Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1A941572646D11F1A2DE7409CF1D38B0.roa
File: 1A941572646D11F1A2DE7409CF1D38B0.roa (raw, json)
Hash identifier: HI9U3MbLAvRDJofUJaGdwuc4z9ViZXebh4XJEjc+fxY=
Subject key identifier: 53:8E:7C:96:39:53:92:B4:EB:49:80:39:AA:72:93:E9:AE:BF:02:F8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BC86
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1A941572646D11F1A2DE7409CF1D38B0.roa
Signing time: Wed 10 Jun 2026 01:38:39 +0000
ROA not before: Wed 10 Jun 2026 01:38:34 +0000
ROA not after: Wed 17 Jun 2026 01:38:34 +0000
asID: 61112
IP address blocks: 45.192.240.0/22 maxlen: 24
45.192.240.0/24 maxlen: 24
45.202.254.0/23 maxlen: 24
45.202.254.0/24 maxlen: 24
45.202.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113798 (0x1bc86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 10 01:38:34 2026 GMT
Not After : Jun 17 01:38:34 2026 GMT
Subject: CN=6a28c01f-9fb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:a3:ac:ab:55:3e:e9:ca:50:41:86:d7:46:53:
4b:0d:12:12:85:4f:93:c0:7f:31:31:62:21:9b:48:
78:af:5f:08:49:8b:3c:97:32:ca:7a:f0:c4:88:b6:
16:41:80:13:85:04:c4:a5:33:8d:96:a7:a2:08:e6:
29:0e:53:f4:58:8d:12:86:20:31:a8:d9:f7:61:5d:
84:b4:70:bb:d7:d4:f0:b9:9e:07:50:3d:5d:35:92:
18:a0:87:c0:2c:3f:80:f1:7f:3c:50:b7:ab:b1:33:
a5:c9:2d:da:92:e1:f2:b5:70:3b:37:20:76:58:4d:
03:56:9d:22:a9:96:ab:5f:04:f9:e2:61:f5:b2:0a:
27:94:54:e3:6f:74:a7:d7:82:14:a3:06:38:f9:62:
45:f6:b3:fd:41:8d:a6:1b:f3:cf:0b:9f:14:ac:a0:
50:db:36:42:e6:04:04:25:4b:b1:04:d7:fe:92:d1:
f0:cb:3c:44:71:39:55:81:6d:d9:32:3d:ec:60:b5:
28:b4:05:22:5f:9b:c2:78:af:36:4f:41:5c:71:b2:
1c:24:a8:34:29:1f:f9:f8:85:4a:59:0d:15:0d:4e:
d5:69:66:a8:c2:c5:df:f0:a4:96:89:6b:87:e5:07:
bb:2a:60:6e:19:09:81:93:1c:a3:54:82:55:b9:03:
0d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:8E:7C:96:39:53:92:B4:EB:49:80:39:AA:72:93:E9:AE:BF:02:F8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1A941572646D11F1A2DE7409CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.240.0/22
45.202.254.0/23
Signature Algorithm: sha256WithRSAEncryption
bb:7c:db:84:27:4f:af:a7:e7:53:f1:eb:3d:c1:aa:eb:1a:01:
74:58:70:30:53:a7:42:9c:44:a9:07:54:51:74:88:34:1e:69:
13:95:d0:e9:68:73:17:d3:eb:09:b4:17:40:d6:99:2c:0f:e9:
b5:1b:63:50:76:4d:32:6b:7f:35:84:f1:68:2f:c9:a4:b0:5b:
9f:2a:fd:73:f5:d4:e8:52:14:29:3a:e8:f9:de:90:9c:70:1c:
53:9d:26:dd:90:b1:12:fa:3d:db:c1:25:5d:44:4c:76:a1:aa:
1e:fb:8d:c0:6f:ee:fd:cc:00:0b:7c:a6:1d:c3:35:97:0d:07:
0c:87:8e:57:93:c7:00:1a:c8:22:05:2f:c3:cc:b0:c8:47:e4:
bb:9d:4f:f6:e1:cd:e5:f4:43:0c:88:ce:84:fa:00:42:ff:18:
ee:aa:06:5a:ec:ea:63:22:da:6f:4a:a8:0f:03:3b:d4:af:36:
dc:ec:35:2b:75:c0:f7:54:68:2b:c6:5d:1f:76:be:41:6c:1c:
84:44:52:b0:18:a0:33:6d:da:1a:ff:14:c0:9a:c5:c0:9e:38:
1a:e1:f3:a4:0a:75:c0:04:a4:9c:9d:36:be:26:38:cf:52:e3:
0f:00:c8:27:45:ec:04:5f:40:5d:df:68:7c:43:3e:56:1f:b4:
8b:b3:1b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:20:16 2026 by rpki-client