Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6BF0A2C541F11F18898FFEACE1D38B0.roa
File: C6BF0A2C541F11F18898FFEACE1D38B0.roa (raw, json)
Hash identifier: 9+14pd838Ak/VzHMon5ZPfrV5XhI7QXpwmvle5llKfU=
Subject key identifier: B9:B6:8B:D3:23:7E:E9:17:17:86:EC:A4:9C:08:A8:62:73:29:A1:7F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B608
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6BF0A2C541F11F18898FFEACE1D38B0.roa
Signing time: Wed 20 May 2026 07:44:48 +0000
ROA not before: Wed 20 May 2026 07:44:44 +0000
ROA not after: Wed 19 Aug 2026 07:44:44 +0000
asID: 400619
IP address blocks: 45.195.112.0/21 maxlen: 24
45.195.120.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112136 (0x1b608)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 20 07:44:44 2026 GMT
Not After : Aug 19 07:44:44 2026 GMT
Subject: CN=6a0d6670-5bda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e2:c4:22:81:97:2f:01:99:2c:2e:f8:af:0c:
11:dc:b3:42:49:1a:30:d9:03:d8:51:ad:73:82:c3:
52:ca:76:b0:fe:7e:46:b1:58:d0:4a:5b:e9:32:0a:
2a:f2:e8:04:5b:2a:63:b2:b7:ff:be:6c:59:23:b5:
4b:77:58:25:1d:d1:4e:d6:45:38:bf:bc:01:e4:9b:
8e:f8:d7:bc:2e:56:ad:41:cc:c7:61:8b:27:12:9d:
27:a6:71:60:05:45:53:33:b1:85:85:90:9c:49:c1:
7e:44:0a:8e:95:3e:ba:3e:b4:0d:90:98:9e:85:fa:
ce:35:fd:b5:ee:76:ab:d5:21:65:02:33:32:2c:58:
14:7b:fe:fe:f3:06:bd:c2:17:ef:e9:d1:e0:6e:16:
05:a3:31:ed:fa:1c:3e:62:3f:a7:31:1a:10:05:f4:
eb:a1:0f:82:d4:0e:e5:ed:f7:b0:10:56:9f:f0:21:
0c:33:32:0d:60:da:39:17:95:e8:26:fa:83:94:1d:
e3:a5:84:5e:a8:66:f6:f8:da:13:06:ae:bc:37:74:
64:b7:7e:41:fd:4a:f4:70:5f:73:a0:ec:40:32:04:
86:71:0f:31:4d:99:a9:f2:b3:ba:50:e5:2f:15:6c:
a3:fc:4e:01:f1:ae:be:b8:66:89:ed:e3:fd:13:e4:
07:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B6:8B:D3:23:7E:E9:17:17:86:EC:A4:9C:08:A8:62:73:29:A1:7F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C6BF0A2C541F11F18898FFEACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.112.0/20
Signature Algorithm: sha256WithRSAEncryption
9c:b2:14:a1:08:6c:b7:92:6d:37:e5:04:06:52:ce:b6:c9:1c:
75:69:5c:e9:f2:c8:7d:81:6b:7d:1d:e2:46:3a:87:8b:ec:90:
5e:e0:81:21:c4:6f:4e:55:05:a8:a0:c8:1c:be:b1:30:66:1b:
da:3c:e1:b6:bd:0b:d4:23:e7:10:68:5d:8d:a5:6b:c3:82:80:
7c:a3:05:a3:91:ce:26:16:f3:03:bf:0c:c5:a1:de:06:41:4e:
f8:db:85:4a:10:91:fc:15:f2:e9:ba:b6:f5:bf:bf:21:1e:45:
58:4c:b0:af:06:16:41:99:38:cf:1b:f5:34:78:c2:40:03:25:
a5:d9:fb:51:ab:58:81:c1:b8:1f:c7:b0:fb:e7:a9:cf:d9:53:
65:9b:44:12:27:31:23:64:82:e4:b8:cf:ab:08:d4:e4:1e:ff:
1f:4e:60:e6:f0:fa:17:97:2c:65:53:31:72:fc:d1:c7:c8:09:
d4:5c:e0:00:30:a7:2b:6e:8f:de:70:eb:07:08:83:e7:2a:59:
ad:82:b0:e2:d5:7c:18:71:a7:48:c7:aa:fe:b9:8d:ad:27:bf:
87:f8:f8:9b:2d:09:93:18:4a:d4:9e:dc:c0:be:2c:97:9a:d0:
01:e6:50:56:19:13:7d:65:0c:68:f9:93:82:ab:20:71:6a:79:
19:cf:1d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:06:51 2026 by rpki-client