Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B1E7C6DC2E9211F1BE217B94DAE4EC9C.roa
File: B1E7C6DC2E9211F1BE217B94DAE4EC9C.roa (raw, json)
Hash identifier: EsNzwFUy2QiJdBLhFO0YOWN6l2a0aZ+OOCE02h3Csds=
Subject key identifier: 47:18:D4:56:33:74:58:BB:CE:E7:E8:A9:AE:F6:F1:DA:BC:EE:DD:16
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A949
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B1E7C6DC2E9211F1BE217B94DAE4EC9C.roa
Signing time: Thu 02 Apr 2026 12:51:41 +0000
ROA not before: Thu 02 Apr 2026 12:51:36 +0000
ROA not after: Sun 10 May 2026 12:51:36 +0000
asID: 135377
IP address blocks: 45.195.216.0/24 maxlen: 24
45.195.217.0/24 maxlen: 24
45.195.218.0/24 maxlen: 24
45.195.219.0/24 maxlen: 24
45.195.220.0/24 maxlen: 24
45.195.221.0/24 maxlen: 24
45.195.222.0/24 maxlen: 24
45.195.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Apr 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108873 (0x1a949)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 2 12:51:36 2026 GMT
Not After : May 10 12:51:36 2026 GMT
Subject: CN=69ce665d-56a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:78:1d:bb:00:ac:40:ff:98:72:77:d3:89:a5:
6e:89:e5:de:dd:5b:38:21:04:a5:ee:e0:67:36:14:
b2:ea:a6:98:69:7a:f6:78:04:05:6e:14:e3:de:48:
8e:bb:ee:ce:4d:01:20:f6:ba:1e:2b:ee:ea:5b:e9:
0f:e2:ab:09:ea:f4:00:b0:c1:53:53:d9:7e:4f:34:
cc:98:a1:83:6b:46:b8:f8:08:34:c4:14:5c:c2:1f:
0d:1b:2a:fb:81:b4:b2:f8:16:09:ed:6f:93:fd:35:
32:f7:83:2d:95:49:9f:6b:66:db:91:93:f2:c0:1c:
f4:2b:0e:3a:3c:11:fa:8f:4a:41:43:a4:28:97:de:
6c:87:a8:46:f5:fd:dc:64:d5:17:8f:d6:cc:64:62:
d6:99:68:48:9a:8d:0a:a3:d5:b2:b2:3e:06:e7:5c:
82:43:6b:ab:b0:95:e9:a9:f9:a3:71:2a:d9:61:be:
d5:00:35:e6:18:40:48:e6:b9:25:25:df:f9:d5:d7:
07:ae:ff:b8:14:cb:ce:5e:90:0d:58:5a:e2:32:fa:
b4:52:59:bf:a4:3a:13:70:08:56:06:12:9a:59:5a:
a2:85:61:d1:a8:ba:25:b9:e9:91:d9:22:54:e2:43:
64:06:5d:2e:47:38:ee:d8:bf:81:78:0d:67:bc:f0:
d9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:18:D4:56:33:74:58:BB:CE:E7:E8:A9:AE:F6:F1:DA:BC:EE:DD:16
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B1E7C6DC2E9211F1BE217B94DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.216.0/21
Signature Algorithm: sha256WithRSAEncryption
55:65:97:7a:5e:b0:6d:f9:0c:78:94:0b:45:20:dc:61:2b:72:
9b:03:5d:fc:42:22:1b:65:82:40:44:86:57:e1:e7:09:10:d9:
25:02:5e:c6:be:38:d5:5c:02:62:47:94:dd:e1:e0:6f:5c:f9:
4a:a9:65:33:d1:70:90:3b:26:e4:4f:64:d5:07:0c:42:ec:35:
50:ca:f1:b1:80:f0:7e:2d:bd:81:05:04:0c:a7:48:2f:ad:89:
f8:28:97:4f:6d:c8:6f:91:e0:8a:62:96:89:33:1e:1a:56:b2:
56:c5:21:71:b1:55:b0:7d:e0:26:96:2f:ba:6b:42:86:47:08:
8c:11:fb:97:fe:80:d2:64:55:af:f2:42:08:bb:f3:c3:3e:1b:
12:fb:54:7c:52:b5:36:e6:e8:58:9e:26:3f:f1:1e:6f:a4:0f:
2e:e7:9b:05:5c:e2:96:e0:b3:e9:12:60:ca:a4:a5:1e:5b:5c:
16:8f:6f:9d:ad:f9:bc:a8:d9:f3:e9:25:a5:49:bc:80:50:f2:
9b:23:4e:8b:98:ef:cb:c7:fc:8f:71:c4:50:41:30:15:fa:88:
69:f7:14:b6:ab:6a:3c:eb:63:3a:26:17:b8:9a:38:ae:43:6f:
71:fc:7c:3e:f9:46:83:4a:8a:d2:e2:48:89:4f:45:6d:4c:37:
9b:8b:59:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 14:29:36 2026 by rpki-client