Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4EE15A78633811F189C21EC2CE1D38B0.roa
File: 4EE15A78633811F189C21EC2CE1D38B0.roa (raw, json)
Hash identifier: vKANQ/Dryi9BZdwN4oJf/keSwo6onR9RVLabG2Ekw40=
Subject key identifier: 43:13:4A:A9:6A:04:10:D8:37:46:55:BC:C9:AB:BD:D5:53:26:A6:11
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BC5E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4EE15A78633811F189C21EC2CE1D38B0.roa
Signing time: Mon 08 Jun 2026 12:48:12 +0000
ROA not before: Mon 08 Jun 2026 12:48:07 +0000
ROA not after: Thu 08 Jul 2027 12:48:07 +0000
asID: 328888
IP address blocks: 45.192.250.0/24 maxlen: 24
45.200.4.0/24 maxlen: 24
45.200.5.0/24 maxlen: 24
45.200.8.0/24 maxlen: 24
45.200.9.0/24 maxlen: 24
45.200.12.0/24 maxlen: 24
45.200.13.0/24 maxlen: 24
45.202.68.0/24 maxlen: 24
45.202.70.0/24 maxlen: 24
45.202.72.0/24 maxlen: 24
45.202.73.0/24 maxlen: 24
45.205.68.0/24 maxlen: 24
45.205.69.0/24 maxlen: 24
45.205.70.0/24 maxlen: 24
45.205.71.0/24 maxlen: 24
45.205.98.0/24 maxlen: 24
45.205.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113758 (0x1bc5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 8 12:48:07 2026 GMT
Not After : Jul 8 12:48:07 2027 GMT
Subject: CN=6a26ba0c-f320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:19:be:d9:01:fa:4f:05:9f:75:97:f5:11:a0:
e5:48:30:8d:7f:ac:05:bc:44:45:db:e9:f1:c8:86:
53:65:0a:a9:c2:f4:9c:f8:f8:ef:af:c2:90:98:d9:
25:a6:e0:36:80:95:e0:ae:ac:4c:95:9f:a6:64:a9:
fd:b4:50:a6:0b:30:dc:a9:42:e2:67:fb:c6:39:b3:
5b:a4:e8:b9:67:10:17:e1:d8:f9:45:ad:aa:dc:d8:
65:c3:42:7d:46:8d:3f:21:f0:02:95:c2:87:11:4a:
22:ff:b8:e6:2b:f7:22:b2:6b:52:7d:55:3d:f7:c1:
e5:d5:04:4c:fd:e7:17:4b:6d:da:96:55:7e:38:34:
4b:f6:3f:bc:09:bf:a0:6b:f5:f6:75:b8:17:13:e1:
c5:9c:1c:a8:f1:c9:3b:2e:44:8a:c6:20:a3:94:86:
13:b1:65:a7:95:70:f9:50:03:24:7f:60:c1:1a:21:
df:e5:0c:5f:4f:e5:f9:81:4d:35:e9:d2:f5:ba:e2:
a2:e8:51:34:10:8f:b5:6a:79:9a:62:a4:61:92:55:
05:3c:c3:fd:9c:64:d5:00:87:f6:e8:f1:ed:90:f6:
25:f6:48:d1:32:ba:fd:dd:f2:70:10:c5:ea:b2:ae:
b2:82:d0:32:8f:b4:4b:05:82:14:4d:df:6e:45:1c:
d0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:13:4A:A9:6A:04:10:D8:37:46:55:BC:C9:AB:BD:D5:53:26:A6:11
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4EE15A78633811F189C21EC2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.250.0/24
45.200.4.0/23
45.200.8.0/23
45.200.12.0/23
45.202.68.0/24
45.202.70.0/24
45.202.72.0/23
45.205.68.0/22
45.205.98.0/23
Signature Algorithm: sha256WithRSAEncryption
6b:27:dc:a1:5a:24:51:b2:fb:18:57:9d:0f:0a:20:0e:d2:6d:
ed:c4:04:f0:57:df:2f:06:1d:71:fb:69:29:16:eb:96:3a:28:
84:e1:b7:58:bf:d5:27:d1:76:0e:5d:13:11:f6:a8:e3:54:ce:
05:1a:6e:f2:6a:4d:6a:8f:58:61:ce:23:e3:0e:4f:00:e4:17:
c6:5c:4f:ed:4a:33:ea:aa:7b:fc:8a:4c:c4:9d:0e:b5:2d:59:
c2:94:2b:78:dc:23:d3:a4:63:20:91:ee:07:57:fd:22:be:b1:
b9:7d:0e:4d:9c:95:7a:02:fe:5e:6e:6b:0c:51:49:5c:cb:4d:
6f:6a:9a:b8:13:34:80:45:07:1b:2f:13:40:ee:c0:de:65:fb:
99:8c:64:ff:ab:63:ca:2b:cd:c6:07:09:d5:2b:db:5c:83:66:
0e:eb:5f:d2:1e:0f:95:8e:bf:2b:ce:76:8e:b4:d8:b7:8d:e4:
c8:34:a0:bf:fa:13:74:ce:23:ac:b5:9b:3e:60:4a:00:46:35:
1d:61:a8:d6:c4:73:91:03:9d:3b:3c:65:e2:71:38:d1:cb:9c:
df:5b:01:e4:6f:75:04:66:81:d6:c2:e7:82:e3:a2:c2:0b:4a:
24:3f:e3:cf:c0:96:5e:03:53:58:81:71:a4:f4:47:95:6f:81:
15:ef:35:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:32:27 2026 by rpki-client