Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E8A38E86397811F1A12E3AF5CE1D38B0.roa
File: E8A38E86397811F1A12E3AF5CE1D38B0.roa (raw, json)
Hash identifier: fh9Df1ycLDGpH/WPpsOLiwdkjpXnge6ECJ6PE+AsOxs=
Subject key identifier: 2F:E5:44:AF:F0:35:63:3E:CA:81:6B:15:15:7A:63:99:F1:8D:3D:9A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AD11
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E8A38E86397811F1A12E3AF5CE1D38B0.roa
Signing time: Thu 16 Apr 2026 09:44:49 +0000
ROA not before: Thu 16 Apr 2026 09:44:44 +0000
ROA not after: Thu 30 Apr 2026 09:44:44 +0000
asID: 9304
IP address blocks: 45.198.5.0/24 maxlen: 24
45.201.35.0/24 maxlen: 24
45.201.41.0/24 maxlen: 24
45.201.42.0/24 maxlen: 24
45.201.48.0/24 maxlen: 24
45.201.61.0/24 maxlen: 24
45.204.132.0/24 maxlen: 24
45.204.154.0/24 maxlen: 24
45.204.248.0/24 maxlen: 24
45.204.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109841 (0x1ad11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 16 09:44:44 2026 GMT
Not After : Apr 30 09:44:44 2026 GMT
Subject: CN=69e0af91-3275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:83:26:d8:07:38:d8:58:ad:fd:85:f2:21:b5:
09:d3:05:1b:70:9e:d3:fe:6a:b7:3c:fd:b2:bf:18:
38:4a:3f:c9:f7:e7:d8:f0:94:0e:09:26:45:6c:0c:
83:57:af:3b:bc:b6:15:4b:3d:e5:db:5b:fc:76:e1:
29:04:1d:e4:e6:b6:c5:97:91:3e:bc:74:81:f2:61:
92:c0:9f:30:98:ac:68:91:9c:71:e8:94:85:de:69:
11:fd:85:38:0e:04:c1:6e:02:8a:7e:c3:95:36:d7:
2c:ac:75:35:d3:ce:ac:5f:6a:67:40:dc:44:ee:6d:
13:7a:07:c0:69:0f:34:48:d0:2d:d4:8a:e9:a3:40:
a2:bf:30:d6:ac:07:6e:7e:7b:f3:2b:a8:1b:f9:60:
bd:3e:b1:13:0d:b0:53:c3:d4:79:45:b2:53:48:e8:
b2:e8:37:1c:4e:b6:4a:93:94:be:fc:7a:b5:49:7d:
ea:2a:72:cd:cf:03:39:e2:60:cd:14:3d:91:8a:58:
70:02:7d:86:37:36:6e:ba:35:ca:b0:96:99:dc:77:
df:a3:05:f0:7d:a0:42:88:34:d6:b0:35:71:a0:9e:
90:a9:da:a2:06:f0:86:d6:01:c1:5a:75:9a:4b:14:
da:ba:10:4e:d0:39:cb:f6:fc:4b:5f:c1:ee:35:01:
f5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E5:44:AF:F0:35:63:3E:CA:81:6B:15:15:7A:63:99:F1:8D:3D:9A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E8A38E86397811F1A12E3AF5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.5.0/24
45.201.35.0/24
45.201.41.0-45.201.42.255
45.201.48.0/24
45.201.61.0/24
45.204.132.0/24
45.204.154.0/24
45.204.248.0/24
45.204.255.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:3e:3c:5f:a8:df:5c:0d:a0:60:f2:1e:80:08:72:fe:36:f7:
cf:5e:2a:bd:eb:fd:63:ab:8c:48:b2:c1:d0:f1:bc:6f:8b:c0:
e6:9d:8b:dc:d5:93:43:51:e5:be:8a:a5:0a:de:eb:32:eb:4e:
30:8f:dd:d6:09:fc:b9:fd:12:0e:d7:94:4d:dc:c1:dc:6d:54:
4b:71:cf:5e:c7:4d:62:ba:c3:e6:12:07:1b:18:16:a3:3d:1f:
56:ff:80:e3:c2:66:b0:ab:7c:b1:2c:13:f7:8b:aa:b2:d8:2d:
6c:7d:94:16:fd:c2:0d:c5:d4:e8:2b:02:d3:fe:3c:92:2c:6d:
ca:08:fe:e7:00:6c:80:55:67:9c:90:1d:48:10:e4:78:50:e2:
02:18:23:1d:86:c4:5f:f3:09:aa:2f:db:ab:c0:8e:8e:e6:7e:
d8:6b:ec:2b:79:b0:57:3c:54:6e:82:f2:f9:be:b4:f9:94:d7:
6b:20:58:97:a0:1f:ac:8c:8e:40:0b:1c:4e:87:92:cd:73:55:
33:fc:fb:f9:df:ee:47:d7:f6:d0:02:df:82:5f:ce:67:b0:4a:
be:cd:ca:68:1b:ee:82:03:e5:65:1a:f5:28:db:12:04:a2:e6:
57:68:de:b9:28:ec:f3:45:b7:dc:7e:a4:04:5c:38:ad:df:9e:
ab:4a:e5:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:17:10 2026 by rpki-client