Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C81634D6554611F19948BBEACE1D38B0.roa
File: C81634D6554611F19948BBEACE1D38B0.roa (raw, json)
Hash identifier: 97uwVuHZugqaKZhIgluGipr8oZ0y4U1aclFe8smqQbA=
Subject key identifier: E9:F9:69:19:6A:E0:62:C9:D7:B8:C9:9B:7A:2F:63:8D:78:80:A3:A0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B797
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C81634D6554611F19948BBEACE1D38B0.roa
Signing time: Thu 21 May 2026 18:56:32 +0000
ROA not before: Thu 21 May 2026 18:56:27 +0000
ROA not after: Fri 10 Jul 2026 18:56:27 +0000
asID: 2914
IP address blocks: 45.192.232.0/24 maxlen: 24
45.192.244.0/24 maxlen: 24
45.201.12.0/22 maxlen: 24
45.202.74.0/24 maxlen: 24
45.204.149.0/24 maxlen: 24
45.204.150.0/24 maxlen: 24
45.204.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 25 May 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112535 (0x1b797)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 21 18:56:27 2026 GMT
Not After : Jul 10 18:56:27 2026 GMT
Subject: CN=6a0f5560-9598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:2c:34:37:46:d1:d6:ef:d6:fb:23:12:da:35:
31:e1:19:7f:c8:db:14:3e:95:65:9c:df:96:d5:f8:
15:44:d2:5a:e2:fe:52:2f:53:22:ef:b9:0d:ac:1a:
20:62:05:91:a8:21:9b:7b:be:39:f2:31:f7:bf:09:
15:40:d8:0f:62:28:38:f8:48:bc:90:b1:10:33:32:
72:9c:34:ff:c4:78:12:86:9f:7b:cb:bc:4a:97:9d:
d7:85:16:0a:1a:56:85:13:38:ea:b9:f4:38:9a:3c:
25:ad:7e:71:a6:37:8b:aa:e6:dc:95:61:c6:1b:79:
89:57:c3:a0:cd:39:3e:18:bc:64:bb:19:32:6f:65:
5d:8c:ab:34:37:06:8d:e7:80:48:1d:78:1c:ec:90:
95:58:07:61:98:dc:2b:6b:c9:a8:1b:43:69:74:f6:
96:be:d8:99:8e:48:08:74:c7:4e:72:9d:35:21:bf:
17:4e:c8:88:5b:2a:4d:79:b3:2d:81:b1:18:b3:5a:
bb:27:0a:5d:d1:e7:7e:af:d9:10:80:14:59:74:f7:
0f:c1:58:5e:7f:27:98:23:51:44:5c:a1:81:59:30:
a9:80:09:aa:14:f0:07:29:7e:fc:1e:7a:8e:09:02:
48:ac:9a:fd:ba:72:cb:34:38:e7:5c:9e:e8:72:b2:
ca:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:F9:69:19:6A:E0:62:C9:D7:B8:C9:9B:7A:2F:63:8D:78:80:A3:A0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C81634D6554611F19948BBEACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.232.0/24
45.192.244.0/24
45.201.12.0/22
45.202.74.0/24
45.204.149.0-45.204.151.255
Signature Algorithm: sha256WithRSAEncryption
0c:b2:c7:0d:c5:cc:5e:c2:83:a8:4c:57:26:69:fc:64:92:2a:
03:f8:da:14:5a:87:e9:dc:59:df:06:7b:d5:de:db:cf:45:c3:
93:73:c5:4d:52:79:df:7e:73:73:5c:7d:2f:e2:12:3a:d6:fc:
45:e2:4d:a1:47:61:eb:02:48:57:1b:d5:54:d9:63:65:20:af:
cd:c7:b2:68:d7:95:86:8a:66:91:cb:3f:f1:4d:f5:4f:bc:09:
cf:15:63:7e:75:9d:12:59:ab:35:3f:ba:82:ed:f9:b1:77:d7:
77:6f:c3:51:8b:a8:47:dd:4f:55:ff:18:c1:10:ea:45:d8:c4:
79:0e:32:ec:15:66:df:1f:09:79:43:ac:4e:2b:4a:7d:30:7c:
b5:8a:81:f3:79:6a:dd:71:39:86:3c:5b:de:2c:12:d6:84:2d:
04:f7:ac:49:d3:3b:51:05:f7:cd:de:4c:c7:ed:6f:35:36:a1:
13:c6:27:1a:0f:b8:dc:7a:f3:a5:9f:79:77:8d:34:e0:18:65:
55:19:95:c6:ea:b9:16:e9:f5:bc:f8:45:23:db:1d:94:4c:53:
37:7a:f4:66:30:a3:b4:d5:07:c1:6e:6b:4e:cc:aa:0b:64:d5:
db:5b:40:7b:cf:ab:54:f4:18:59:24:5a:f5:3e:60:6c:23:f8:
98:e3:c0:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 17:47:13 2026 by rpki-client