Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F11E899C6EFE11F1B80F9016CF1D38B0.roa
File: F11E899C6EFE11F1B80F9016CF1D38B0.roa (raw, json)
Hash identifier: yL8A5YwmiMnA+5Zgc0JHjL63lwhRuplwMQiQGIhKaJo=
Subject key identifier: 23:7C:3A:E1:FC:9F:71:03:99:22:9D:22:AA:FE:7F:D1:10:C1:F3:E0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BFF3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F11E899C6EFE11F1B80F9016CF1D38B0.roa
Signing time: Tue 23 Jun 2026 12:27:47 +0000
ROA not before: Tue 23 Jun 2026 12:27:43 +0000
ROA not after: Sun 09 Aug 2026 12:27:43 +0000
asID: 2914
IP address blocks: 45.192.232.0/24 maxlen: 24
45.192.244.0/24 maxlen: 24
45.201.12.0/22 maxlen: 24
45.202.74.0/24 maxlen: 24
45.204.149.0/24 maxlen: 24
45.204.150.0/24 maxlen: 24
45.204.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 09 Jul 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114675 (0x1bff3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 23 12:27:43 2026 GMT
Not After : Aug 9 12:27:43 2026 GMT
Subject: CN=6a3a7bc3-ec3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:5e:9a:e0:b4:21:4f:d0:e4:cd:57:c8:b8:9a:
09:4c:b2:e9:61:33:11:89:5d:f8:26:c8:a1:cc:3a:
95:f4:ea:69:1f:70:49:b3:22:cb:da:cd:ab:d9:76:
01:56:e9:00:4c:55:f9:1e:c4:80:fb:04:49:4a:c4:
88:87:6a:72:27:1b:a6:0d:34:bb:70:b5:39:78:9b:
dc:31:f8:46:39:ea:5e:76:53:de:b0:4a:32:5c:85:
82:50:23:bf:81:9b:58:a6:c5:fe:d7:9d:2a:2e:d8:
49:71:f3:74:da:74:d4:18:77:db:10:40:6f:e7:90:
c2:57:8c:35:4b:23:93:3a:66:a0:a4:52:c9:9f:22:
e7:4f:32:51:ea:9c:cd:51:b4:73:b4:78:07:94:02:
bf:33:a6:94:1d:33:c4:70:24:8a:80:04:7c:74:dd:
fd:4f:4b:70:c9:3b:d9:e2:43:39:9b:3d:39:74:e7:
7b:77:2d:38:6a:05:54:0d:f8:fc:8f:45:81:23:03:
c3:e5:99:fb:96:5b:e7:16:54:a3:a7:d4:46:e8:21:
ec:96:58:94:f0:b5:41:96:49:96:59:c7:34:6a:6a:
dd:af:90:f2:20:28:f4:32:88:f8:fc:11:1b:d3:c2:
b8:b6:1f:51:83:d7:6b:59:b5:3e:8a:cb:5f:7e:c2:
7e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:7C:3A:E1:FC:9F:71:03:99:22:9D:22:AA:FE:7F:D1:10:C1:F3:E0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F11E899C6EFE11F1B80F9016CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.232.0/24
45.192.244.0/24
45.201.12.0/22
45.202.74.0/24
45.204.149.0-45.204.151.255
Signature Algorithm: sha256WithRSAEncryption
3b:a6:7e:71:36:86:e3:37:9f:28:ff:99:fb:3a:62:13:7f:6b:
98:7f:86:c4:d3:33:6c:84:e4:5c:80:41:cf:02:de:ea:6d:91:
1a:41:46:6d:c2:43:58:ec:86:da:44:a6:88:76:12:c6:d2:43:
d4:1a:ee:f9:c9:b0:fc:c3:60:42:6d:84:ca:dc:ab:c6:78:1c:
5d:f2:e8:96:3d:89:0f:b7:31:23:aa:dc:91:50:b4:36:97:a3:
91:65:10:f8:68:4f:f8:f5:de:7f:39:e1:0a:23:06:79:f0:85:
36:2c:21:ce:31:52:fd:ee:79:de:24:63:60:2d:e4:79:5d:14:
b3:03:dd:58:13:a6:24:65:bd:1a:38:23:58:8b:bd:a7:1c:20:
38:7e:82:a3:9d:98:2f:52:18:0c:be:31:fc:2d:e0:20:b8:98:
60:ea:8e:f7:00:5b:78:a6:e3:38:bb:65:dd:ad:b0:d2:a2:71:
8a:9f:5a:a7:cd:71:a4:10:b3:4d:15:4c:bd:76:c7:12:cd:51:
9e:08:ee:47:c9:fe:0f:02:ed:6c:8e:f3:52:f4:67:84:eb:5c:
55:26:dc:28:c1:83:fa:56:59:99:cd:28:2b:c7:f0:fc:8a:25:
6a:49:0e:50:60:4d:90:70:99:88:f4:2b:5e:98:b6:23:9c:00:
fc:ab:ca:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 22:10:50 2026 by rpki-client