Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CCE8FE682DEF11F18BD221D9DAE4EC9C.roa
File: CCE8FE682DEF11F18BD221D9DAE4EC9C.roa (raw, json)
Hash identifier: iq1Ifz7q62tbUhT/BlJoRBS40dkGHXtPnkFoxwj0k8w=
Subject key identifier: 20:60:04:93:89:EF:97:3F:5A:66:69:62:F2:49:66:AB:F3:66:39:A0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A918
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CCE8FE682DEF11F18BD221D9DAE4EC9C.roa
Signing time: Wed 01 Apr 2026 17:25:39 +0000
ROA not before: Wed 01 Apr 2026 17:25:34 +0000
ROA not after: Mon 28 Sep 2026 17:25:34 +0000
asID: 26617
IP address blocks: 45.195.146.0/24 maxlen: 24
45.195.206.0/24 maxlen: 24
45.195.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108824 (0x1a918)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 1 17:25:34 2026 GMT
Not After : Sep 28 17:25:34 2026 GMT
Subject: CN=69cd5512-678e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:17:a3:a0:3f:0a:1d:30:28:42:e8:0e:86:97:
07:d4:59:fb:df:a3:75:f2:a2:71:6e:c2:fe:15:84:
a9:f6:0c:40:7f:f3:65:1a:0d:d5:f6:61:c9:ef:64:
4c:c7:4e:b3:aa:bf:0d:e6:be:cb:b3:7d:7b:2b:62:
af:af:03:22:2d:56:87:3b:ae:5d:d8:8b:47:e7:b5:
6f:a1:9a:9f:2f:5d:e3:d8:52:72:e6:4f:0f:4b:51:
f2:56:89:47:04:e4:c6:81:39:b4:59:f3:88:63:71:
45:62:ad:bb:29:a9:52:09:e5:85:3a:38:2f:70:cd:
d8:9c:3d:ac:d8:56:de:c6:09:77:c1:69:c5:b3:d2:
98:af:af:90:66:dc:6c:67:58:ff:e2:b8:d9:de:86:
54:e4:55:9c:dd:28:40:4f:76:dd:63:ba:57:63:94:
79:e1:c1:07:5e:d0:4b:d2:01:4c:9b:e3:e3:6f:8c:
a4:b6:98:37:d9:fe:d3:c4:d4:5e:7c:df:e9:3e:89:
bc:3c:17:cf:62:c5:5f:51:77:1b:51:c3:14:2c:51:
bd:db:cd:5d:3a:ae:19:6f:6c:f8:f9:80:a3:c9:cd:
18:20:e7:b1:7b:dd:25:59:ab:47:3d:35:a0:28:d3:
8b:76:86:f4:b1:12:e7:00:0f:2c:a6:cd:86:94:00:
59:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:60:04:93:89:EF:97:3F:5A:66:69:62:F2:49:66:AB:F3:66:39:A0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CCE8FE682DEF11F18BD221D9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.146.0/24
45.195.206.0/23
Signature Algorithm: sha256WithRSAEncryption
aa:bd:ce:aa:bf:6e:c9:bf:16:4a:3e:35:c9:94:52:90:7f:25:
00:b7:19:e4:4b:f8:9a:1d:f7:81:4e:19:f6:34:1b:5c:54:92:
b7:55:6d:ec:f2:2f:43:63:05:c4:9b:5c:88:db:9d:41:07:50:
88:bb:08:de:46:90:03:39:f0:35:bf:a3:e4:1e:68:5b:46:d5:
29:98:d7:52:a6:9f:41:44:1e:ec:6f:2b:00:ff:a3:79:c9:2e:
23:f7:10:f4:53:d3:51:79:40:86:b5:a0:45:77:fd:a4:a8:d0:
23:46:5f:4a:bd:f1:a4:96:3d:30:50:c8:47:4d:89:1e:ea:b5:
9b:8b:1f:40:a8:2a:10:07:f8:73:a7:f5:5a:f1:6a:37:6c:55:
3b:5a:86:a4:5f:a3:f3:8b:50:27:32:2c:61:c2:b7:cd:ab:53:
63:d4:38:ea:d9:e3:a0:16:74:4b:90:c0:99:75:95:cf:66:6d:
ae:16:74:a4:ed:5e:c8:13:d5:0f:9b:12:04:20:1c:29:b1:e4:
9b:10:58:37:c5:ed:41:54:85:bb:5f:a5:e0:19:9b:6c:69:6e:
ff:a9:d3:9a:b3:9a:65:86:4c:9e:4c:f4:8f:a5:15:0e:4c:10:
a7:e7:b1:f7:8e:59:8c:05:94:35:06:73:26:71:cb:2f:f2:f0:
da:74:72:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:19:21 2026 by rpki-client