Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/68C01366633911F1820663C8CE1D38B0.roa
File: 68C01366633911F1820663C8CE1D38B0.roa (raw, json)
Hash identifier: VsDontb86nhKESnhuwrl0QNmQkbau9L5DzyMa4JoPEU=
Subject key identifier: 25:77:AC:A2:A1:78:13:A4:11:DD:5D:9D:B7:A5:14:F7:37:00:4B:66
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BC60
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/68C01366633911F1820663C8CE1D38B0.roa
Signing time: Mon 08 Jun 2026 12:56:05 +0000
ROA not before: Mon 08 Jun 2026 12:56:00 +0000
ROA not after: Thu 08 Jul 2027 12:56:00 +0000
asID: 328608
IP address blocks: 45.192.250.0/24 maxlen: 24
45.200.4.0/24 maxlen: 24
45.200.5.0/24 maxlen: 24
45.200.8.0/24 maxlen: 24
45.200.9.0/24 maxlen: 24
45.200.12.0/24 maxlen: 24
45.200.13.0/24 maxlen: 24
45.202.68.0/24 maxlen: 24
45.202.70.0/24 maxlen: 24
45.202.72.0/24 maxlen: 24
45.202.73.0/24 maxlen: 24
45.202.88.0/24 maxlen: 24
45.205.68.0/24 maxlen: 24
45.205.69.0/24 maxlen: 24
45.205.70.0/24 maxlen: 24
45.205.71.0/24 maxlen: 24
45.205.98.0/24 maxlen: 24
45.205.99.0/24 maxlen: 24
45.207.20.0/24 maxlen: 24
45.207.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113760 (0x1bc60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 8 12:56:00 2026 GMT
Not After : Jul 8 12:56:00 2027 GMT
Subject: CN=6a26bbe5-0b80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:24:cf:8d:29:d5:63:1e:f6:f6:5e:f0:33:db:
c7:e6:4d:db:d6:75:02:07:07:1b:dd:a8:da:44:8a:
c7:36:ce:1b:06:7b:0c:c7:7a:08:3b:e4:8e:ad:ee:
6e:9b:02:ef:74:88:c7:33:d6:06:21:cb:11:83:47:
08:c7:63:0f:25:87:51:05:33:eb:1b:0a:62:ff:05:
b0:03:4c:6b:51:a8:e2:0a:f2:37:54:f6:dd:98:c0:
7d:cf:53:37:c9:03:1c:1c:ee:5f:23:2c:b5:a1:40:
80:a8:54:62:90:a0:5c:eb:d2:82:ae:62:dd:a7:56:
2d:49:7c:c4:05:55:57:96:9e:c4:46:43:9e:3a:30:
ef:b0:c8:16:3e:ad:f3:5e:a0:d4:d5:00:9e:73:1c:
03:e1:99:e9:b0:b1:04:d2:15:e5:0a:6a:85:cd:db:
7b:3d:24:8d:aa:d5:3f:d5:4a:c9:6d:77:2a:01:49:
c6:b6:19:61:cf:44:10:81:da:d6:bd:55:98:fa:3b:
01:ac:cc:13:d2:87:3d:4a:6f:da:1b:61:9e:e1:95:
80:4f:15:26:07:d0:98:7a:57:e8:54:c4:26:85:cb:
54:85:bd:13:ab:d2:d3:87:05:30:8c:22:47:18:92:
62:8c:ac:ac:09:9b:fc:17:70:a5:8f:7d:5b:87:d8:
99:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:77:AC:A2:A1:78:13:A4:11:DD:5D:9D:B7:A5:14:F7:37:00:4B:66
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/68C01366633911F1820663C8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.250.0/24
45.200.4.0/23
45.200.8.0/23
45.200.12.0/23
45.202.68.0/24
45.202.70.0/24
45.202.72.0/23
45.202.88.0/24
45.205.68.0/22
45.205.98.0/23
45.207.20.0/24
45.207.60.0/24
Signature Algorithm: sha256WithRSAEncryption
28:fa:2b:40:9d:5f:fe:a6:b4:30:37:b8:96:28:3d:e8:dd:57:
a7:06:2c:2f:b9:55:64:43:72:4c:26:5d:a9:7c:4d:25:0a:3b:
48:a7:8a:fc:60:79:b2:24:de:52:52:19:35:e9:dd:1c:1b:6b:
09:0d:80:7f:a0:62:42:f1:aa:9d:98:e4:94:9c:39:ab:dd:94:
35:f8:0c:c1:ee:92:e7:40:13:6b:3d:ff:d9:3e:cc:ba:86:ef:
94:1d:a0:e2:6a:4c:ba:d9:32:36:a3:87:97:af:22:2e:f6:9b:
81:5b:f4:f3:41:a5:eb:92:5b:64:4b:bf:ea:93:d4:cc:ca:81:
9b:51:33:3d:4d:00:c5:dc:8e:fc:7f:f1:3d:08:27:57:23:b3:
f8:f1:7c:0d:19:de:25:17:bf:e0:92:e7:3c:57:91:55:91:d9:
ca:38:fe:17:c0:c4:4e:3f:78:9a:92:aa:09:29:09:4c:21:64:
e3:c3:08:47:dc:05:15:fe:a8:fa:95:71:76:c0:12:6b:4f:d9:
7c:4a:f9:6f:1a:22:44:d0:0e:c3:91:77:12:26:83:b1:55:93:
f8:45:6a:70:b7:a8:32:93:4d:df:b5:0a:24:bc:70:dc:8c:6e:
57:ae:3a:ca:b1:e0:22:59:34:4f:02:1b:40:32:84:11:2b:fd:
6d:5b:77:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:55:29 2026 by rpki-client