Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E807C6DA568911F1B12B2FAFCE1D38B0.roa
File: E807C6DA568911F1B12B2FAFCE1D38B0.roa (raw, json)
Hash identifier: gZnhuo93T32TZDK9VTydzLewVzLbI8Vppujjf0dEU2Y=
Subject key identifier: 64:C8:83:45:1D:AB:96:74:D2:F7:3A:63:2D:48:32:26:B0:A2:43:59
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B86C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E807C6DA568911F1B12B2FAFCE1D38B0.roa
Signing time: Sat 23 May 2026 09:29:33 +0000
ROA not before: Sat 23 May 2026 09:29:29 +0000
ROA not after: Fri 10 Jul 2026 09:29:29 +0000
asID: 395793
IP address blocks: 45.194.5.0/24 maxlen: 24
45.196.194.0/23 maxlen: 24
45.196.225.0/24 maxlen: 24
45.196.226.0/24 maxlen: 24
45.196.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112748 (0x1b86c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 23 09:29:29 2026 GMT
Not After : Jul 10 09:29:29 2026 GMT
Subject: CN=6a11737d-58fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9d:f5:cb:58:50:ef:de:dd:53:72:13:f1:a3:
aa:0e:b4:01:63:2f:7c:b3:11:59:71:44:f0:36:a9:
25:b7:b1:78:83:51:52:b5:30:26:80:b4:6e:64:15:
64:89:31:1f:09:35:c4:06:e7:e8:16:cf:5b:61:f3:
b7:cf:b1:08:49:53:2c:62:0a:0c:4c:e2:c0:0a:4d:
41:75:42:de:d4:fe:b8:5a:ce:6e:b0:ee:08:e1:09:
34:e7:0f:23:c3:03:d2:a4:dc:b8:d4:44:31:14:ef:
1c:c8:08:b4:78:85:e4:4d:c6:9b:66:9d:ef:4b:c7:
6c:3b:14:df:c3:03:2d:ad:66:29:52:bf:11:ab:a5:
cf:32:4a:86:2f:a3:ab:ae:e6:ce:4d:f2:57:6f:3d:
72:b2:62:bd:0f:0d:52:1e:e5:79:c3:36:ed:ad:d1:
41:b2:79:06:cc:36:ae:be:cb:5e:94:56:ee:fb:a9:
74:3f:c5:5a:c0:60:33:22:6e:3c:a6:2c:c9:11:0c:
c6:31:55:3a:a7:0a:f0:e7:0e:c1:b5:2e:d3:d1:62:
d0:3c:e0:c3:73:88:f6:60:f1:3f:02:4f:b5:d4:12:
e4:f3:ee:fe:27:86:54:46:87:24:0a:9e:7f:28:a1:
5a:d5:f6:36:3f:d2:e0:f9:11:30:84:db:1e:16:af:
5c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:C8:83:45:1D:AB:96:74:D2:F7:3A:63:2D:48:32:26:B0:A2:43:59
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E807C6DA568911F1B12B2FAFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.5.0/24
45.196.194.0/23
45.196.225.0-45.196.227.255
Signature Algorithm: sha256WithRSAEncryption
27:e3:bd:ae:6c:d4:b3:65:1e:7c:82:fa:bc:d5:cf:21:74:61:
83:69:66:ff:9b:95:24:f8:1a:97:77:6b:b5:7b:08:01:cf:4b:
c0:c9:01:90:f4:3a:d4:d8:05:44:07:5a:d6:d4:2c:69:4e:84:
c7:ee:0c:b6:f7:76:15:43:89:a4:8d:1a:37:a2:a7:f4:59:44:
fe:a5:cb:85:07:4d:62:d3:4a:e4:5f:c8:62:60:81:f6:c5:51:
8e:25:d8:a3:a8:49:a8:10:a1:df:b5:f5:05:de:f7:4f:7f:fb:
db:62:21:da:10:d8:09:72:6f:39:ca:a2:07:90:67:cd:d6:d1:
64:6e:1f:7d:35:04:d2:30:35:32:bf:82:c0:9c:05:c5:5a:ec:
74:3a:53:78:fa:20:86:b3:a0:1b:c0:25:94:c4:9f:6d:3e:b2:
41:38:51:7c:82:e9:c9:46:2e:7b:5f:b6:09:a3:4a:05:01:5b:
4f:30:d6:58:86:1e:7a:e4:a3:7d:43:ec:1f:8c:d8:24:49:43:
74:19:f0:b8:22:30:6d:38:fe:16:0b:f9:ca:45:ba:1b:af:48:
2e:6c:67:d6:d4:9a:3d:06:31:94:0d:f2:f6:94:ef:99:93:3e:
18:5a:0e:d3:08:8b:7f:ab:46:6c:39:be:a0:67:df:65:3c:0e:
bf:75:71:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:14:36 2026 by rpki-client