Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DC12287A34F111F197CC86C0CE1D38B0.roa
File: DC12287A34F111F197CC86C0CE1D38B0.roa (raw, json)
Hash identifier: 7N3/3Mp37Mm56IIb0ZUNgM7jxGxZPjX3FuuyiHVLbqY=
Subject key identifier: F1:93:D9:A5:E8:84:14:B0:87:D2:06:41:20:56:BE:F5:82:12:C1:1F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01ABC8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DC12287A34F111F197CC86C0CE1D38B0.roa
Signing time: Fri 10 Apr 2026 15:28:01 +0000
ROA not before: Fri 10 Apr 2026 15:27:57 +0000
ROA not after: Sat 10 Jul 2027 15:27:57 +0000
asID: 328608
IP address blocks: 45.205.211.0/24 maxlen: 24
45.205.212.0/24 maxlen: 24
45.205.213.0/24 maxlen: 24
45.205.214.0/24 maxlen: 24
45.205.215.0/24 maxlen: 24
45.205.216.0/24 maxlen: 24
45.205.217.0/24 maxlen: 24
45.205.218.0/24 maxlen: 24
45.205.219.0/24 maxlen: 24
45.205.220.0/24 maxlen: 24
45.205.221.0/24 maxlen: 24
45.205.222.0/24 maxlen: 24
45.205.223.0/24 maxlen: 24
45.205.224.0/24 maxlen: 24
45.205.225.0/24 maxlen: 24
45.205.226.0/24 maxlen: 24
45.205.227.0/24 maxlen: 24
45.205.228.0/24 maxlen: 24
45.205.229.0/24 maxlen: 24
45.205.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Apr 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109512 (0x1abc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 10 15:27:57 2026 GMT
Not After : Jul 10 15:27:57 2027 GMT
Subject: CN=69d91701-166d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:89:b8:01:d2:f3:bf:ed:cc:ae:1f:ab:b5:f5:
b1:60:5f:d7:d5:93:de:1e:69:91:07:5f:5c:b9:e7:
a6:01:2f:ea:8c:77:f5:6f:21:e7:ae:75:b4:68:43:
52:09:c7:8c:2c:94:8d:ec:f5:fa:ca:85:2e:52:a7:
40:5a:59:2b:c5:ae:9b:21:be:21:c7:48:ba:81:b6:
f2:d5:46:9f:64:bb:7e:48:bd:ab:6b:c3:61:97:c9:
e5:15:d8:1f:24:22:3b:96:80:d8:48:d4:7b:76:8c:
8a:71:5b:51:5b:65:0b:87:d2:64:c6:11:73:dd:de:
c2:61:c0:85:0d:f8:5b:27:ac:4d:55:d5:c1:5e:06:
1e:79:2e:13:4b:a3:59:10:e2:12:a8:8f:6a:93:e2:
c4:8f:c3:2d:1e:3b:90:e7:12:29:cc:ff:02:37:01:
3c:f2:82:f8:da:8f:5e:1d:2a:11:b0:70:9b:98:85:
bf:92:22:f5:9e:ea:a8:f3:42:63:74:5b:28:87:8f:
d2:8b:f8:cf:66:48:50:f8:c0:5f:72:90:65:52:35:
a9:e3:29:09:9c:12:2a:f3:29:17:53:ee:b1:ea:7e:
4b:39:f4:9c:86:17:fa:e8:ee:9a:bf:41:8b:d5:66:
7f:f3:ad:53:cc:87:02:78:80:cf:1b:01:01:b0:b4:
63:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:93:D9:A5:E8:84:14:B0:87:D2:06:41:20:56:BE:F5:82:12:C1:1F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DC12287A34F111F197CC86C0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.211.0-45.205.230.255
Signature Algorithm: sha256WithRSAEncryption
05:00:7b:20:e3:2e:09:34:45:14:df:f3:48:36:88:b8:f2:d5:
ed:56:59:b5:f4:32:b9:80:d3:63:09:9b:9d:25:79:7d:a0:6c:
c0:dc:e2:b0:8b:33:66:93:df:8b:0e:52:5e:63:ee:ad:38:a3:
d7:51:6b:ed:94:89:49:9b:f0:73:f7:ba:24:ad:5a:e2:ec:bf:
11:c1:ac:eb:51:0c:af:3b:43:02:10:56:f1:0c:b7:1f:5d:36:
76:eb:e1:9a:56:22:44:27:5c:1f:69:e1:c8:89:64:9f:9d:d5:
fd:8c:e8:88:48:a7:2a:b9:06:ce:de:87:45:6d:b3:c0:d3:a0:
d4:b7:e2:82:e0:6d:af:af:9d:3b:ed:62:69:59:05:7b:d2:5d:
64:1f:03:36:09:b0:11:5c:5b:15:2f:fc:1b:f3:e1:e8:a5:a1:
a9:8d:39:57:0c:e1:c4:ad:26:97:67:da:3b:69:63:d4:41:99:
2b:d2:24:9a:fe:3e:7a:76:26:cc:2e:47:85:27:80:02:7d:79:
54:f3:4e:45:80:f9:33:a4:d8:56:70:8d:a6:16:5d:40:8a:53:
f4:80:7b:3f:5d:74:3f:e2:8d:cc:c4:7f:10:ff:c1:ce:d3:e8:
93:75:5b:fd:b5:88:b4:f0:70:0c:5b:b5:72:64:95:dc:56:7a:
c5:5f:02:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 14:29:02 2026 by rpki-client