Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E1D6716E646F11F1A204A51CCF1D38B0.roa
File: E1D6716E646F11F1A204A51CCF1D38B0.roa (raw, json)
Hash identifier: kdZOhSyZvQCPtoM+bxIEXcERFoBrrFWODUzPjwDkakY=
Subject key identifier: 90:B9:30:4F:E0:BA:94:26:5D:96:15:4C:C3:84:17:3B:0E:B5:0A:DB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BC90
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E1D6716E646F11F1A204A51CCF1D38B0.roa
Signing time: Wed 10 Jun 2026 01:58:32 +0000
ROA not before: Wed 10 Jun 2026 01:58:27 +0000
ROA not after: Wed 17 Jun 2026 01:58:27 +0000
asID: 216211
IP address blocks: 45.192.241.0/24 maxlen: 24
45.192.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 14:03:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113808 (0x1bc90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 10 01:58:27 2026 GMT
Not After : Jun 17 01:58:27 2026 GMT
Subject: CN=6a28c4c8-f0ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:1f:5e:d4:c3:1c:c4:49:85:23:8f:ef:f7:97:
14:98:ab:7f:3b:98:cf:16:cd:b0:8b:c5:ee:04:fe:
29:9d:da:52:78:f4:f9:b8:7b:78:52:82:24:9b:10:
67:0d:5a:91:a1:10:a5:8b:0c:7c:ab:bc:2e:7e:2c:
05:56:40:95:2a:46:67:f7:04:00:e7:e6:76:fb:2c:
60:da:39:d3:7f:b6:6c:e1:c5:d6:2c:f0:8c:43:28:
f1:48:e7:84:38:e6:50:82:85:c3:83:b5:97:49:2a:
e8:e1:41:f3:bc:53:14:d1:b2:d2:34:89:99:d9:45:
a0:94:1c:87:9b:28:ef:09:20:e0:e8:0e:f8:4a:45:
7f:9f:cc:19:a2:61:4f:d8:aa:a6:af:66:30:de:58:
36:c2:f2:79:c1:e9:7f:61:51:41:8d:22:ae:10:a9:
07:fb:44:67:72:f4:f2:ec:7c:81:51:61:7b:87:07:
00:f3:d1:57:4d:74:3c:f8:29:0d:91:b2:36:86:b4:
ac:a2:e8:0a:f7:32:fe:1d:04:6d:5a:de:5a:da:a3:
3a:15:46:84:64:4c:8d:56:76:dc:ef:59:4d:3c:77:
e8:5b:78:31:b6:e5:24:38:21:3e:75:e6:d4:de:13:
f8:05:aa:9e:41:47:b6:49:82:0a:bd:db:7b:0f:07:
18:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:B9:30:4F:E0:BA:94:26:5D:96:15:4C:C3:84:17:3B:0E:B5:0A:DB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E1D6716E646F11F1A204A51CCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.241.0/24
45.192.243.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:6f:15:ef:83:36:15:22:5a:e3:d1:48:1f:74:bb:ce:f3:2d:
f6:97:a1:cf:9d:a7:7d:95:12:d5:66:b3:1a:b7:12:5a:b3:00:
bd:45:f4:57:8c:90:92:ca:d0:1d:57:2e:4a:98:b9:4b:66:53:
f8:29:b9:0c:9f:b5:ac:e4:56:dc:0a:27:41:c4:d2:6c:bb:12:
f6:56:32:fd:0e:64:4b:f2:24:57:0e:da:69:a1:76:f5:b9:b4:
94:cf:11:38:6d:06:49:74:7e:dc:67:26:bc:13:b2:c9:0e:16:
db:11:b8:d2:07:15:58:24:66:2c:f3:dd:0c:b5:df:fa:90:f9:
92:2d:69:f5:1f:01:76:29:7c:d5:aa:fa:9d:30:b5:4d:ed:43:
ff:00:91:c2:28:fb:f6:65:5b:f1:65:47:e7:ef:fe:4a:f6:65:
7c:96:4d:27:ae:1b:93:93:10:05:02:b9:1b:5c:52:88:1b:b7:
84:ed:41:e7:49:c4:88:13:14:6b:13:dc:fc:91:f0:fe:e1:d1:
fa:5d:90:82:69:bc:46:e0:ba:29:ad:61:9b:af:61:e6:d2:98:
ae:16:f0:f2:72:57:ba:1d:9b:1c:9d:e8:ef:7e:d6:2d:07:cc:
3d:56:c1:90:5e:bf:d9:b5:2f:0a:6b:85:28:c6:af:e0:c2:40:
5a:f8:c8:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:47:13 2026 by rpki-client