Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/11152AE664B211F196134EBBCE1D38B0.roa
File: 11152AE664B211F196134EBBCE1D38B0.roa (raw, json)
Hash identifier: mYJIvGR1ADQ+9juyi0C1Sz79tdP7pjEbmNj0oJ8F2d8=
Subject key identifier: 47:83:60:9D:6F:6D:2E:30:16:2A:86:C3:4A:6D:BF:24:D8:D3:0A:32
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BCB4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/11152AE664B211F196134EBBCE1D38B0.roa
Signing time: Wed 10 Jun 2026 09:52:18 +0000
ROA not before: Wed 10 Jun 2026 09:52:13 +0000
ROA not after: Fri 10 Jul 2026 09:52:13 +0000
asID: 139613
IP address blocks: 45.201.216.0/21 maxlen: 24
45.201.224.0/21 maxlen: 24
45.201.240.0/20 maxlen: 24
45.207.224.0/19 maxlen: 24
45.207.224.0/20 maxlen: 24
45.207.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113844 (0x1bcb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 10 09:52:13 2026 GMT
Not After : Jul 10 09:52:13 2026 GMT
Subject: CN=6a2933d2-d597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cb:bb:73:f3:29:08:85:c5:5c:29:2e:2f:93:
27:60:74:23:de:cb:88:3b:bd:2b:9e:fd:8e:25:f6:
02:db:3f:86:2b:8d:41:91:90:76:17:24:64:6b:be:
71:c9:3e:dd:4a:34:93:84:24:66:5e:ac:64:a2:a6:
17:35:28:d5:ec:51:ed:42:55:aa:b6:40:05:d3:75:
1f:d0:ae:c8:38:e2:60:18:f5:4f:7e:0e:63:4d:00:
a9:9a:7c:8a:d1:65:44:18:93:8a:f3:2b:3a:82:a9:
3a:fd:19:33:0b:1f:23:13:6e:82:b3:5e:69:ac:ec:
18:93:47:55:38:28:2d:2c:c8:01:b5:68:ba:fd:8d:
0c:18:09:ae:cf:0a:56:e8:93:43:00:3c:6d:df:4b:
c5:c6:6a:c2:fa:82:9f:a1:d8:e1:45:a8:55:7f:78:
4d:2e:d9:9c:75:76:6c:33:a2:74:e0:cb:00:3d:ed:
4f:8b:15:4a:aa:0e:cd:39:22:62:56:47:1f:2d:9f:
8a:a4:25:5d:ae:47:24:da:77:1b:b3:6b:29:76:38:
82:1e:5d:95:1c:77:b1:09:6e:f1:7f:7a:3d:1a:85:
bf:14:ec:12:a8:48:63:06:b4:0c:aa:f2:5a:1a:bf:
ad:2c:41:72:bb:b9:ba:27:0b:8b:bd:9f:5f:66:08:
7f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:83:60:9D:6F:6D:2E:30:16:2A:86:C3:4A:6D:BF:24:D8:D3:0A:32
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/11152AE664B211F196134EBBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.216.0-45.201.231.255
45.201.240.0/20
45.207.224.0/19
Signature Algorithm: sha256WithRSAEncryption
44:2a:c4:2a:83:72:4f:ba:69:19:17:aa:70:36:7d:9f:fe:d2:
60:a6:43:35:d7:78:34:a5:7f:9d:f0:4e:5e:b1:f4:ae:9f:ae:
92:80:1b:f8:65:a5:87:36:be:20:46:27:3f:26:fd:41:90:00:
56:23:0e:a4:34:7c:91:9c:6f:67:2f:8b:13:5d:b2:86:1d:7d:
be:96:34:34:ec:4d:15:49:0f:a1:1a:58:84:fb:5f:da:5e:a3:
cf:d5:68:e8:36:6e:83:86:37:9b:66:30:88:e0:b4:15:0c:1f:
77:b5:4e:a8:5e:9d:72:9b:5b:0d:36:5a:08:92:ca:33:f6:4d:
c9:8d:c9:27:81:92:3b:7d:dc:38:c7:4b:f0:c4:b9:7b:89:08:
1d:2c:63:6a:5b:3c:f9:bd:5e:f1:c7:04:15:52:29:54:1a:98:
52:c4:50:b2:45:ce:6e:f4:e9:cd:a9:01:5c:ad:9b:be:59:32:
90:63:15:c5:9d:70:c1:f5:90:c3:f1:23:07:50:f1:66:f1:e2:
75:a3:ab:53:1a:44:da:6d:6d:56:3c:6e:11:f3:7e:cd:a0:91:
02:00:51:6a:7a:29:65:01:e2:b1:3d:ba:02:8e:54:07:27:fc:
af:f0:44:7b:69:10:49:c0:f6:64:c8:fc:a0:ae:ae:20:af:da:
30:06:5f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:18:04 2026 by rpki-client