Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CE6870B4561E11F1A1ECEB11CF1D38B0.roa
File: CE6870B4561E11F1A1ECEB11CF1D38B0.roa (raw, json)
Hash identifier: oPcKYP/haur4Ye3Ax/lmroaeUpkBfcw3YAC9zqw8e8c=
Subject key identifier: 8E:49:B8:CB:98:DE:0C:CD:91:04:A9:5D:34:1F:21:7A:F4:AF:CA:B1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B846
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CE6870B4561E11F1A1ECEB11CF1D38B0.roa
Signing time: Fri 22 May 2026 20:42:54 +0000
ROA not before: Fri 22 May 2026 20:42:49 +0000
ROA not after: Thu 09 Jul 2026 20:42:49 +0000
asID: 395793
IP address blocks: 45.195.148.0/23 maxlen: 24
45.195.202.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112710 (0x1b846)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 22 20:42:49 2026 GMT
Not After : Jul 9 20:42:49 2026 GMT
Subject: CN=6a10bfce-432d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1e:7c:41:67:53:40:ff:4e:2b:ba:08:8d:65:
26:59:88:37:a8:a4:d1:32:7a:7f:07:62:29:45:7a:
6c:dc:24:80:eb:37:85:55:a5:f8:c8:b9:61:75:c1:
cb:8b:de:bd:58:4e:ad:94:90:db:54:cc:c8:e4:32:
34:34:d2:eb:0c:81:62:88:8b:0a:cd:45:37:48:f9:
d7:5b:2b:10:cb:5f:db:01:3c:e5:0c:72:d7:6e:9c:
28:61:81:9f:e4:e6:4a:6c:c3:3c:9e:72:b2:80:34:
11:ff:53:a9:77:98:95:9e:dc:5a:fb:bd:68:8b:80:
33:94:53:be:22:53:4e:8e:9c:f6:8e:c9:b9:5f:42:
9b:bc:3e:57:5b:7f:f4:1c:96:e8:04:59:ab:05:c2:
4a:b0:53:c8:d9:61:fe:df:08:52:06:ad:b8:e6:ea:
6c:db:3a:a4:f9:cb:56:7f:15:a9:6b:b7:66:53:5e:
df:f2:a5:37:70:15:76:91:d9:b5:56:18:8b:61:38:
e4:94:dd:9e:be:89:45:12:ce:41:18:99:f4:27:0d:
e3:56:62:f9:0f:47:5b:7d:1a:c2:74:00:05:cd:f2:
5c:a2:c0:66:a1:69:c0:bc:74:ce:c1:b8:19:46:d4:
45:b6:01:ce:fb:7f:7f:62:9f:f4:fb:1a:08:08:44:
d0:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:49:B8:CB:98:DE:0C:CD:91:04:A9:5D:34:1F:21:7A:F4:AF:CA:B1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CE6870B4561E11F1A1ECEB11CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.148.0/23
45.195.202.0/23
Signature Algorithm: sha256WithRSAEncryption
53:e2:ec:56:5a:04:9d:90:ad:04:3f:7d:70:ef:f7:5b:5e:4b:
b6:3d:ba:5f:11:5c:7f:9b:20:8d:b1:b3:a7:3a:16:73:db:f9:
1f:e9:f4:8d:58:86:59:6b:d4:0e:c1:8a:c3:2e:19:13:07:bb:
9f:de:65:16:d3:9e:6c:96:30:18:0f:de:ee:4f:3e:e3:57:f2:
83:16:e1:9c:0e:22:d5:02:2e:10:74:3b:1e:36:f4:2a:24:65:
e1:4f:6e:9b:78:36:b5:75:1b:42:46:fa:f0:1e:5f:06:af:ce:
a4:dc:2b:72:91:59:7e:d3:cf:e5:26:b6:07:34:11:97:a8:0e:
18:92:d1:14:df:a3:17:75:67:b8:01:96:f8:a1:bd:bb:9c:f0:
75:8e:27:f1:b8:94:f3:fc:c4:ab:02:66:24:a7:be:66:25:17:
97:bb:75:18:e5:5e:35:ea:41:2b:a5:aa:56:fa:21:51:a6:6d:
76:52:6e:0b:b4:9d:30:bc:db:60:fe:c1:0f:99:fc:2c:94:f0:
83:64:31:58:d1:9c:93:fe:7e:94:b1:49:af:e4:22:49:6a:20:
a3:fb:b0:df:3b:0c:df:d7:36:6a:f6:c5:02:97:76:42:1f:89:
2f:35:6a:c2:de:ab:92:58:43:4b:2b:73:5c:46:f0:01:5a:a0:
bf:0b:12:be
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgIDAbhGMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNTIyMjA0MjQ5WhcNMjYwNzA5MjA0MjQ5WjAYMRYw
FAYDVQQDEw02YTEwYmZjZS00MzJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwB58QWdTQP9OK7oIjWUmWYg3qKTRMnp/B2IpRXps3CSA6zeFVaX4yLlh
dcHLi969WE6tlJDbVMzI5DI0NNLrDIFiiIsKzUU3SPnXWysQy1/bATzlDHLXbpwo
YYGf5OZKbMM8nnKygDQR/1Opd5iVntxa+71oi4AzlFO+IlNOjpz2jsm5X0KbvD5X
W3/0HJboBFmrBcJKsFPI2WH+3whSBq245ups2zqk+ctWfxWpa7dmU17f8qU3cBV2
kdm1VhiLYTjklN2evolFEs5BGJn0Jw3jVmL5D0dbfRrCdAAFzfJcosBmoWnAvHTO
wbgZRtRFtgHO+39/Yp/0+xoICETQ1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI5J
uMuY3gzNkQSpXTQfIXr0r8qxMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9DRTY4NzBCNDU2MUUxMUYxQTFFQ0VCMTFDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBLcOUAwQBLcPKMA0GCSqGSIb3
DQEBCwUAA4IBAQBT4uxWWgSdkK0EP31w7/dbXku2PbpfEVx/myCNsbOnOhZz2/kf
6fSNWIZZa9QOwYrDLhkTB7uf3mUW055sljAYD97uTz7jV/KDFuGcDiLVAi4QdDse
NvQqJGXhT26beDa1dRtCRvrwHl8Gr86k3CtykVl+08/lJrYHNBGXqA4YktEU36MX
dWe4AZb4ob27nPB1jifxuJTz/MSrAmYkp75mJReXu3UY5V416kErpapW+iFRpm12
Um4LtJ0wvNtg/sEPmfwslPCDZDFY0ZyT/n6UsUmv5CJJaiCj+7DfOwzf1zZq9sUC
l3ZCH4kvNWrC3quSWENLK3NcRvABWqC/CxK+
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:06:48 2026 by rpki-client