Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D8C183DE59CA11F1BCE0E6F1CE1D38B0.roa
File: D8C183DE59CA11F1BCE0E6F1CE1D38B0.roa (raw, json)
Hash identifier: gQ5BipESDrw0cEfWLLgjJx8Oran+qIeIF9PDm8aSTJQ=
Subject key identifier: BD:76:25:81:9D:89:B7:DE:62:C6:9B:B7:C9:16:7C:9A:48:27:1B:C7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BA37
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D8C183DE59CA11F1BCE0E6F1CE1D38B0.roa
Signing time: Wed 27 May 2026 12:51:58 +0000
ROA not before: Wed 27 May 2026 12:51:53 +0000
ROA not after: Sat 04 Jul 2026 12:51:53 +0000
asID: 153517
IP address blocks: 45.194.20.0/23 maxlen: 24
45.194.20.0/24 maxlen: 24
45.194.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113207 (0x1ba37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 27 12:51:53 2026 GMT
Not After : Jul 4 12:51:53 2026 GMT
Subject: CN=6a16e8ee-821a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:88:55:9f:ef:ef:7f:9e:78:b8:b3:96:31:cc:
e7:2c:fa:3f:b2:6c:dc:01:da:31:e9:8e:2e:72:00:
ba:a5:7e:e7:7b:84:dd:1d:67:c6:b7:05:ae:e4:15:
c6:a1:62:b6:f3:b9:d8:92:04:9d:26:bc:09:16:16:
a7:01:61:38:80:1a:8e:cc:ec:0a:12:8d:bf:26:c6:
3b:30:c1:24:c2:f5:d7:0c:52:f6:f3:2e:29:20:52:
45:28:ae:c4:bd:f0:b3:e7:3d:b0:c9:2e:d6:48:e5:
54:45:ec:7b:dd:52:2c:66:42:32:21:43:f2:0a:db:
bf:c5:42:83:c3:53:6e:51:d3:86:86:14:46:df:03:
ac:3d:7f:35:dd:3a:52:48:50:dd:81:19:4f:34:0e:
14:3e:a1:35:a9:74:42:dd:da:02:e3:ea:5f:86:ca:
81:02:a3:52:60:a0:74:de:ce:a9:36:08:88:e4:7c:
ac:11:cb:b3:77:97:41:b4:fe:57:08:e8:cd:02:28:
01:e5:14:33:a2:45:31:d7:c4:f5:cb:25:97:c6:7d:
e3:61:19:ba:e3:4e:1c:60:3d:cf:71:67:b0:83:38:
e1:cf:62:13:72:5c:66:56:42:71:c5:5c:a9:0f:90:
87:5f:b9:09:9a:4d:13:38:66:12:91:e8:36:54:08:
3d:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:76:25:81:9D:89:B7:DE:62:C6:9B:B7:C9:16:7C:9A:48:27:1B:C7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D8C183DE59CA11F1BCE0E6F1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.20.0/23
Signature Algorithm: sha256WithRSAEncryption
6c:c5:cc:b2:25:36:dc:b8:bc:9e:e9:7f:a9:0c:1d:df:93:c4:
e2:10:7c:53:4c:bc:84:a8:f3:ec:a0:a4:8a:15:cc:fe:dc:4e:
11:05:91:ed:fa:b8:f0:0f:60:25:40:f9:5b:78:38:de:5e:4b:
94:7a:5d:2a:53:07:97:1f:38:ff:46:dd:64:5e:a7:dd:2c:27:
d3:bc:ef:4b:d8:29:82:a1:59:a1:a0:0e:d7:f2:9f:94:42:42:
0d:a4:a6:83:9a:49:26:03:1d:0c:a1:2c:bb:fc:fc:cc:db:c3:
11:48:e4:f5:2a:d2:19:fd:f2:44:db:a8:d6:90:34:0a:f5:8d:
a6:ca:ca:29:a1:1c:5a:5d:86:1e:d4:7a:46:cf:f9:37:60:e0:
e5:e5:bf:45:36:a5:de:2b:2c:72:5a:62:26:fa:16:a2:57:a5:
e5:c3:5f:16:19:72:58:8e:6b:89:d4:b9:4b:33:41:67:3b:76:
eb:31:d5:d0:2f:ba:28:c5:5a:be:80:0b:db:2d:59:e6:1d:ab:
9f:e9:2b:62:4c:de:75:b1:c1:df:94:8f:da:1f:66:88:2b:86:
06:ae:a1:9f:32:96:59:84:26:22:23:6d:91:7a:64:89:0c:0e:
70:16:25:47:c7:2d:f1:4f:c2:80:cd:55:7a:49:12:73:00:58:
5f:ef:1a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:07:19 2026 by rpki-client