2f:64:22:34:b9:a5:76:28:a1:12:56:e9:42:73:
1c:50:47:5b:8b:0b:60:1a:39:b2:9d:e4:6b:53:aa:d4:f1:b7:
be:52:ef:96:55:ed:c2:9e:e3:70:36:1e:11:a7:a4:92:e2:3d:
6d:8a:30:5b:65:c3:ca:c5:b5:17:fc:23:25:ce:1e:65:a9:7a:
2c:df:6a:0a:da:75:b8:83:83:65:79:c1:31:46:06:ac:95:ed:
ac:f3:98:d5:08:81:10:86:96:3f:13:6c:d9:55:4f:02:82:a5:
f4:41:28:15:01:ee:8c:35:b7:f3:4f:f8:8e:a8:b7:a3:bf:99:
a3:63:97:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:14:19 2026 by rpki-client