Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C72CC4824ED311F18675CDB1CE1D38B0.roa
File: C72CC4824ED311F18675CDB1CE1D38B0.roa (raw, json)
Hash identifier: 0Q3Avr2jsZAa2HttsrrtM4xRC9jpr6wt1V1i5qloQlg=
Subject key identifier: 8E:E9:F5:6A:C7:F4:CF:FF:02:46:8F:9A:D8:05:A2:A5:E8:78:1D:23
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B437
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C72CC4824ED311F18675CDB1CE1D38B0.roa
Signing time: Wed 13 May 2026 13:58:12 +0000
ROA not before: Wed 13 May 2026 13:58:07 +0000
ROA not after: Wed 17 Jun 2026 13:58:07 +0000
asID: 22773
IP address blocks: 45.192.4.0/22 maxlen: 24
45.194.75.0/24 maxlen: 24
45.194.76.0/23 maxlen: 24
45.194.78.0/24 maxlen: 24
45.194.82.0/24 maxlen: 24
45.194.84.0/24 maxlen: 24
45.194.121.0/24 maxlen: 24
45.196.116.0/22 maxlen: 24
45.197.28.0/22 maxlen: 24
45.202.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 22 May 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111671 (0x1b437)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 13 13:58:07 2026 GMT
Not After : Jun 17 13:58:07 2026 GMT
Subject: CN=6a048373-25b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f6:50:c2:f7:76:c5:8b:b9:28:f1:41:19:06:
0e:7b:27:39:31:2f:33:92:f1:e7:57:19:3b:b0:68:
e3:4f:25:83:57:f0:66:b4:99:cc:22:53:17:9c:57:
71:2d:55:2a:49:be:b1:10:35:74:a7:fe:63:57:20:
d9:da:c6:9c:62:c1:6f:f1:b1:5b:79:df:75:25:75:
e1:fb:b1:f2:64:8d:57:ba:da:06:3c:70:fe:6b:be:
e6:8f:4a:84:ae:10:d3:98:33:2b:d4:e7:50:32:2f:
e2:66:43:ef:73:5c:4b:9a:ab:8f:0f:37:b0:0b:e8:
e7:b2:23:15:9d:78:88:e8:c2:6d:85:46:48:6a:9a:
00:1d:11:35:50:cb:b4:20:57:46:e3:f6:4f:5b:dc:
27:ff:21:ec:11:ea:b9:eb:3c:ae:3f:2f:39:d4:53:
c6:f5:32:3f:8b:c3:6a:92:e4:0d:f1:8b:25:ca:e5:
0b:be:1b:54:bb:b6:3e:e2:3b:63:f0:27:0f:72:32:
34:69:83:3c:3a:1b:e4:f8:42:f2:81:b6:34:26:74:
3e:d5:4d:5f:0f:5b:7d:65:ea:d5:e7:1e:85:18:2f:
e5:fe:c9:01:d8:83:98:e2:2d:94:cf:48:61:62:3c:
04:dc:cd:53:8e:2d:63:7e:72:8d:b5:81:df:06:52:
f9:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:E9:F5:6A:C7:F4:CF:FF:02:46:8F:9A:D8:05:A2:A5:E8:78:1D:23
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C72CC4824ED311F18675CDB1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.4.0/22
45.194.75.0-45.194.78.255
45.194.82.0/24
45.194.84.0/24
45.194.121.0/24
45.196.116.0/22
45.197.28.0/22
45.202.106.0/24
Signature Algorithm: sha256WithRSAEncryption
66:6b:c0:c1:77:22:f7:59:43:25:7b:31:80:09:9f:c9:b2:38:
7e:9e:15:82:eb:83:91:f3:94:e6:3b:b1:8b:d1:3c:74:4d:e6:
5d:8f:aa:59:93:0c:b1:15:ac:8e:67:a5:87:ea:1e:3f:c4:ab:
d4:82:68:75:d5:bf:a0:ab:57:5f:fa:d6:54:3e:d2:7a:1c:12:
e3:99:70:d3:54:ec:14:75:fc:af:d8:df:bc:af:da:2b:79:f9:
ee:64:67:80:5d:08:5d:f2:ef:a6:42:62:f6:53:a0:7f:c3:a8:
0e:50:b5:76:ee:7c:e1:a5:36:41:d0:56:2c:c8:5c:8e:39:e7:
ce:ac:7c:2e:b9:65:7b:ca:9e:ce:4f:ee:a2:be:6b:66:8e:d7:
a3:45:37:c3:f8:24:a6:01:7f:49:fb:da:37:51:08:b2:36:0b:
8e:ba:55:c1:ea:4e:5b:61:17:11:72:4b:96:87:ea:a7:88:24:
60:67:fb:a0:b1:87:ec:57:e5:72:1b:de:8b:f5:b8:03:7e:bc:
c1:2b:22:51:1f:7b:c1:32:f3:a6:69:1c:4d:a4:ac:b1:ae:09:
04:b5:92:db:f0:67:28:60:81:25:3f:29:ff:4e:e6:73:5d:9e:
b2:67:38:27:a5:df:42:2e:68:67:bf:70:5d:aa:a4:6a:f9:b5:
90:64:3a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 20 21:19:13 2026 by rpki-client