Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F4E7F42C527B11F1A54F5EF5CE1D38B0.roa
File: F4E7F42C527B11F1A54F5EF5CE1D38B0.roa (raw, json)
Hash identifier: ISK98UebjpSNc3vPeH8gMLsU5DGLZ9ii8MEbmcRnYVw=
Subject key identifier: 9E:4F:CC:FF:08:6B:E2:73:4C:41:62:41:9D:06:DF:E6:13:4C:84:DE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B570
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F4E7F42C527B11F1A54F5EF5CE1D38B0.roa
Signing time: Mon 18 May 2026 05:39:37 +0000
ROA not before: Mon 18 May 2026 05:39:32 +0000
ROA not after: Sat 08 Aug 2026 05:39:32 +0000
asID: 63787
IP address blocks: 45.192.176.0/24 maxlen: 24
45.192.177.0/24 maxlen: 24
45.192.178.0/24 maxlen: 24
45.192.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111984 (0x1b570)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 18 05:39:32 2026 GMT
Not After : Aug 8 05:39:32 2026 GMT
Subject: CN=6a0aa619-1a91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:51:41:de:c3:d6:82:ee:0d:9a:b9:f1:b8:99:
b1:ef:66:fc:74:c3:ee:6d:41:35:82:6f:dd:e8:2d:
74:c7:35:eb:5f:75:35:66:03:5e:63:87:48:1e:ef:
15:1d:b0:9f:07:93:be:cf:d3:79:f6:28:16:17:6e:
05:10:ea:03:70:97:1d:78:44:ec:9c:68:08:9d:9b:
89:c4:33:54:9c:a4:df:61:34:0b:17:4b:d3:b9:f3:
9b:31:7b:2e:58:c4:1c:13:3b:65:98:fe:9f:66:45:
b3:c6:d2:a0:17:71:6e:d7:46:9f:60:1b:7a:59:e4:
e1:4d:82:94:6d:8d:c0:2c:82:7a:f5:d3:f1:08:d3:
4a:06:37:53:f5:ea:00:a9:67:22:ca:2b:1c:21:49:
89:d4:3f:59:03:90:63:30:d8:de:f4:f1:dd:bf:6f:
3f:41:f0:1a:6e:7d:3b:7a:0e:0a:a7:a8:49:1c:71:
c6:fb:1e:0e:13:73:e1:3c:68:a4:17:72:fa:4d:95:
de:4e:0f:aa:2e:2d:7d:0c:39:d4:fa:28:de:1e:bb:
92:0f:fa:3e:08:b2:4c:81:45:bf:cf:16:d8:65:fa:
ee:07:d0:5a:f7:d7:81:96:6b:b4:e0:0c:65:95:d8:
c4:af:fb:ed:b4:0d:3f:2d:3a:e7:bf:5d:03:96:e3:
38:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:4F:CC:FF:08:6B:E2:73:4C:41:62:41:9D:06:DF:E6:13:4C:84:DE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F4E7F42C527B11F1A54F5EF5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.176.0/22
Signature Algorithm: sha256WithRSAEncryption
13:25:f0:ff:ee:e2:16:e5:ef:44:1f:bd:7e:62:14:31:0c:f1:
a1:42:be:bc:1e:62:d4:54:d0:34:f8:33:88:96:19:6f:da:6d:
1c:12:d6:26:d6:6e:4c:4e:2b:4c:6c:22:42:ad:51:9d:01:22:
2c:ca:ec:f8:1a:a5:10:a8:38:0b:28:03:ee:a7:a5:70:0d:13:
58:57:71:c1:e8:7b:49:9b:14:43:7d:03:4d:6a:60:1e:7f:ca:
64:10:c9:8d:c4:00:7a:8f:f5:b5:fc:bd:6e:a1:5c:88:43:4e:
b8:24:03:df:4a:32:88:42:27:33:99:e7:70:32:73:0d:7b:86:
44:be:03:87:94:cc:21:98:42:85:08:cd:26:e8:1e:8b:01:82:
9d:0f:b2:71:5f:64:1c:6f:2a:c8:2f:56:e3:46:36:dd:bd:0e:
17:25:6d:d7:87:cd:84:5d:0e:6d:9c:3f:97:35:53:7d:ab:3c:
d6:1d:5e:63:93:be:c0:8a:c2:89:13:0c:f8:57:8b:fa:9c:02:
c3:a5:b6:8f:0f:06:41:2e:00:51:bc:40:3a:ad:2f:90:39:ea:
16:c0:ea:1c:dd:3b:df:2a:18:96:83:a5:0b:ca:90:27:88:9f:
89:de:e4:36:83:d3:2e:f2:61:54:1b:1a:0e:7b:d8:9d:61:7e:
ed:dc:9d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:21:29 2026 by rpki-client