Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B9B011F6553B11F1AE7881A9CE1D38B0.roa
File: B9B011F6553B11F1AE7881A9CE1D38B0.roa (raw, json)
Hash identifier: ORX2JLNfWgDju2qxPAXSSnSihY2KxoRVfGcIle54L54=
Subject key identifier: 26:77:9E:45:BA:54:84:C0:72:A6:5D:9E:5F:F3:17:60:30:E8:DA:20
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B77F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B9B011F6553B11F1AE7881A9CE1D38B0.roa
Signing time: Thu 21 May 2026 17:37:24 +0000
ROA not before: Thu 21 May 2026 17:37:19 +0000
ROA not after: Tue 23 Jun 2026 17:37:19 +0000
asID: 131471
IP address blocks: 45.195.130.0/24 maxlen: 24
45.195.131.0/24 maxlen: 24
45.195.194.0/24 maxlen: 24
45.195.195.0/24 maxlen: 24
45.195.210.0/24 maxlen: 24
45.195.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112511 (0x1b77f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 21 17:37:19 2026 GMT
Not After : Jun 23 17:37:19 2026 GMT
Subject: CN=6a0f42d3-a5a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9f:b5:fe:87:ab:d4:9d:cc:c1:5f:10:e2:d9:
8e:6a:8f:5d:26:18:bd:0a:87:78:d7:33:d7:2d:c7:
d4:2a:4a:19:d5:df:00:71:2d:9b:8b:c9:55:fa:b4:
b1:a2:18:10:2c:33:36:6f:86:93:08:bb:93:bf:d2:
8b:92:52:93:cd:cd:d7:21:49:0d:c4:4b:70:6f:9d:
40:d1:2f:06:a0:0b:bf:46:8d:c2:13:74:6a:5b:d2:
db:56:77:73:ef:5d:61:1f:e7:49:7f:21:e2:e9:cc:
17:21:06:3d:92:0a:56:52:62:63:54:bf:08:8d:dc:
75:79:a3:3e:cf:02:54:af:51:91:19:4f:8e:0c:a2:
92:aa:04:53:0b:83:d6:27:9d:16:5f:8e:be:d0:61:
d8:83:07:ab:36:57:14:30:a9:04:ee:d4:31:d3:99:
d0:c7:98:18:91:63:00:de:c7:bc:7f:06:79:57:0c:
7d:ca:da:1c:3d:89:0d:92:4b:9a:07:b8:36:33:be:
c9:14:19:bb:5a:e7:75:7f:bb:0a:b3:3f:a9:05:01:
0b:b8:66:37:fc:cc:3f:c0:c8:24:13:9e:b5:eb:06:
e1:51:19:18:69:15:58:ef:47:24:e7:a2:6d:ad:97:
4e:57:fb:77:cb:98:ec:41:82:30:d9:2c:28:fa:74:
11:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:77:9E:45:BA:54:84:C0:72:A6:5D:9E:5F:F3:17:60:30:E8:DA:20
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B9B011F6553B11F1AE7881A9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.130.0/23
45.195.194.0/23
45.195.210.0/23
Signature Algorithm: sha256WithRSAEncryption
91:e8:78:cd:cb:b9:20:b6:04:fd:45:7b:aa:7f:ed:22:a0:2f:
04:e3:75:48:6f:2e:c3:41:ec:ab:fd:1c:69:22:75:40:5c:ac:
e6:2f:9c:84:ec:1e:00:ce:93:11:ea:de:e6:5b:48:26:82:5c:
00:f8:ca:8e:76:d7:bd:38:13:b5:97:e1:ec:3e:e2:d6:e1:8f:
2d:cd:76:01:5c:0f:a9:d0:5b:68:81:90:2e:32:15:22:1e:bc:
75:29:6a:a6:b1:50:ac:de:af:8e:aa:0f:73:16:c1:97:09:6c:
ca:b4:a7:3d:14:ce:3f:7b:67:2c:c2:43:c0:59:44:2e:41:74:
6c:07:ab:8e:a0:eb:b2:c0:96:2f:0d:bd:68:a0:20:26:00:7a:
f5:95:0e:79:aa:f6:bf:51:eb:bd:da:1c:0d:59:91:a7:96:52:
87:1d:e1:7d:05:57:6e:17:8c:55:cb:e3:3e:a2:5c:be:28:4f:
8c:56:c1:0c:84:c6:11:ed:0a:ae:90:5f:b7:ef:98:36:6b:91:
e2:51:b2:77:f8:ae:91:76:e1:1d:51:19:14:ba:a7:99:28:74:
f8:87:e7:27:74:fa:df:5c:b2:c5:0c:b3:a6:09:95:0e:36:72:
d1:08:9b:af:7a:8b:34:5e:f5:d5:71:cc:a1:8a:ba:21:a1:21:
30:b0:23:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:07:30 2026 by rpki-client