Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D511275868D911F1877EE1EBCE1D38B0.roa
File: D511275868D911F1877EE1EBCE1D38B0.roa (raw, json)
Hash identifier: VgfRTcd3APe202bQ7HYIxltYSdRB/JYn6QXRXYMkbtY=
Subject key identifier: 36:30:FC:CB:BC:19:D4:A9:EC:AB:F1:4D:2B:86:64:72:01:09:0B:1E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BD6E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D511275868D911F1877EE1EBCE1D38B0.roa
Signing time: Mon 15 Jun 2026 16:47:02 +0000
ROA not before: Mon 15 Jun 2026 16:46:57 +0000
ROA not after: Thu 16 Jul 2026 16:46:57 +0000
asID: 142032
IP address blocks: 45.192.96.0/20 maxlen: 24
45.192.96.0/21 maxlen: 24
45.192.96.0/22 maxlen: 24
45.192.100.0/22 maxlen: 24
45.192.104.0/21 maxlen: 24
45.192.104.0/22 maxlen: 24
45.192.108.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 22 Jun 2026 00:26:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114030 (0x1bd6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 15 16:46:57 2026 GMT
Not After : Jul 16 16:46:57 2026 GMT
Subject: CN=6a302c86-7500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:10:e5:d3:fc:4b:5e:65:2f:34:41:5a:78:fb:
0a:01:8a:74:3e:c1:8c:46:eb:02:49:d6:15:a2:2a:
7d:8e:9a:a5:21:00:90:82:dc:4c:83:2b:e0:a5:c7:
df:61:de:17:69:66:d4:95:4d:1b:1c:aa:d9:00:68:
33:b3:c9:5a:50:51:fa:1b:5c:b4:95:2b:8e:d5:3c:
cc:85:76:ac:a1:80:9f:7e:49:6e:61:52:c8:0d:33:
5f:14:4e:fa:25:09:da:31:c2:81:12:76:24:76:10:
24:58:91:95:71:f0:e2:60:1d:f5:cd:a9:0a:7e:c8:
1d:29:89:01:e4:52:08:f5:f8:10:15:d9:6e:5a:f8:
6a:45:6e:d1:ee:96:72:04:ca:9b:1e:74:ef:a2:78:
f3:bb:46:18:a2:f6:21:34:7e:40:b0:a0:f2:fb:12:
48:ac:cd:54:5e:c6:11:37:23:4b:6a:72:7e:ab:66:
ec:e1:86:59:33:21:51:37:1f:34:97:40:1c:06:28:
0f:2a:cd:fa:d9:81:bc:da:76:a7:ec:c8:07:e4:d0:
c7:0d:2f:73:fb:4d:7e:56:c0:42:88:f9:c7:2a:96:
7c:cc:5e:ae:a2:ce:57:23:d5:fb:f5:dd:58:fb:6d:
66:e8:83:86:90:3b:9b:2c:f4:0d:17:68:96:ab:97:
37:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:30:FC:CB:BC:19:D4:A9:EC:AB:F1:4D:2B:86:64:72:01:09:0B:1E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D511275868D911F1877EE1EBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.96.0/20
Signature Algorithm: sha256WithRSAEncryption
b9:78:24:e7:ec:81:25:97:12:9b:62:98:6d:1a:f6:42:f9:b2:
28:c8:1e:10:e5:82:b5:b0:6c:7a:08:63:b1:47:9b:7c:ca:68:
5f:22:4f:a8:11:1d:d1:e7:a4:43:6d:7a:71:2d:a7:02:00:e9:
fc:69:1c:7e:17:e8:11:90:d0:e6:34:e0:fa:95:b4:10:97:47:
12:bc:10:8d:25:a3:9d:f2:4f:b9:6b:e6:66:f9:91:f3:a3:5f:
50:29:07:e4:72:d9:f3:3b:f4:c7:75:32:83:54:0d:8c:09:16:
db:14:d4:b4:f2:ba:d0:6a:3b:fb:97:1e:3f:38:27:aa:ec:bb:
14:a4:ea:f1:cb:dc:8e:cb:6a:2e:e7:b9:d7:8d:13:74:89:66:
01:09:c9:1a:58:bd:bf:06:15:86:a5:41:c3:91:1a:28:db:0b:
54:c7:1d:7b:35:81:a8:71:7c:94:00:74:ba:a0:b4:c2:fa:31:
50:5b:ce:f6:39:a8:e3:28:84:8a:a4:10:d4:38:6d:e9:a4:46:
39:73:ef:48:6c:f1:7b:84:4f:c4:8f:4d:c7:7b:43:c5:b4:d2:
80:2c:fd:1c:c3:42:3c:7d:ba:f8:b9:c1:e4:25:05:9b:a7:1c:
09:e5:cb:81:13:40:8a:40:bc:06:7a:81:63:9c:10:52:da:12:
67:0e:57:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 10:41:19 2026 by rpki-client