Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CC6D1FF24ED611F19CE43AC3CE1D38B0.roa
File: CC6D1FF24ED611F19CE43AC3CE1D38B0.roa (raw, json)
Hash identifier: mk93i5BWEKC/SFz7GLlAsv/KSS8dTn/YNKbyMtZ4UVk=
Subject key identifier: AD:0E:DB:04:8F:6E:B3:55:D2:64:DE:9C:41:35:EC:A2:34:67:3F:DF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B43D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CC6D1FF24ED611F19CE43AC3CE1D38B0.roa
Signing time: Wed 13 May 2026 14:19:49 +0000
ROA not before: Wed 13 May 2026 14:19:43 +0000
ROA not after: Fri 19 Jun 2026 14:19:43 +0000
asID: 11404
IP address blocks: 45.195.0.0/24 maxlen: 24
45.195.84.0/22 maxlen: 24
45.196.92.0/22 maxlen: 24
45.197.200.0/21 maxlen: 24
45.197.224.0/21 maxlen: 24
45.200.144.0/20 maxlen: 24
45.202.16.0/20 maxlen: 24
45.204.32.0/20 maxlen: 24
45.204.112.0/20 maxlen: 24
45.205.176.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111677 (0x1b43d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 13 14:19:43 2026 GMT
Not After : Jun 19 14:19:43 2026 GMT
Subject: CN=6a048885-fb4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:73:ac:6b:b1:37:5c:ec:66:d6:34:cf:00:97:
c1:3d:28:d3:93:04:13:10:1c:bc:ad:68:b5:a6:14:
fd:16:c0:4d:8f:c6:ab:97:49:61:9d:d8:e1:5d:c4:
cf:d3:62:93:59:a3:f5:d9:64:50:2c:65:a0:32:54:
4b:9a:f7:b2:a6:a1:55:27:b9:c2:9e:d1:8c:bb:2d:
35:85:4c:39:14:d8:ff:12:27:ab:7f:e5:5d:a5:31:
38:34:9b:18:d5:b7:a4:e5:e2:99:ac:18:34:80:d6:
98:c2:28:ae:26:0a:3b:72:68:34:42:ab:b4:06:15:
1a:d4:2b:b0:c1:d3:09:db:19:36:cc:f5:04:a5:b2:
fa:a5:c5:6e:b2:24:24:7b:c3:3d:0e:76:b9:65:80:
c3:ce:4d:9d:4a:8a:79:f6:5e:d4:2a:13:85:c1:ba:
a3:14:cd:5e:4b:3d:54:90:cc:2d:72:9a:7d:bd:75:
25:55:68:24:ca:7e:f1:20:3b:3a:9a:68:86:ff:b2:
56:b4:d7:a5:ce:63:a8:3b:29:2d:20:6f:9e:ac:78:
8f:ec:99:32:26:41:66:a9:0b:df:b5:b7:c9:9b:19:
f2:62:0a:ce:61:45:86:d3:12:8a:bd:9c:75:cb:70:
23:22:62:5f:35:8b:f4:ef:78:18:5f:43:c4:db:68:
9b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:0E:DB:04:8F:6E:B3:55:D2:64:DE:9C:41:35:EC:A2:34:67:3F:DF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CC6D1FF24ED611F19CE43AC3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.0.0/24
45.195.84.0/22
45.196.92.0/22
45.197.200.0/21
45.197.224.0/21
45.200.144.0/20
45.202.16.0/20
45.204.32.0/20
45.204.112.0/20
45.205.176.0/20
Signature Algorithm: sha256WithRSAEncryption
9e:cb:42:cc:0c:dd:0c:3c:0e:89:84:4a:d4:c5:a4:00:5b:c4:
24:3a:90:b0:0e:b7:d8:45:c3:e2:93:8c:06:61:f7:63:a0:72:
c0:c1:28:8b:35:65:8c:48:a1:33:b4:48:23:ba:8b:d6:80:de:
de:e4:fd:2d:01:ca:22:3a:48:35:1f:7b:9c:3a:68:4a:72:6a:
ef:15:c2:51:c6:03:36:ec:68:e4:2d:3a:b8:29:84:88:53:00:
db:b5:c6:d2:d6:55:3b:be:f0:88:8f:e3:05:29:1f:86:c3:dd:
c4:af:4a:37:48:c6:a0:4b:cb:6f:d6:67:1e:85:59:64:69:ad:
96:e6:cf:72:14:e3:63:b1:8d:0b:ef:06:81:73:c8:d6:28:5e:
5f:97:6c:97:ba:12:6c:d7:ca:38:93:15:7b:b2:2f:7a:b6:c9:
c2:67:e9:7a:4b:aa:29:61:d2:5c:f2:d5:94:a2:5c:25:f5:8d:
01:39:76:b0:18:24:b0:08:c6:9d:8d:b1:ce:6c:c9:1e:d7:ea:
0d:56:4b:fd:1e:d4:4a:f0:94:81:e7:df:1f:ac:8a:e5:14:fd:
b8:9d:a8:2e:e0:33:a4:84:4d:ee:ef:66:79:d8:6b:3a:ee:15:
17:39:9e:f9:60:99:a4:c0:76:0d:b0:7d:4b:5f:f5:30:1e:e9:
5b:b0:94:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:07:00 2026 by rpki-client