Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D65468AC551311F18B39C1BACE1D38B0.roa
File: D65468AC551311F18B39C1BACE1D38B0.roa (raw, json)
Hash identifier: jTKekjnNsQVSNPBboNrrOoKHAlXVNaY0ARBo20hi8Yg=
Subject key identifier: F4:EE:E1:40:38:4B:AC:8E:C7:65:BA:E3:04:88:44:E1:1E:D3:F1:53
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B705
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D65468AC551311F18B39C1BACE1D38B0.roa
Signing time: Thu 21 May 2026 12:51:52 +0000
ROA not before: Thu 21 May 2026 12:51:47 +0000
ROA not after: Sat 08 Aug 2026 12:51:47 +0000
asID: 149014
IP address blocks: 45.192.176.0/24 maxlen: 24
45.192.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112389 (0x1b705)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 21 12:51:47 2026 GMT
Not After : Aug 8 12:51:47 2026 GMT
Subject: CN=6a0effe8-6167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0e:bb:3b:86:f2:fb:04:ec:52:b5:74:bd:27:
4f:fd:70:4b:18:c1:9b:e3:b0:74:2f:d4:72:f8:66:
01:6a:63:a0:23:df:fc:41:06:2f:b3:93:38:ac:31:
d4:4e:6e:d0:1b:f5:a2:ec:b2:42:23:1b:bd:44:74:
82:3d:39:f3:99:58:75:90:dd:98:cf:f3:92:05:0d:
1c:1d:bd:a6:5b:60:a3:98:06:f5:08:56:33:df:ae:
06:88:e1:94:4c:18:7c:96:de:8c:fc:f4:35:4b:0f:
ae:ab:00:d5:fa:83:b1:a4:22:5d:5f:33:2f:45:37:
9a:69:0a:93:ba:89:8c:57:80:1b:15:71:10:2f:f0:
f0:90:09:ac:c0:aa:a0:d5:4c:83:f9:3c:ba:ed:62:
78:71:3d:99:bd:b2:fa:91:6f:3a:0a:39:24:85:ec:
83:31:ab:30:6a:56:98:6f:67:ec:2c:8f:e8:bc:f2:
05:e7:20:dc:1d:0a:5d:66:63:b8:94:33:4d:b7:53:
87:44:11:2f:08:6f:ce:c0:05:d9:39:60:13:bd:42:
c0:90:88:d6:e4:c2:1b:ac:33:20:3d:fe:bd:c3:7b:
33:24:d2:ba:b7:b1:71:e1:dd:70:e1:79:57:d2:03:
56:30:24:fa:43:cf:56:d4:1c:36:00:2a:61:10:13:
17:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:EE:E1:40:38:4B:AC:8E:C7:65:BA:E3:04:88:44:E1:1E:D3:F1:53
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D65468AC551311F18B39C1BACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.176.0/23
Signature Algorithm: sha256WithRSAEncryption
17:b6:15:a9:13:db:ae:3d:b8:4a:4a:f0:14:b5:40:c9:5d:7c:
9c:3a:d9:e4:1d:e1:06:c8:7f:c2:ca:70:17:51:5c:9b:5d:e4:
a1:23:e8:17:c1:47:76:2a:af:3d:42:d9:f3:17:0b:f0:58:03:
dc:fe:27:82:65:bb:2a:8a:89:73:83:42:0b:a0:0d:a7:a6:1b:
f9:ce:e6:e0:84:38:3b:b1:fd:a0:d3:f4:b8:8d:6c:bb:ee:ae:
83:cd:ce:fa:f8:96:45:f6:c6:db:a0:89:5f:1d:48:53:53:97:
34:54:d3:fc:fb:cf:09:66:4b:8a:46:c1:6c:26:a6:03:70:82:
c4:0d:94:82:61:a3:cd:8a:54:c2:ae:70:4b:9f:2a:f0:40:84:
88:dc:d4:1c:4b:58:96:f0:b0:b9:86:69:da:16:7e:f4:98:b7:
3e:cc:09:e5:ec:88:b9:76:45:a2:ef:ee:71:3b:6f:51:36:a4:
32:af:01:d1:24:d8:1d:4d:63:f4:05:06:c9:a9:e9:15:eb:a0:
63:e7:e8:9a:13:6a:d1:bd:f6:4d:98:7e:8a:33:d3:56:ba:d8:
7b:77:99:1e:04:d3:6f:1d:1d:dc:a1:97:91:95:f0:7b:68:83:
d2:c6:c2:8f:c0:5a:23:1d:2b:a9:59:54:b1:82:dc:76:bd:e2:
02:31:2b:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:07:12 2026 by rpki-client