Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9870E07C64AB11F1A7FBED14CF1D38B0.roa
File: 9870E07C64AB11F1A7FBED14CF1D38B0.roa (raw, json)
Hash identifier: bDqBMaD/tOXg+f5tTb8oV6GszonbV54G9MlxjtKrR4s=
Subject key identifier: 84:EA:34:DD:C2:9F:DC:4C:3E:32:F8:FA:21:87:FB:A9:86:CB:0C:F2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BCAA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9870E07C64AB11F1A7FBED14CF1D38B0.roa
Signing time: Wed 10 Jun 2026 09:05:59 +0000
ROA not before: Wed 10 Jun 2026 09:05:54 +0000
ROA not after: Fri 10 Jul 2026 09:05:54 +0000
asID: 139646
IP address blocks: 45.200.14.0/23 maxlen: 24
45.200.16.0/23 maxlen: 24
45.200.18.0/23 maxlen: 24
45.200.20.0/22 maxlen: 24
45.200.24.0/21 maxlen: 24
45.200.32.0/19 maxlen: 24
45.201.214.0/23 maxlen: 24
45.201.216.0/21 maxlen: 24
45.201.224.0/21 maxlen: 24
45.201.240.0/20 maxlen: 24
45.204.0.0/24 maxlen: 24
45.207.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113834 (0x1bcaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 10 09:05:54 2026 GMT
Not After : Jul 10 09:05:54 2026 GMT
Subject: CN=6a2928f7-3ead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:07:e5:ee:06:87:21:b6:d5:c4:c8:eb:ec:23:
0e:3b:bc:ca:f0:5f:b9:0e:5c:f0:f0:e0:2f:e9:b9:
c6:3d:f8:bc:81:c0:71:d8:cf:b1:4e:82:1c:d7:c8:
d5:d9:d0:a6:a8:4e:0c:0d:27:37:6b:74:db:69:cf:
63:3c:9d:b4:02:c3:0b:b9:41:6c:b5:ef:4c:1d:b0:
40:ae:d3:88:c5:a5:9f:5f:7b:e7:d0:4e:bf:69:a8:
38:c7:24:4c:97:aa:91:68:44:82:ca:0a:87:30:03:
65:2d:71:7e:92:8a:30:16:bb:39:7f:ef:a9:fb:03:
37:e8:a1:5a:68:6a:e3:c5:09:d9:26:23:5a:53:4c:
3c:5e:5c:f3:17:7f:f2:2a:10:d7:0c:3f:e9:ae:19:
af:5c:82:fc:03:3e:2d:d3:1e:e6:8e:a8:a0:e2:33:
3f:e0:01:60:8f:5d:54:ec:58:3a:01:23:de:aa:41:
e5:6a:54:a0:20:20:69:db:a6:64:a5:37:0c:5d:2f:
39:45:d0:b3:dd:f8:a7:64:cb:64:03:02:2a:39:48:
ec:6e:10:13:55:ff:49:ef:cb:0a:70:c4:b7:51:f7:
ca:b1:b3:40:fe:f2:f2:67:4e:81:c0:63:3b:da:a9:
ea:c6:f3:65:4d:35:37:bf:16:ff:ce:a9:b6:90:a1:
a7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:EA:34:DD:C2:9F:DC:4C:3E:32:F8:FA:21:87:FB:A9:86:CB:0C:F2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9870E07C64AB11F1A7FBED14CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.14.0-45.200.63.255
45.201.214.0-45.201.231.255
45.201.240.0/20
45.204.0.0/24
45.207.224.0/19
Signature Algorithm: sha256WithRSAEncryption
1e:ef:f2:70:cc:50:0a:f9:c4:88:a1:2e:9e:ae:1c:bc:fe:0e:
95:d3:ca:e8:15:19:52:fb:c9:82:11:3e:ff:a0:1d:67:a0:0d:
4b:c8:04:f6:8c:d0:3c:c0:be:9a:12:54:ef:49:62:12:09:b7:
9e:39:2d:13:49:3e:7d:41:89:a3:c4:a2:f8:8d:86:f6:c0:b0:
a8:bc:0c:6a:11:52:bd:f9:38:86:7d:eb:89:76:41:e1:3f:b9:
39:40:cd:e5:73:67:92:2b:82:06:9c:ce:26:64:df:31:d3:21:
81:7d:49:ef:a3:87:d1:b4:54:50:1e:72:44:f6:10:06:0e:47:
90:a5:d1:e0:69:28:a9:54:e0:ce:cc:6a:0f:24:1c:65:a3:1b:
b3:02:d2:a8:b9:aa:5f:1b:32:8c:1f:62:7f:ab:34:6a:f0:02:
23:b9:f2:51:e6:61:1b:cc:4f:8d:5b:8a:5d:a3:87:66:01:a4:
65:eb:2d:33:9f:07:fc:0b:e2:a7:ed:4d:6e:af:f7:d5:69:e1:
60:87:61:af:9a:73:f6:8f:da:fd:ec:3b:30:ca:ca:4c:7d:25:
ae:cd:bc:36:25:a6:99:79:12:90:c2:44:46:b3:dc:e8:06:00:
27:91:11:f6:4f:04:e1:a9:02:cb:3a:95:98:76:ff:43:80:9f:
33:95:e6:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:17:51 2026 by rpki-client