Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF43617A34F311F1A85F13CCCE1D38B0.roa
File: CF43617A34F311F1A85F13CCCE1D38B0.roa (raw, json)
Hash identifier: NvyuMeydMKDnTWJT9zirddycE9w5RUgXQtMH4TbLVfk=
Subject key identifier: 01:63:EB:BE:00:0C:E4:97:BD:CC:F3:02:83:BA:5D:69:85:DE:64:B8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01ABCC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF43617A34F311F1A85F13CCCE1D38B0.roa
Signing time: Fri 10 Apr 2026 15:41:59 +0000
ROA not before: Fri 10 Apr 2026 15:41:54 +0000
ROA not after: Sat 10 Jul 2027 15:41:54 +0000
asID: 36898
IP address blocks: 45.205.211.0/24 maxlen: 24
45.205.212.0/24 maxlen: 24
45.205.213.0/24 maxlen: 24
45.205.214.0/24 maxlen: 24
45.205.215.0/24 maxlen: 24
45.205.216.0/24 maxlen: 24
45.205.217.0/24 maxlen: 24
45.205.218.0/24 maxlen: 24
45.205.219.0/24 maxlen: 24
45.205.220.0/24 maxlen: 24
45.205.221.0/24 maxlen: 24
45.205.222.0/24 maxlen: 24
45.205.223.0/24 maxlen: 24
45.205.224.0/24 maxlen: 24
45.205.225.0/24 maxlen: 24
45.205.226.0/24 maxlen: 24
45.205.227.0/24 maxlen: 24
45.205.228.0/24 maxlen: 24
45.205.229.0/24 maxlen: 24
45.205.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109516 (0x1abcc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 10 15:41:54 2026 GMT
Not After : Jul 10 15:41:54 2027 GMT
Subject: CN=69d91a47-e4a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:82:47:19:42:bd:5e:2c:e9:dd:30:9b:b4:7b:
99:17:f6:12:27:77:30:51:31:a8:e2:7a:23:88:e0:
81:4e:82:cc:56:f9:e9:36:8e:f9:9a:11:b5:ae:a4:
81:4d:2e:30:e6:a7:6b:60:0f:49:6e:c5:ea:f3:e4:
c6:4b:a8:7f:71:4c:49:ba:fd:39:cf:af:02:fe:41:
f8:31:ee:4e:e3:d8:89:2d:a5:73:2b:c9:f7:ee:c9:
79:f2:b2:6e:92:5a:0d:71:de:d7:8a:6a:ef:21:ae:
54:20:48:08:54:96:71:74:54:c2:03:99:72:26:b0:
cc:c0:84:43:9f:5d:0a:ed:41:5a:1e:25:ec:47:ab:
40:32:d7:2a:e0:1b:40:0b:da:5b:88:a7:74:3f:49:
9c:e5:b7:7c:4c:8f:03:33:c4:d0:02:04:85:e7:89:
9e:c3:12:40:2f:c0:4b:d1:89:11:e2:c4:92:f0:e6:
b0:56:69:2f:e3:c3:56:29:74:90:2c:49:7f:c8:5a:
69:6c:96:4f:f8:ac:5b:d6:c3:b2:b1:71:e3:3d:ff:
5d:ab:5a:90:87:a0:56:8e:8e:3b:6e:ee:e4:94:c0:
02:1d:62:e5:18:f4:4a:61:be:7f:eb:ff:d6:62:9d:
0b:ec:c7:bb:3f:6c:fd:bf:cb:e2:f2:f5:0a:a7:60:
76:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:63:EB:BE:00:0C:E4:97:BD:CC:F3:02:83:BA:5D:69:85:DE:64:B8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF43617A34F311F1A85F13CCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.211.0-45.205.230.255
Signature Algorithm: sha256WithRSAEncryption
bb:28:d5:e0:8e:66:32:2e:73:dc:ea:28:95:51:8f:83:33:da:
df:8e:5f:f9:39:bc:42:1b:fe:ed:b1:6b:d9:ff:78:66:ec:51:
3d:66:f4:85:4f:53:77:46:c7:f2:71:08:6e:17:c3:50:06:db:
ea:40:37:52:ac:dc:c0:15:39:8f:09:94:93:32:e2:02:f2:e1:
4a:fd:4c:b3:8b:49:b6:de:46:7b:06:c2:d2:92:28:3b:83:77:
ea:a7:d0:fc:b9:8e:25:70:b3:46:c6:03:35:8b:e2:8a:e9:7b:
2f:4d:a6:df:4a:bf:b5:55:37:70:41:25:38:0b:07:0a:5d:1a:
fa:be:06:44:ee:5c:b3:3c:1c:c4:ad:4b:c7:69:dc:b4:3e:ac:
28:0e:ad:6f:49:91:23:5e:24:80:50:35:20:07:80:a9:8b:6b:
c8:ae:21:5d:39:e8:6a:46:3c:f4:b1:a1:97:c2:ae:ef:f0:60:
a0:d9:85:5c:15:0c:dd:20:fc:6b:14:3e:8f:38:27:f6:05:40:
17:8a:27:32:a5:1a:21:db:2c:77:f9:d3:d6:00:79:6f:69:2a:
46:d5:47:e4:e7:6a:5b:5d:9f:56:e7:30:37:02:7c:56:3e:b1:
9b:a7:16:7a:31:3c:82:c4:b4:60:1d:3f:7e:ee:c1:6f:fc:9e:
b0:37:5a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:00:41 2026 by rpki-client