Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F2F7E53859DC11F1A335E6DDCE1D38B0.roa
File: F2F7E53859DC11F1A335E6DDCE1D38B0.roa (raw, json)
Hash identifier: 4Oq2mecl6+CigQXKlrDHnlYIRQCn2rmTQMXUkuV4BQQ=
Subject key identifier: 06:D3:8F:F7:17:34:F7:AE:9A:C0:B8:A7:6E:79:B8:64:5A:CF:50:DB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BA49
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F2F7E53859DC11F1A335E6DDCE1D38B0.roa
Signing time: Wed 27 May 2026 15:01:33 +0000
ROA not before: Wed 27 May 2026 15:01:27 +0000
ROA not after: Thu 04 Jun 2026 15:01:27 +0000
asID: 131178
IP address blocks: 45.201.128.0/23 maxlen: 24
45.201.130.0/24 maxlen: 24
45.201.131.0/24 maxlen: 24
45.201.132.0/23 maxlen: 24
45.201.134.0/24 maxlen: 24
45.201.135.0/24 maxlen: 24
45.201.136.0/24 maxlen: 24
45.201.137.0/24 maxlen: 24
45.201.138.0/23 maxlen: 24
45.201.144.0/24 maxlen: 24
45.201.145.0/24 maxlen: 24
45.201.146.0/24 maxlen: 24
45.201.147.0/24 maxlen: 24
45.201.152.0/24 maxlen: 24
45.201.153.0/24 maxlen: 24
45.201.154.0/24 maxlen: 24
45.201.155.0/24 maxlen: 24
45.201.156.0/24 maxlen: 24
45.201.157.0/24 maxlen: 24
45.201.158.0/24 maxlen: 24
45.201.159.0/24 maxlen: 24
45.201.160.0/20 maxlen: 24
45.201.172.0/24 maxlen: 24
45.201.173.0/24 maxlen: 24
45.201.174.0/24 maxlen: 24
45.201.175.0/24 maxlen: 24
45.201.176.0/20 maxlen: 24
45.201.190.0/23 maxlen: 24
45.201.192.0/20 maxlen: 24
45.201.192.0/24 maxlen: 24
45.201.193.0/24 maxlen: 24
45.201.194.0/24 maxlen: 24
45.201.195.0/24 maxlen: 24
45.201.196.0/24 maxlen: 24
45.201.197.0/24 maxlen: 24
45.201.198.0/24 maxlen: 24
45.201.199.0/24 maxlen: 24
45.201.200.0/24 maxlen: 24
45.201.201.0/24 maxlen: 24
45.201.202.0/24 maxlen: 24
45.201.203.0/24 maxlen: 24
45.201.204.0/24 maxlen: 24
45.201.205.0/24 maxlen: 24
45.201.206.0/24 maxlen: 24
45.201.207.0/24 maxlen: 24
45.201.208.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113225 (0x1ba49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 27 15:01:27 2026 GMT
Not After : Jun 4 15:01:27 2026 GMT
Subject: CN=6a17074d-fed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c9:ce:1d:75:c1:d6:17:7d:05:8e:76:69:77:
13:d5:8b:66:35:de:1e:ce:e3:55:3d:95:0e:1b:aa:
d5:63:fb:99:51:59:dd:74:b8:8c:b2:d7:67:ce:46:
9f:ea:7a:d6:d0:67:d9:25:20:0d:ec:37:3a:c6:d9:
87:3c:ae:94:d6:18:e3:4d:63:f9:1b:56:73:90:d3:
08:fe:5c:67:b9:8d:c8:51:b8:3c:32:06:b4:b1:09:
06:13:26:a4:73:6d:6f:4b:c4:c0:b3:1e:b4:e6:ce:
1a:6a:1d:ab:02:e7:31:f0:22:2c:c6:ef:3f:12:49:
36:36:d5:5d:f7:f8:83:da:06:df:48:be:cf:04:14:
f9:0c:94:ef:7a:69:f0:81:af:37:0b:8d:17:22:28:
5f:4b:1f:91:79:43:ef:2c:b8:50:1d:a2:a9:7b:71:
64:2a:ce:4f:85:fe:f1:32:28:b4:df:fc:1b:7f:21:
41:d4:48:24:8f:80:bd:eb:39:f5:08:ed:11:13:fc:
8b:c0:4b:19:76:d0:69:be:31:32:0b:5b:68:5e:3e:
40:f7:14:d5:7a:80:2d:94:53:47:4e:02:65:39:b5:
c3:2d:8b:7f:f0:68:f3:4e:8c:11:9f:5b:0b:f9:04:
89:3c:e4:f7:19:9f:0e:7e:2a:90:50:85:20:b6:68:
49:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:D3:8F:F7:17:34:F7:AE:9A:C0:B8:A7:6E:79:B8:64:5A:CF:50:DB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F2F7E53859DC11F1A335E6DDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.128.0-45.201.139.255
45.201.144.0/22
45.201.152.0-45.201.209.255
Signature Algorithm: sha256WithRSAEncryption
08:99:9d:db:59:c0:a4:44:1a:92:46:9b:72:24:95:15:73:56:
7d:a3:49:a2:ab:c8:0e:12:1e:97:a4:1d:94:62:2e:a0:30:31:
2f:76:2c:fb:d6:7b:dd:90:a0:97:39:90:33:34:ea:aa:1d:1f:
26:d9:2c:2e:8c:85:f5:0f:9d:24:2f:14:1d:08:a0:52:90:f8:
70:f8:ff:8c:34:35:63:10:b2:5c:9d:c2:46:b1:be:d0:ed:81:
fc:f5:d2:a0:0e:97:cb:e4:db:dc:97:1a:ee:f9:67:d9:bf:23:
0f:a7:13:10:f4:76:0a:86:7e:a1:51:95:7f:24:46:1a:e6:8a:
4b:04:f4:74:14:42:8a:b2:99:f0:f0:c7:0d:04:a1:71:26:b5:
d7:5b:73:67:d0:79:65:73:4c:3b:d2:3e:95:15:9b:27:83:e9:
ad:1e:94:e7:3f:b4:b5:de:89:a2:f5:58:c4:0b:9b:bd:be:6e:
1e:65:1e:c7:8c:9d:11:a4:d0:a8:b0:39:fd:c4:83:a2:9d:44:
d9:43:38:45:98:2e:d0:64:d1:d3:3f:46:e7:f4:e7:4c:84:a0:
34:a3:95:5f:cd:84:e0:d5:79:2d:a2:c9:8b:9a:d3:95:24:4b:
db:e1:86:c8:43:b0:4d:bd:b1:97:84:f0:e4:05:57:24:9d:14:
c3:97:19:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:06:55 2026 by rpki-client