Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5154E6BE600211F186870EBDCE1D38B0.roa
File: 5154E6BE600211F186870EBDCE1D38B0.roa (raw, json)
Hash identifier: 0ni+816QOogdKkKgrJP676nLWEQLEUtUX9m05f/IXwY=
Subject key identifier: 43:37:98:E0:47:F3:29:27:C1:EA:F1:A8:BD:39:2A:84:37:AE:A5:FA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BBC6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5154E6BE600211F186870EBDCE1D38B0.roa
Signing time: Thu 04 Jun 2026 10:44:10 +0000
ROA not before: Thu 04 Jun 2026 10:44:05 +0000
ROA not after: Sat 29 May 2027 10:44:05 +0000
asID: 131178
IP address blocks: 45.201.192.0/20 maxlen: 24
45.201.192.0/24 maxlen: 24
45.201.193.0/24 maxlen: 24
45.201.194.0/24 maxlen: 24
45.201.195.0/24 maxlen: 24
45.201.196.0/24 maxlen: 24
45.201.197.0/24 maxlen: 24
45.201.198.0/24 maxlen: 24
45.201.199.0/24 maxlen: 24
45.201.200.0/24 maxlen: 24
45.201.201.0/24 maxlen: 24
45.201.202.0/24 maxlen: 24
45.201.203.0/24 maxlen: 24
45.201.204.0/24 maxlen: 24
45.201.205.0/24 maxlen: 24
45.201.206.0/24 maxlen: 24
45.201.207.0/24 maxlen: 24
45.201.208.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113606 (0x1bbc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 4 10:44:05 2026 GMT
Not After : May 29 10:44:05 2027 GMT
Subject: CN=6a2156fa-a99c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:72:c1:24:37:79:58:1b:dd:82:03:bb:cf:6b:
2e:5a:f1:52:5f:06:c0:f5:33:db:80:29:bb:2a:81:
19:4e:ee:10:62:35:17:d7:79:61:88:9e:5b:cf:dd:
07:ac:21:66:13:ee:74:fa:30:6e:9b:ec:14:38:aa:
d2:ae:0c:57:e8:20:2b:1e:9c:cd:ed:9a:ca:ec:85:
5c:2a:bb:35:62:e0:43:fd:b1:ca:68:53:78:fd:56:
08:cd:5c:0c:1e:3a:98:2f:73:99:6a:dd:d8:64:3f:
35:d9:35:cf:f5:19:1a:1c:91:ea:86:2e:6b:24:3c:
3f:ea:10:ca:c5:3d:37:22:39:15:15:0a:0e:ba:7f:
c7:77:42:5e:ff:8c:6d:e4:75:c2:2d:59:4b:99:1a:
bc:67:43:ca:c3:ae:bd:d7:29:48:f0:1c:05:a1:63:
7a:93:1f:35:99:0c:59:db:63:9c:2e:03:70:aa:a8:
a8:4a:ba:0a:e1:75:78:03:a4:22:ed:c5:19:21:85:
9a:0d:27:a3:91:7e:29:8f:91:f9:26:23:78:8a:4e:
e3:ed:d0:d1:ee:ec:b7:30:17:db:2f:b0:70:d1:da:
eb:b5:00:18:59:a2:cd:77:a7:ea:f7:62:ca:79:e6:
75:f5:92:ef:c0:b1:33:42:16:3c:76:9d:b2:32:ef:
d2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:37:98:E0:47:F3:29:27:C1:EA:F1:A8:BD:39:2A:84:37:AE:A5:FA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5154E6BE600211F186870EBDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.192.0-45.201.209.255
Signature Algorithm: sha256WithRSAEncryption
29:14:8b:9a:cf:9e:d3:64:3b:07:58:cb:e1:2c:00:06:c9:17:
31:3b:23:3a:e1:d1:2c:29:be:23:b8:a1:1d:e8:5a:52:be:b1:
34:fb:13:71:26:d6:26:fa:3f:af:0b:cb:bc:8a:50:81:c4:0d:
93:65:57:67:30:86:b6:d9:f3:ac:21:aa:c3:77:92:7b:c6:96:
26:dc:a0:6c:d3:8b:26:3e:15:bb:ec:b0:0f:d6:4a:4f:5f:d7:
da:ef:b4:b4:17:d6:85:9d:d4:de:47:f3:6b:1a:58:63:ce:41:
d1:4b:a5:6b:52:55:b0:de:85:ad:ee:be:0f:75:77:e9:a0:3b:
5c:16:6b:73:5f:66:a9:f0:68:95:7b:e6:28:9d:dc:20:7b:80:
79:d4:54:a6:b4:06:b9:ae:46:5d:8f:42:fd:30:96:4b:76:a3:
17:20:50:e0:2f:9b:1a:b4:eb:c5:ea:42:ed:fd:7c:47:ce:9a:
33:6f:34:67:f3:76:00:75:28:40:87:a5:dd:8e:ef:aa:27:34:
a1:db:ca:a1:47:6e:c3:8e:a3:a3:e7:2b:76:72:50:3d:3d:d8:
f8:c0:3a:e1:58:90:93:86:e7:44:39:2c:56:bc:c1:e7:04:3d:
11:68:76:ec:d2:3a:10:43:1d:e6:68:cb:a2:c6:8f:51:23:dc:
9d:71:59:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:48:11 2026 by rpki-client