Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6D895C16646C11F1B633F104CF1D38B0.roa
File: 6D895C16646C11F1B633F104CF1D38B0.roa (raw, json)
Hash identifier: KvJ4qFle6XPaEkqdrdwsFcp8Wb7vrO5Ra4Doh4vPbds=
Subject key identifier: 83:22:C4:73:BB:A7:07:01:21:2A:90:53:91:62:8B:BF:92:CB:D9:CC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BC84
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6D895C16646C11F1B633F104CF1D38B0.roa
Signing time: Wed 10 Jun 2026 01:33:49 +0000
ROA not before: Wed 10 Jun 2026 01:33:44 +0000
ROA not after: Wed 17 Jun 2026 01:33:44 +0000
asID: 61112
IP address blocks: 45.196.96.0/24 maxlen: 24
45.196.97.0/24 maxlen: 24
45.202.240.0/22 maxlen: 24
45.202.244.0/24 maxlen: 24
45.202.245.0/24 maxlen: 24
45.202.246.0/23 maxlen: 24
45.202.246.0/24 maxlen: 24
45.202.247.0/24 maxlen: 24
45.202.248.0/22 maxlen: 24
45.202.248.0/23 maxlen: 24
45.202.248.0/24 maxlen: 24
45.202.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113796 (0x1bc84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 10 01:33:44 2026 GMT
Not After : Jun 17 01:33:44 2026 GMT
Subject: CN=6a28befc-cf20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c8:ed:46:9f:df:35:08:86:c1:58:e0:71:31:
1c:fe:6b:4d:51:80:a6:95:62:66:d7:61:38:13:a3:
96:de:c0:70:ae:59:ad:c3:54:38:c9:db:9d:7f:e9:
f4:1a:f0:35:93:11:6e:06:bf:cd:7f:5d:aa:6e:07:
02:85:0b:bd:fa:c6:71:64:cb:3e:78:fd:15:05:5e:
ba:6f:74:b2:fd:78:f7:e8:42:16:77:13:f3:51:2d:
45:61:90:de:80:70:b9:7c:5d:22:5a:1c:64:c4:04:
b5:dd:d6:56:e1:24:f0:02:d1:fa:08:b8:23:08:aa:
e7:05:2f:e0:9e:c6:81:b0:4e:9a:b2:5d:4e:cd:51:
01:8a:6b:2d:6e:3d:7f:b8:e8:e7:b8:20:17:36:66:
2b:eb:bb:4c:00:9c:7e:cb:a8:da:72:07:51:e4:b6:
a4:f7:28:08:78:c0:a8:b1:0a:31:12:e4:ec:90:a6:
40:3d:4d:98:1d:13:84:99:01:39:ca:28:b2:7a:7e:
1d:fa:b7:12:8b:4d:38:da:ed:68:62:a4:82:f5:b3:
4c:8a:3e:02:18:4a:41:d4:3a:d3:5e:7f:02:2e:61:
7b:88:44:32:0e:2c:34:f4:db:ca:49:a4:61:a3:c5:
cb:73:ae:cb:05:97:c7:98:4a:31:a5:0d:be:09:2d:
37:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:22:C4:73:BB:A7:07:01:21:2A:90:53:91:62:8B:BF:92:CB:D9:CC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6D895C16646C11F1B633F104CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.96.0/23
45.202.240.0-45.202.251.255
Signature Algorithm: sha256WithRSAEncryption
86:ac:d3:c0:b2:75:d0:78:02:5e:e4:83:15:c8:8a:de:ae:0a:
e8:92:66:95:7a:1a:44:bb:1b:83:d4:22:33:e6:81:d2:fa:1e:
45:ab:fc:dd:c2:25:97:a0:35:6a:9d:bf:df:94:1b:67:66:3d:
17:0e:ef:82:be:40:01:dd:56:8c:f4:fa:28:94:81:58:58:20:
7a:f1:84:2a:a3:42:da:d1:3e:a4:72:9c:c9:57:2c:22:18:26:
46:74:ff:3f:bc:3b:45:54:87:61:6f:8e:bd:0c:bd:06:5c:0d:
a0:e8:ce:f1:e5:21:1e:67:eb:ab:43:60:8b:60:c7:e5:b3:6e:
76:db:16:82:65:c7:66:10:4d:e8:30:dc:ed:54:f4:57:0f:bf:
6f:55:0c:c4:7b:29:62:02:12:fa:4a:ba:e3:e1:28:12:b8:0b:
79:43:f2:4a:44:0e:67:3d:9c:a5:12:d6:2e:dd:7e:8a:0a:51:
8f:58:9a:65:31:e0:bd:84:a1:2d:d8:f3:91:f8:f2:05:97:5c:
06:ff:12:a7:97:82:e0:93:fa:32:e3:50:ef:3f:cd:9d:ee:b0:
64:61:33:d0:d7:1e:57:f1:1e:0e:7a:51:c2:34:8e:bb:47:5f:
25:2a:b7:fd:78:36:e8:9c:b3:c4:f4:54:fd:70:c6:99:d4:92:
dd:c5:f6:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:18:22 2026 by rpki-client