Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B4B6783C56BE11F1BF4EBEE6CE1D38B0.roa
File: B4B6783C56BE11F1BF4EBEE6CE1D38B0.roa (raw, json)
Hash identifier: jqLBOex4rXAVde2v0PZZTsmnX7mQDGEBgrmbbiCqGlo=
Subject key identifier: 38:E1:F7:DC:44:6F:46:00:DD:E9:B3:67:2F:85:3D:B9:8B:0D:B8:F0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B897
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B4B6783C56BE11F1BF4EBEE6CE1D38B0.roa
Signing time: Sat 23 May 2026 15:47:30 +0000
ROA not before: Sat 23 May 2026 15:47:25 +0000
ROA not after: Wed 19 Aug 2026 15:47:25 +0000
asID: 55020
IP address blocks: 45.195.112.0/21 maxlen: 24
45.195.120.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112791 (0x1b897)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 23 15:47:25 2026 GMT
Not After : Aug 19 15:47:25 2026 GMT
Subject: CN=6a11cc12-127d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:71:47:02:ef:86:9b:7e:e3:5b:8f:f9:40:35:
96:fc:b3:e8:73:39:b4:ef:a0:bf:c5:b1:54:7b:f2:
26:04:5c:b7:2b:74:d3:b0:16:b6:8f:50:3b:ef:db:
4e:0d:06:28:e3:3b:b7:a5:b1:c2:73:ca:07:eb:33:
ae:cd:83:78:0b:a4:ac:ae:f8:5d:cb:8e:3c:0e:e8:
64:1d:13:c3:ac:31:47:7f:e4:97:cf:47:ad:33:95:
d5:a3:8e:fa:b2:04:f3:35:43:1d:9a:e8:30:45:0a:
d2:6c:3a:e1:83:69:66:fc:dc:c7:45:a5:1d:1a:fd:
b1:75:52:65:20:50:0c:1f:4a:aa:55:15:d3:eb:12:
71:84:3e:49:59:87:12:11:1b:02:8c:ad:30:f6:d3:
8b:d2:74:0a:c9:17:eb:86:44:ed:99:38:24:2c:8f:
0a:84:4f:bd:c5:93:60:e8:e8:9f:e4:ba:3e:95:46:
6c:1c:0d:2d:55:b5:03:42:1a:3f:4f:06:0a:e5:6c:
d2:39:5c:12:d8:01:3c:6a:75:6e:b1:a5:38:ed:2e:
24:1e:3d:d1:e0:2e:c3:1f:9f:c2:09:6b:3d:5b:5f:
c4:a3:71:9c:eb:6c:3f:17:f3:97:6a:9e:63:4a:23:
12:95:77:20:e8:3f:45:22:9f:fd:bd:32:20:4f:08:
1f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:E1:F7:DC:44:6F:46:00:DD:E9:B3:67:2F:85:3D:B9:8B:0D:B8:F0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B4B6783C56BE11F1BF4EBEE6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.112.0/20
Signature Algorithm: sha256WithRSAEncryption
21:85:e7:8e:76:6a:1e:3c:ef:00:f2:b6:c8:54:b6:a2:a9:bc:
16:46:8d:ba:16:af:91:ba:bc:1b:08:f3:87:f9:e0:6a:d8:85:
7d:5d:6d:58:ea:1c:36:6e:51:68:c4:2b:c9:f8:66:bf:77:c2:
01:db:65:10:2e:6b:a9:bc:49:bb:46:51:7f:44:17:11:c6:4f:
ee:94:d6:3b:3a:35:48:93:ea:43:eb:f2:8d:a7:d0:50:9a:0c:
04:06:55:17:81:dc:c2:39:37:b0:dc:86:49:77:21:0f:a1:e4:
f4:a5:95:da:c0:d5:3a:88:44:e8:f0:46:9e:1c:db:23:1b:33:
dc:df:ca:7e:9d:0c:db:e3:60:48:f9:f8:9a:07:58:19:95:e6:
38:d0:25:fb:9a:38:01:8d:17:54:ee:9a:6a:53:97:af:ba:9c:
57:68:0c:4f:06:c1:95:1d:bb:86:f5:bf:84:96:ef:9b:75:35:
10:61:f2:39:a1:1c:63:6d:e5:26:f5:c0:6d:8c:cc:b6:fc:cc:
7f:84:98:d7:d4:3c:ec:15:38:7c:da:a6:46:2a:f7:73:63:84:
a4:e5:6f:bd:ff:d6:6f:8e:59:c6:e6:b2:81:ef:fb:05:0c:e1:
9d:76:d1:3c:d4:b8:35:b0:2f:63:de:d3:e2:14:57:9c:2e:17:
d0:58:ef:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:13:57 2026 by rpki-client