Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BA95F37A582811F19B72F707CF1D38B0.roa
File: BA95F37A582811F19B72F707CF1D38B0.roa (raw, json)
Hash identifier: Rn9lHF4W84ofnW/3OACimMEXbYXlbRzFtpK7Utqz3+g=
Subject key identifier: 81:E6:BE:72:EE:BC:A7:45:F5:A0:58:6B:AC:F6:FB:CF:A6:82:D1:89
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B984
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BA95F37A582811F19B72F707CF1D38B0.roa
Signing time: Mon 25 May 2026 10:58:58 +0000
ROA not before: Mon 25 May 2026 10:57:37 +0000
ROA not after: Sat 27 Jun 2026 10:57:37 +0000
asID: 212238
IP address blocks: 45.195.111.0/24 maxlen: 24
45.195.150.0/24 maxlen: 24
45.196.160.0/24 maxlen: 24
45.196.163.0/24 maxlen: 24
45.196.169.0/24 maxlen: 24
45.196.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113028 (0x1b984)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 25 10:57:37 2026 GMT
Not After : Jun 27 10:57:37 2026 GMT
Subject: CN=6a142b72-f439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c4:31:45:c1:86:fd:11:c0:92:83:9c:8e:f1:
e4:44:eb:89:0c:f5:ab:d7:4d:0c:67:c1:6f:f7:05:
e2:75:d0:ef:32:e6:37:bc:b8:6f:c3:df:95:fa:66:
c2:a5:99:9d:3d:30:3c:fd:32:b5:6f:21:a2:71:d9:
80:8b:e8:21:6d:61:69:55:b0:79:36:5b:7d:c0:d4:
5e:a0:ca:39:df:a5:0f:d3:e2:63:49:e5:92:4d:5b:
a4:4a:74:6e:af:b8:ef:35:a2:bf:9a:24:c3:b0:df:
1a:05:2e:2a:15:52:64:55:b8:87:7f:c4:a2:1c:ca:
9f:b5:32:68:e6:c3:f6:19:8f:07:ac:9e:7c:76:6b:
be:91:d9:5d:c0:e8:c0:d7:eb:32:7c:53:49:d6:40:
89:82:a3:eb:0f:0a:53:35:d7:a6:d6:b4:2e:12:be:
a4:a3:08:fa:73:81:d5:3b:8d:ed:dd:81:e0:ed:5b:
7f:3b:65:47:75:7a:5f:ed:2d:05:9e:34:1c:b2:19:
7d:6d:b7:20:e1:9d:f3:27:81:8e:f9:23:74:06:07:
b6:1c:b6:90:f1:e3:48:62:15:b8:40:ad:82:4e:06:
31:b0:58:0f:9d:98:b0:dc:8d:ca:18:68:b6:1c:fb:
25:e1:74:c4:a7:42:bd:92:ca:cb:b3:fa:22:58:b1:
7c:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:E6:BE:72:EE:BC:A7:45:F5:A0:58:6B:AC:F6:FB:CF:A6:82:D1:89
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BA95F37A582811F19B72F707CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.111.0/24
45.195.150.0/24
45.196.160.0/24
45.196.163.0/24
45.196.169.0/24
45.196.177.0/24
Signature Algorithm: sha256WithRSAEncryption
54:56:cb:c5:63:45:34:7d:5d:39:92:5b:49:e1:44:26:12:75:
ba:19:a1:55:6b:9e:b1:b1:b5:59:f7:dd:de:96:ae:f0:a8:7d:
90:14:3f:50:e4:62:11:5e:ba:89:50:67:55:5d:56:4e:33:17:
f6:cf:02:32:ae:f1:03:9c:60:71:d4:c9:cb:e0:96:a0:18:30:
fe:9f:24:2e:42:7e:21:11:4c:f3:62:dc:db:87:25:b5:99:40:
3e:21:6e:d5:d3:09:41:e7:b2:59:ca:ce:f4:23:8e:db:98:39:
e2:72:3a:22:19:52:46:4c:c6:41:74:00:14:51:cd:ce:b0:7e:
27:e5:d6:9e:76:57:ed:7d:03:0c:91:37:1e:a7:a4:24:31:97:
b8:c1:8e:44:99:dc:8a:a4:07:cc:f8:c5:58:6c:30:23:37:68:
a4:81:a8:02:74:ca:9e:b1:c3:10:11:b9:e3:5a:7f:3e:a1:de:
77:d3:ce:59:46:31:9d:21:c5:b2:15:72:d5:56:8a:7c:ca:a5:
4f:59:3c:dc:75:fa:2b:5d:ef:6c:60:e6:cd:b2:97:e2:42:e6:
7d:6b:3c:67:88:d9:60:23:38:13:7f:10:16:1d:93:bd:cb:6f:
b2:5b:e8:7e:c4:9b:e0:23:ff:6d:69:ae:8d:7d:d0:2a:1b:d8:
a8:c8:5b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:14:03 2026 by rpki-client