Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0D6C867060BE11F19FA675B5CE1D38B0.roa
File: 0D6C867060BE11F19FA675B5CE1D38B0.roa (raw, json)
Hash identifier: kxTPgrq2gP6oaj7aIfqVcJzbK/S+U7wvxdgz5ZD/ykI=
Subject key identifier: B7:2A:39:90:DF:DC:0E:18:A8:4D:1A:D4:12:CB:7C:8F:A4:6F:7C:8A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BBF7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0D6C867060BE11F19FA675B5CE1D38B0.roa
Signing time: Fri 05 Jun 2026 09:08:01 +0000
ROA not before: Fri 05 Jun 2026 09:07:56 +0000
ROA not after: Mon 03 Aug 2026 09:07:56 +0000
asID: 153517
IP address blocks: 45.194.20.0/23 maxlen: 24
45.194.20.0/24 maxlen: 24
45.194.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113655 (0x1bbf7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 5 09:07:56 2026 GMT
Not After : Aug 3 09:07:56 2026 GMT
Subject: CN=6a2291f1-225f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:97:9d:74:18:46:f2:2c:3c:23:a2:cc:f5:75:
e4:0b:79:19:b0:a8:77:f7:8e:27:96:c5:b2:27:eb:
f9:0a:4d:a1:4b:54:3a:1d:90:89:45:03:b1:84:e8:
a8:75:5a:87:1c:c3:20:a6:09:8c:b9:07:45:ef:8d:
f2:0d:2e:98:a1:38:9f:9b:95:1f:1a:98:9e:19:98:
d7:2c:ac:c9:79:04:a7:e6:2e:27:f9:5e:22:33:b0:
05:28:77:c6:3c:76:d3:ed:58:74:63:d0:cf:3f:e8:
68:0d:8c:95:1b:04:1f:cf:5d:88:33:a3:0c:47:82:
79:2e:3e:b8:05:9e:69:f5:65:2d:bb:b1:b0:f5:4e:
a3:71:a8:af:9f:b0:b9:71:11:cd:96:94:e9:1c:33:
2b:5f:15:e1:7a:56:2a:44:43:77:b3:32:32:6d:4a:
4d:ba:9d:1e:57:65:5f:da:08:e8:70:5e:19:5a:bf:
69:8d:2d:5d:0b:98:64:58:df:9b:2a:d6:b4:15:1f:
82:d8:9f:ce:13:dd:12:69:9b:31:98:8f:51:0a:f3:
8d:ab:97:a0:27:ed:ed:17:be:3c:f1:40:b8:f8:df:
2d:ea:68:fd:3b:5f:f0:2f:cf:a6:81:0e:7c:0f:2c:
73:49:39:df:b1:85:54:93:63:a9:d3:d7:49:48:be:
f3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:2A:39:90:DF:DC:0E:18:A8:4D:1A:D4:12:CB:7C:8F:A4:6F:7C:8A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0D6C867060BE11F19FA675B5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.20.0/23
Signature Algorithm: sha256WithRSAEncryption
37:69:08:78:48:e0:a4:c8:43:d2:0b:4c:5c:7f:b4:ec:9d:15:
9b:3f:d8:b1:be:24:fb:fb:8a:d6:65:48:75:83:77:ea:9f:5d:
4a:fc:c0:ca:9e:b4:d9:a1:84:f6:ee:16:08:39:fb:03:9f:0b:
a6:22:00:27:10:b2:2c:ae:21:da:70:bd:37:09:a9:4f:4f:4b:
6e:3f:15:4c:aa:a9:a1:18:32:71:a4:ce:f3:0f:5c:7c:a5:67:
42:98:fc:e2:a1:96:f5:f9:1b:57:26:1b:6c:30:ea:da:f7:80:
1a:ce:23:0a:4d:18:f3:82:16:14:35:f0:57:88:65:b4:81:f5:
58:b2:1d:c8:45:11:13:df:d7:7d:32:e9:38:31:a3:bc:f7:b1:
6e:a1:80:cf:44:97:6d:4d:7f:33:8f:f3:34:a4:3f:d9:a4:48:
67:2d:dc:06:7c:cd:0c:3f:33:71:65:76:11:7f:40:8c:b0:f5:
6d:0b:23:3d:68:d6:c4:88:5c:83:1a:a2:42:a4:0e:92:07:61:
8f:7c:f6:2f:b9:8d:ba:aa:ef:aa:fa:7f:f1:78:30:d2:17:92:
05:7c:56:98:2e:ac:83:47:c6:16:e5:0c:90:a3:b6:4d:c1:08:
a9:9b:54:22:dd:1e:14:ab:ce:8e:ad:1c:3d:c9:be:04:f7:b7:
32:6f:a2:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:12:20 2026 by rpki-client