Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FB2D2E9055F711F19D6465ABCE1D38B0.roa
File: FB2D2E9055F711F19D6465ABCE1D38B0.roa (raw, json)
Hash identifier: pv9if415E667ai+Qlbz4GW84fzV2Kd4g2Ce+/Z2mnvw=
Subject key identifier: 8E:AE:CB:3A:7E:C3:F1:7C:05:58:07:02:28:CF:54:AE:E2:FA:AF:CB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B824
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FB2D2E9055F711F19D6465ABCE1D38B0.roa
Signing time: Fri 22 May 2026 16:04:59 +0000
ROA not before: Fri 22 May 2026 16:04:54 +0000
ROA not after: Sat 27 Jun 2026 16:04:54 +0000
asID: 11427
IP address blocks: 45.198.188.0/22 maxlen: 24
45.203.240.0/22 maxlen: 24
45.203.252.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112676 (0x1b824)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 22 16:04:54 2026 GMT
Not After : Jun 27 16:04:54 2026 GMT
Subject: CN=6a107eab-1be5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:9f:b7:23:39:04:35:ad:f4:dd:61:80:12:2b:
36:d7:ec:63:d1:a5:77:2d:9b:0a:bc:b2:2c:9b:b9:
27:d1:be:59:9f:14:c2:0f:05:43:1f:61:92:25:af:
13:65:a0:22:65:84:92:ff:ba:17:3a:eb:b1:96:40:
83:cf:1f:10:50:74:45:5a:e5:83:03:72:c3:68:3c:
c5:fe:ab:27:7d:83:e5:2f:2e:bb:e0:d6:eb:7e:2d:
23:75:36:fc:ff:f3:95:79:21:57:75:a9:6b:1d:cd:
28:76:e5:ed:fb:ed:12:0d:08:88:09:98:5b:37:60:
37:1d:d4:00:fb:ff:d7:f7:2a:e7:ff:0c:43:0f:98:
3d:4a:74:38:21:58:1b:c3:96:2b:39:64:f3:ff:af:
00:0a:c5:7b:41:d7:d3:db:69:54:7c:f8:d5:5a:5a:
a0:0c:c0:ce:02:7c:90:e3:45:bf:2f:f4:ba:ec:9a:
90:df:4c:e5:42:5c:2c:29:b7:50:4a:ba:20:9a:06:
82:fe:ec:fa:40:10:95:91:a4:e6:fe:83:bb:eb:0c:
37:64:d1:28:a6:7b:61:cf:d0:f6:3b:79:74:c3:82:
6f:ed:50:c4:d3:2f:0a:86:e8:7a:14:5f:ad:d3:e3:
62:0a:78:30:b2:d4:73:04:11:b4:4c:c9:4f:86:f9:
aa:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:AE:CB:3A:7E:C3:F1:7C:05:58:07:02:28:CF:54:AE:E2:FA:AF:CB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FB2D2E9055F711F19D6465ABCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.188.0/22
45.203.240.0/22
45.203.252.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:51:b9:c9:6f:54:2e:22:bb:ac:fe:41:6d:a5:8e:66:3a:eb:
9f:e7:c1:a1:18:96:dd:90:e9:f9:3a:46:3d:58:04:42:18:c6:
3b:e1:91:2a:65:57:3a:ac:1e:c8:ed:b3:15:f9:05:43:2b:5f:
8d:52:74:8f:18:d6:94:73:b2:f8:27:61:75:2f:be:74:2e:64:
05:c2:b1:71:ae:a2:65:5a:43:3a:1f:c6:96:da:b1:88:97:dd:
90:6a:fa:18:d0:8d:54:e2:e3:5b:7f:b1:37:41:c4:38:78:9b:
8c:46:4e:2a:64:14:2d:ae:7c:a2:4d:3a:55:6b:9a:e4:c8:d1:
a9:5a:16:af:c1:cd:3e:bb:f8:58:06:eb:99:8f:ca:68:43:ff:
9a:05:aa:8b:51:b7:54:af:80:4f:8b:9a:65:89:aa:e1:7c:bd:
ad:eb:0a:95:f3:2a:eb:54:60:f1:3d:39:d5:9f:da:c6:09:f7:
0c:d5:28:7f:bd:ab:e8:8a:55:bc:3f:35:22:90:c8:a6:51:40:
d7:2e:b5:4a:2f:ae:fd:ce:ed:20:33:7b:69:9f:3e:fd:8e:9b:
94:29:75:8e:9f:85:fd:73:ec:79:36:90:37:92:99:9b:9a:76:
ba:21:08:b3:14:e2:af:d1:b2:37:00:17:ae:90:db:50:4b:0a:
8a:e1:12:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:06:49 2026 by rpki-client