Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D20EB33E58E611F1942A050ECF1D38B0.roa
File: D20EB33E58E611F1942A050ECF1D38B0.roa (raw, json)
Hash identifier: CSWI3l7eJ5wktkKWRFfGyFQ3/TQqYxTy3xvQyV8YoWw=
Subject key identifier: AA:0F:D9:D8:06:DC:7E:97:FA:DB:48:3C:C5:AA:94:5F:95:27:A4:66
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B9D5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D20EB33E58E611F1942A050ECF1D38B0.roa
Signing time: Tue 26 May 2026 09:39:42 +0000
ROA not before: Tue 26 May 2026 09:39:35 +0000
ROA not after: Sun 28 Jun 2026 09:39:35 +0000
asID: 62240
IP address blocks: 45.192.32.0/24 maxlen: 24
45.192.33.0/24 maxlen: 24
45.192.34.0/24 maxlen: 24
45.192.35.0/24 maxlen: 24
45.192.36.0/24 maxlen: 24
45.192.37.0/24 maxlen: 24
45.192.38.0/24 maxlen: 24
45.192.39.0/24 maxlen: 24
45.192.40.0/24 maxlen: 24
45.192.41.0/24 maxlen: 24
45.192.42.0/24 maxlen: 24
45.192.43.0/24 maxlen: 24
45.192.44.0/24 maxlen: 24
45.192.45.0/24 maxlen: 24
45.192.46.0/24 maxlen: 24
45.192.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113109 (0x1b9d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 26 09:39:35 2026 GMT
Not After : Jun 28 09:39:35 2026 GMT
Subject: CN=6a156a5e-31d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:52:19:0a:38:2a:51:b4:f3:83:b0:c9:22:5a:
c5:a6:ac:3e:29:a8:2d:6f:24:d0:8b:5e:57:60:ed:
b1:76:21:d1:15:2e:62:ea:1f:7c:dd:ad:2b:27:4f:
2a:5b:ba:f1:a1:3c:90:72:08:ac:7b:5c:f0:e5:02:
65:86:91:29:b6:d8:65:39:dd:6b:d9:60:1f:0a:63:
36:f9:f2:45:c7:b6:b3:47:c9:ac:fd:b8:99:b9:7c:
57:e8:82:34:ab:49:73:19:b8:43:a0:1f:3d:5e:89:
5d:aa:7d:2b:5a:cd:d4:a1:76:43:18:72:cf:61:8f:
d5:d7:5c:e3:52:17:4d:b2:73:02:17:ed:15:81:ec:
8f:42:f4:48:e7:85:79:d5:57:4e:48:28:9b:95:5d:
5c:e8:18:f5:6d:fe:4d:b5:f6:51:2d:dd:e5:b0:ea:
fb:49:b5:16:35:b3:83:97:3a:04:d0:fc:75:b0:82:
8a:f3:86:eb:4e:93:d1:85:ae:42:92:b1:a3:97:3d:
38:10:a6:ec:f0:de:db:09:c5:14:d2:ea:4c:90:73:
99:b5:83:2e:73:db:38:c2:71:e8:b1:4e:f4:fe:bc:
c5:53:0e:0c:21:e4:21:aa:e1:b5:57:f1:29:5c:3e:
77:7f:e7:46:16:c9:78:62:b9:2e:b9:77:84:26:67:
2a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:0F:D9:D8:06:DC:7E:97:FA:DB:48:3C:C5:AA:94:5F:95:27:A4:66
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D20EB33E58E611F1942A050ECF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.32.0/20
Signature Algorithm: sha256WithRSAEncryption
6d:7a:53:d9:4d:0f:fd:11:17:09:e1:76:23:f3:1d:a9:78:6b:
f2:5a:a1:98:32:1e:55:6c:80:69:86:13:f3:84:1c:6f:5a:29:
1e:f3:aa:e3:09:1b:49:b1:8d:b2:e4:53:41:e8:cc:52:13:70:
56:e6:ae:79:10:d8:34:31:50:a0:73:bd:a1:17:a3:c6:b6:21:
be:d7:ca:d6:7f:da:a3:c4:24:a7:88:01:88:d8:ce:92:0d:0f:
f6:e7:d8:27:47:cc:49:ad:df:24:42:6a:36:b6:5d:f0:33:da:
74:56:3f:dd:5e:42:6d:8e:5a:bd:19:26:4b:11:02:80:1a:9a:
a5:52:aa:66:59:ff:2d:1e:91:51:6d:01:94:66:5b:f3:0f:c7:
f1:b9:00:c3:0c:76:10:cd:d7:9d:0d:a8:a3:bd:59:62:3e:4f:
54:6a:57:45:53:7c:c6:88:89:7e:4f:0f:f4:22:83:c2:5b:6d:
30:d2:68:42:73:df:ce:27:01:de:b5:bf:26:26:21:c1:ff:88:
6b:48:f9:ba:47:28:7d:79:93:39:1e:c2:1d:c4:5e:b5:15:24:
96:44:b6:75:5b:b8:18:3b:ed:16:6b:4b:e0:db:22:32:3b:d3:
dc:ee:5e:bc:1f:70:1e:4a:23:f2:f7:f5:80:5c:ef:e2:18:f7:
1d:3a:54:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:29:01 2026 by rpki-client