Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B4CF37A66FA911F181744DA5CE1D38B0.roa
File: B4CF37A66FA911F181744DA5CE1D38B0.roa (raw, json)
Hash identifier: 9kopG458GKo7D2jSWUiEhYt5oKxP9GzIGiQY2HWGa+0=
Subject key identifier: 89:70:C4:F3:8F:60:F3:9D:79:F8:A4:4F:39:F1:44:71:41:A1:04:82
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C00C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B4CF37A66FA911F181744DA5CE1D38B0.roa
Signing time: Wed 24 Jun 2026 08:50:10 +0000
ROA not before: Wed 24 Jun 2026 08:50:05 +0000
ROA not after: Sat 01 Aug 2026 08:50:05 +0000
asID: 44559
IP address blocks: 45.192.252.0/24 maxlen: 24
45.192.253.0/24 maxlen: 24
45.192.254.0/24 maxlen: 24
45.192.255.0/24 maxlen: 24
45.195.96.0/24 maxlen: 24
45.195.97.0/24 maxlen: 24
45.195.98.0/24 maxlen: 24
45.195.99.0/24 maxlen: 24
45.195.100.0/24 maxlen: 24
45.195.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114700 (0x1c00c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 24 08:50:05 2026 GMT
Not After : Aug 1 08:50:05 2026 GMT
Subject: CN=6a3b9a42-71df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2c:d4:88:c4:a4:d6:29:07:9f:1e:8c:0f:f5:
f5:4f:5c:e1:16:e8:30:2a:c3:61:d6:c7:a1:0f:dc:
51:4a:8f:4c:20:ba:c0:7c:8a:a0:1a:e4:1e:05:1e:
22:db:79:01:18:5d:ea:65:6e:0d:a3:f3:cc:55:39:
80:45:86:35:00:d3:6b:a8:57:21:00:76:53:cc:90:
b6:d1:fb:be:30:22:61:96:75:41:c8:ed:fb:95:1c:
eb:d4:b8:6a:8c:78:d3:72:b3:11:99:a1:c0:50:b1:
29:89:6f:26:ce:3d:01:32:00:d5:28:0c:e2:b8:95:
b3:7d:dc:02:96:7e:92:2b:25:ae:3b:8b:40:b8:9c:
84:f7:25:9e:df:cc:ec:19:45:b6:32:2a:3b:19:eb:
d7:ed:4b:c7:33:f8:9f:43:e4:2d:5b:b8:f8:35:ec:
14:62:e4:ca:7b:83:ae:21:49:d1:52:72:5e:ca:e7:
a3:1e:83:4c:b4:5d:9a:c5:8f:08:58:1a:1f:ee:1c:
db:28:83:ba:69:9e:5a:49:4a:c0:95:3c:73:43:a0:
66:e7:b4:40:e9:f0:64:0d:af:c7:9f:96:49:62:c2:
e6:e7:df:88:e7:b0:3a:1d:5c:ea:95:dd:93:53:82:
54:95:75:d6:c8:9c:ad:b9:47:34:9e:ec:a8:a6:aa:
1a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:70:C4:F3:8F:60:F3:9D:79:F8:A4:4F:39:F1:44:71:41:A1:04:82
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B4CF37A66FA911F181744DA5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.252.0/22
45.195.96.0-45.195.100.255
45.195.103.0/24
Signature Algorithm: sha256WithRSAEncryption
52:9d:51:5d:0d:12:e6:80:58:f8:f9:67:a0:cd:da:75:4b:08:
45:c1:70:54:db:65:19:97:95:b2:cb:09:a7:2b:92:88:fb:9e:
1b:b8:a3:69:3f:f1:2c:d8:d8:0d:19:a5:d0:90:9c:34:36:1c:
9c:8d:f9:b1:5d:80:06:18:98:05:1c:41:17:6b:11:15:1f:6d:
e1:47:84:eb:0d:92:fb:63:fb:93:00:08:f5:6b:a2:2c:60:11:
0f:2d:62:3b:55:2f:4e:c7:e7:fd:51:44:7b:6e:2a:54:43:32:
16:69:c5:1e:45:df:1f:6b:09:4c:02:9f:6e:12:1b:02:7c:5d:
d2:c9:ff:f3:8f:de:23:9c:0f:d7:77:3f:3e:3a:35:03:a6:57:
6b:27:dc:38:53:25:73:ff:9f:f3:a4:51:3a:7b:b6:bd:a9:e7:
87:80:3a:a3:5c:ad:06:4a:8d:dd:e2:75:30:a3:30:1d:92:19:
d8:ab:5c:15:a2:26:b6:54:a7:53:ce:0c:fd:bc:8f:26:c3:b2:
a0:dd:61:b4:cb:2b:38:52:87:ec:08:8e:73:61:d7:8a:18:4a:
b6:a1:19:4c:81:b8:76:5a:89:c2:e8:53:7e:2d:7c:ab:8f:38:
50:f1:18:7c:72:4a:ef:ce:f0:67:fa:95:d5:35:cc:9e:b7:7d:
d8:ab:25:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:41:48 2026 by rpki-client