Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BF397BD4562211F190DC53AACE1D38B0.roa
File: BF397BD4562211F190DC53AACE1D38B0.roa (raw, json)
Hash identifier: FlRXZpCsakiDefdy0NK3LmCy1lBTQzv1+x85PHVSeLY=
Subject key identifier: EB:7A:CA:6F:9B:AC:AC:57:AF:ED:74:06:7B:24:38:A9:37:3F:3B:61
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B848
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BF397BD4562211F190DC53AACE1D38B0.roa
Signing time: Fri 22 May 2026 21:11:07 +0000
ROA not before: Fri 22 May 2026 21:11:02 +0000
ROA not after: Tue 22 May 2029 21:11:02 +0000
asID: 17561
IP address blocks: 45.192.2.0/24 maxlen: 24
45.195.4.0/24 maxlen: 24
45.195.5.0/24 maxlen: 24
45.195.6.0/24 maxlen: 24
45.195.7.0/24 maxlen: 24
45.196.80.0/24 maxlen: 24
45.196.81.0/24 maxlen: 24
45.196.82.0/24 maxlen: 24
45.196.83.0/24 maxlen: 24
45.196.84.0/24 maxlen: 24
45.196.85.0/24 maxlen: 24
45.196.86.0/24 maxlen: 24
45.196.87.0/24 maxlen: 24
45.198.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112712 (0x1b848)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 22 21:11:02 2026 GMT
Not After : May 22 21:11:02 2029 GMT
Subject: CN=6a10c66a-dc38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8b:62:b9:65:50:60:1f:e1:1e:9a:72:67:4c:
10:c3:da:f8:cb:ad:68:a8:ad:1a:b7:77:66:71:f7:
43:d4:15:3a:d3:fd:84:79:b5:8d:5d:92:89:d9:db:
e2:b8:c6:bc:92:66:74:4b:01:53:f6:f6:10:88:8b:
25:1d:9d:3c:67:70:e4:17:69:a6:5f:02:60:ad:cc:
28:c3:b1:5b:8f:94:ac:a0:90:65:78:a1:4c:60:fc:
81:b5:40:83:01:84:a3:19:e6:e5:08:81:14:fc:ea:
73:cd:b8:61:b0:fb:69:86:84:96:5d:30:ca:1f:85:
34:6f:61:db:a1:03:26:c2:d7:a0:0d:0d:db:26:a4:
1e:26:4f:54:95:68:e1:95:55:40:a5:00:0a:f0:cb:
13:8e:25:47:9c:04:2c:56:1a:c3:13:96:89:70:83:
4d:6e:22:5c:6b:06:fb:21:08:42:6b:ad:cd:b6:da:
de:ed:22:fd:78:18:a9:31:4a:24:e9:16:ec:73:03:
6b:eb:e7:ca:75:3f:ad:29:cb:68:10:26:20:b2:88:
4c:14:22:83:59:48:2b:38:e2:91:6f:0a:12:7d:2e:
9c:98:37:39:54:09:a1:4c:67:92:59:cf:0d:f9:e8:
1e:71:de:ba:e4:8d:d8:62:56:fc:1f:ef:91:7b:a3:
ad:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:7A:CA:6F:9B:AC:AC:57:AF:ED:74:06:7B:24:38:A9:37:3F:3B:61
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BF397BD4562211F190DC53AACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.2.0/24
45.195.4.0/22
45.196.80.0/21
45.198.74.0/24
Signature Algorithm: sha256WithRSAEncryption
27:d5:32:06:fb:5a:5f:35:b9:88:5e:e4:ea:67:87:0f:41:b3:
e2:1c:5d:a7:d8:1d:0b:98:70:52:89:d5:6e:61:5b:cb:9f:fa:
66:49:e2:8c:13:18:17:12:4f:e2:78:1d:bd:d7:f4:75:4f:f1:
37:b5:02:27:d1:20:22:d8:8c:b2:3d:bd:b4:c0:63:07:ab:10:
20:f6:8d:48:a7:c4:35:5f:5d:2b:5a:09:96:58:dd:7c:bf:1c:
f6:2e:f1:88:28:53:7e:55:b8:8e:db:8d:b8:f8:90:5e:fb:44:
69:f9:55:d7:aa:78:3c:5f:f7:85:d5:d3:c1:1b:a8:77:f0:3d:
75:c1:bf:4f:28:e1:b9:8c:2b:43:03:17:39:b1:05:f7:67:fc:
0b:6e:ed:96:f5:3d:fe:1f:98:07:b7:c0:35:a4:ff:ea:58:7d:
c8:bc:64:e2:84:11:10:ca:13:7d:2f:eb:f7:40:9a:5c:f1:fc:
30:64:78:91:65:b8:d3:84:a0:5c:46:2c:e8:d8:90:ef:13:62:
25:57:7d:1b:8b:12:e8:5f:48:b4:d5:7f:03:9f:51:0a:fc:50:
a4:76:17:8e:b0:f0:b4:e2:19:97:fe:c9:3b:65:ed:61:2d:90:
b2:83:14:0c:b6:e3:94:5d:49:87:62:e7:e7:67:f4:e4:16:05:
ac:06:13:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:28:57 2026 by rpki-client