Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8B42DDC0373211F1B787460CCF1D38B0.roa
File: 8B42DDC0373211F1B787460CCF1D38B0.roa (raw, json)
Hash identifier: SPcQvsuB9pFLLSWKBEzNc9BcxWPfA2HHsSGeeryYjz4=
Subject key identifier: FA:ED:1F:33:CD:71:9B:F4:0B:88:BE:0C:64:FB:F8:AB:37:0D:DC:A5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AC68
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8B42DDC0373211F1B787460CCF1D38B0.roa
Signing time: Mon 13 Apr 2026 12:16:05 +0000
ROA not before: Mon 13 Apr 2026 12:16:00 +0000
ROA not after: Tue 19 May 2026 12:16:00 +0000
asID: 11404
IP address blocks: 45.195.0.0/24 maxlen: 24
45.195.84.0/22 maxlen: 24
45.196.92.0/22 maxlen: 24
45.197.200.0/21 maxlen: 24
45.197.224.0/21 maxlen: 24
45.200.144.0/20 maxlen: 24
45.202.16.0/20 maxlen: 24
45.204.32.0/20 maxlen: 24
45.204.112.0/20 maxlen: 24
45.205.176.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109672 (0x1ac68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 13 12:16:00 2026 GMT
Not After : May 19 12:16:00 2026 GMT
Subject: CN=69dcde85-79e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e6:24:f3:68:a2:85:43:f7:bc:5d:81:8b:35:
a5:0f:3a:b5:9a:c4:ac:1c:0c:05:3d:6b:cb:46:b1:
c8:5e:ab:b8:ac:72:0d:93:85:28:c6:6f:ab:3d:d5:
8e:bc:10:a7:03:d5:3b:58:78:74:fd:d8:35:13:4a:
61:d2:41:e2:a1:0d:18:a8:03:af:53:b5:88:9b:01:
94:3d:71:aa:21:15:bc:48:03:e5:44:97:a6:bc:bf:
07:28:ae:f2:48:0e:62:59:1b:83:ea:ab:3c:33:71:
b7:8b:92:26:55:be:1b:f5:30:06:ca:49:85:24:40:
4e:8b:6b:1c:4b:56:73:34:ff:ad:10:f6:51:b9:06:
54:14:e1:b5:43:ad:69:9c:ca:4a:4e:31:c4:ef:06:
1e:e0:d7:c0:b9:89:8c:33:ea:c7:19:03:78:ac:de:
a9:94:0d:34:f6:9f:eb:1e:08:45:34:be:f4:2d:1a:
77:b3:bf:be:59:14:db:c1:32:61:f2:77:01:eb:44:
36:d0:e9:75:0c:1a:3d:f1:99:60:fa:e0:89:eb:59:
1e:23:22:b3:cf:f3:29:07:6a:58:f1:ca:87:15:38:
7c:42:7d:a8:35:8a:91:14:00:5f:37:0d:43:84:19:
c1:c9:79:47:4a:47:bd:33:c9:5c:2f:c3:c7:95:62:
2c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:ED:1F:33:CD:71:9B:F4:0B:88:BE:0C:64:FB:F8:AB:37:0D:DC:A5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8B42DDC0373211F1B787460CCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.0.0/24
45.195.84.0/22
45.196.92.0/22
45.197.200.0/21
45.197.224.0/21
45.200.144.0/20
45.202.16.0/20
45.204.32.0/20
45.204.112.0/20
45.205.176.0/20
Signature Algorithm: sha256WithRSAEncryption
88:20:cb:cf:3c:be:1d:16:d4:78:22:fd:75:58:73:03:7d:04:
bd:c1:7e:21:d3:5b:d0:70:40:ff:4d:be:72:29:00:77:cc:ac:
55:0b:8b:cf:4e:ed:b6:67:c2:2c:0b:81:46:fe:7f:dc:21:c8:
03:e6:55:bb:7a:26:6a:e5:1a:94:db:f0:dc:16:45:90:80:a8:
42:04:76:b0:a8:b1:2b:9a:2d:96:b9:f8:07:9a:08:3c:60:f9:
f6:c4:8e:3e:b7:00:69:77:74:2e:f4:3b:6e:12:05:a9:6f:73:
06:b4:29:1b:82:dd:dc:0c:b6:c4:c5:62:5c:9e:c2:11:33:9b:
e4:48:6c:d9:12:d2:fb:bd:bc:32:96:4b:9f:5f:b8:79:db:4f:
e8:dd:97:2b:80:54:1e:3e:dd:54:0d:3f:a8:3a:9f:c0:3c:58:
06:6d:03:6b:1f:3b:85:d6:c2:ee:cd:c8:ec:b4:c7:6c:14:e8:
d9:de:fa:c9:4b:27:6a:74:07:7e:09:5f:cc:aa:f0:e3:e0:71:
b3:97:91:41:1e:3d:e1:53:52:a0:a9:59:cf:fa:62:ee:e2:d9:
0e:b3:e6:c9:c7:64:e3:86:74:dc:15:ac:44:ba:73:d8:75:77:
9f:5b:e5:cc:32:35:60:e0:2c:43:d6:9e:ad:fb:07:b5:44:fe:
59:ab:1f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:48:25 2026 by rpki-client