Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EC9E1AEC554811F188BC01F7CE1D38B0.roa
File: EC9E1AEC554811F188BC01F7CE1D38B0.roa (raw, json)
Hash identifier: SdbvZu/+/Ppe5iM5LKY+iIc1dyA0+RUJcgHqK5x8lRI=
Subject key identifier: FC:E9:79:68:45:E6:78:BD:54:AE:F8:36:D1:C2:E6:7E:DB:C2:02:01
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B79B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EC9E1AEC554811F188BC01F7CE1D38B0.roa
Signing time: Thu 21 May 2026 19:11:52 +0000
ROA not before: Thu 21 May 2026 19:11:48 +0000
ROA not after: Mon 21 May 2029 19:11:48 +0000
asID: 17561
IP address blocks: 45.194.41.0/24 maxlen: 24
45.198.96.0/24 maxlen: 24
45.200.127.0/24 maxlen: 24
45.207.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112539 (0x1b79b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 21 19:11:48 2026 GMT
Not After : May 21 19:11:48 2029 GMT
Subject: CN=6a0f58f8-9877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c0:b0:fa:38:e1:56:fc:80:9d:a3:4f:aa:7c:
24:16:df:5d:16:da:af:0a:7a:6b:43:86:d1:f3:46:
69:f0:83:78:0d:6e:bd:06:18:09:86:02:d0:fc:15:
76:88:f3:bc:f6:4b:79:88:1d:ca:16:7a:45:60:d6:
73:95:d0:89:34:22:27:5f:fa:c7:77:10:7d:2a:52:
b7:a3:23:65:06:24:69:22:7c:d9:ef:8f:e0:07:da:
5c:52:6e:78:97:50:7f:08:73:48:80:fb:5c:7f:2a:
52:dc:8c:ec:a9:42:17:ee:71:93:09:13:57:06:44:
fb:d5:a7:44:36:3e:d6:d9:ff:ac:1c:36:33:65:62:
45:40:37:1a:6e:3c:04:ce:5e:c1:41:c3:9d:c1:30:
ba:47:33:7c:86:14:2c:9e:03:55:a5:0f:e7:52:96:
89:6f:e4:1f:55:8d:db:f4:3b:53:a1:ce:48:e9:f4:
58:bd:b1:f5:ee:52:5d:55:4d:67:4c:02:cd:47:08:
c6:91:07:96:c1:92:40:18:d7:a9:a6:84:7e:ed:a9:
a0:ea:a0:1b:d2:65:0d:4a:77:18:a6:22:c4:f7:dd:
b1:9a:24:23:81:7d:99:5d:f2:d6:2c:b1:73:be:c0:
53:fb:a6:86:f2:0a:ce:98:06:37:cb:ed:88:cb:f2:
44:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:E9:79:68:45:E6:78:BD:54:AE:F8:36:D1:C2:E6:7E:DB:C2:02:01
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EC9E1AEC554811F188BC01F7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.41.0/24
45.198.96.0/24
45.200.127.0/24
45.207.61.0/24
Signature Algorithm: sha256WithRSAEncryption
36:76:62:e3:b4:29:a4:16:90:75:fd:43:d1:fc:c3:54:a0:6b:
df:77:21:f3:fe:ef:05:a5:af:d0:b0:12:80:17:94:06:fb:02:
20:1c:b8:37:f0:31:16:4b:86:9d:2e:9e:8a:a0:e5:fb:bc:36:
2b:e0:4c:0a:13:92:76:8e:6a:38:92:22:34:23:31:2e:3d:89:
01:98:22:30:f2:40:47:ff:d3:24:60:97:33:16:96:66:dc:a4:
6e:70:96:b4:84:03:20:19:8b:69:58:75:3d:37:12:60:2f:27:
40:bf:b9:a1:09:e4:55:7d:13:cf:31:59:d0:41:5d:3c:03:de:
db:7d:44:3b:b5:6d:69:72:91:19:8b:cd:ac:02:a2:a0:f9:a4:
cc:6e:fe:25:45:2d:4f:02:47:fe:4f:2e:d3:cc:3a:dd:67:c8:
86:83:7d:4a:b3:6b:b5:01:7b:a0:20:db:0a:f5:f5:31:c0:8e:
5b:53:98:f4:36:66:24:05:e6:c1:a3:87:e6:85:43:65:45:ff:
51:76:8f:22:e4:95:fe:26:1b:d7:ab:be:11:7a:51:85:8d:85:
df:b8:4c:e1:ab:5e:19:bd:fa:1b:95:9b:a2:56:8c:14:0e:f1:
1f:29:f8:c8:55:6e:2f:67:d1:ea:ec:a0:b4:59:c1:17:ab:07:
0b:cd:55:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:07:13 2026 by rpki-client