Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F677FE665FED11F199E8B6C3CE1D38B0.roa
File: F677FE665FED11F199E8B6C3CE1D38B0.roa (raw, json)
Hash identifier: FuEr8mx2U4svE7lkEzsksv+sKuE3aQ6TvJxQDLHOEGo=
Subject key identifier: AA:77:DC:27:C6:6F:A9:7A:92:1C:26:BF:8F:79:86:41:9C:D1:16:F8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BBB4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F677FE665FED11F199E8B6C3CE1D38B0.roa
Signing time: Thu 04 Jun 2026 08:18:27 +0000
ROA not before: Thu 04 Jun 2026 08:18:22 +0000
ROA not after: Fri 10 Jul 2026 08:18:22 +0000
asID: 63139
IP address blocks: 45.197.95.0/24 maxlen: 24
45.197.96.0/24 maxlen: 24
45.197.97.0/24 maxlen: 24
45.197.113.0/24 maxlen: 24
45.197.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113588 (0x1bbb4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 4 08:18:22 2026 GMT
Not After : Jul 10 08:18:22 2026 GMT
Subject: CN=6a2134d3-6d6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:16:3a:8b:00:7c:56:78:c7:1c:c6:7f:80:f1:
42:38:d1:34:c8:f1:26:0b:52:87:a3:ec:b3:2c:14:
df:61:3f:24:c8:a9:6c:15:23:a5:7a:cd:01:ef:c6:
24:b9:91:f0:5e:a5:65:d0:79:a5:28:3f:3c:4e:01:
b6:94:e2:92:fb:e8:bb:f0:ca:9d:e1:a4:5b:40:e6:
7c:9c:f9:cb:5e:00:42:bc:9f:5e:dd:d3:b7:12:5e:
e6:0a:91:97:01:14:c1:11:88:e5:f0:7e:21:03:b5:
27:30:bf:92:c9:53:66:ee:22:94:f8:f4:8e:14:99:
2f:f5:f1:27:7c:de:70:71:da:76:d1:4b:6b:c4:6e:
b5:f0:a1:61:a9:dd:61:b3:a7:09:47:46:c5:c8:84:
2e:98:41:d2:db:90:3a:a7:64:7a:bc:6d:e8:45:7f:
16:9a:3a:6b:2d:bb:b8:3f:2b:3d:6d:9f:1c:e5:4c:
17:d1:2a:ff:6e:a1:b3:7d:c5:49:67:14:49:a1:1b:
f7:a7:5c:62:cf:91:24:c9:77:2e:61:9f:f2:3c:8a:
05:e5:e9:1f:db:a5:71:c5:d3:9b:d7:15:48:17:4d:
e0:49:a6:4c:40:22:bf:20:46:5a:91:41:1c:06:b7:
53:68:65:7e:24:09:d0:32:53:1a:2d:dc:11:40:04:
d3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:77:DC:27:C6:6F:A9:7A:92:1C:26:BF:8F:79:86:41:9C:D1:16:F8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F677FE665FED11F199E8B6C3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.95.0-45.197.97.255
45.197.113.0-45.197.114.255
Signature Algorithm: sha256WithRSAEncryption
4d:33:1b:d2:70:a9:c0:90:f3:f6:12:87:d6:ba:5d:68:e7:63:
75:ad:47:b0:f9:1c:e5:ec:14:3e:ae:a6:7d:dd:d5:6a:b2:f6:
5f:6c:70:e7:50:69:12:3a:bf:34:98:7f:25:d4:2d:49:79:03:
2c:64:07:b3:68:e4:0c:06:8a:ca:0a:b7:c4:da:d0:26:a3:8d:
c1:26:08:fb:ce:71:28:26:93:d3:48:80:4f:15:6e:56:90:eb:
41:78:cc:c1:7e:81:c4:91:e0:a9:94:75:ae:37:f3:0f:ba:f1:
cb:6d:54:5a:47:5d:00:3a:47:89:4c:f8:2b:ec:09:ba:67:c8:
11:39:ef:1a:4d:3a:67:00:ef:5a:5f:6e:85:65:b8:58:1f:31:
a6:38:50:ed:95:0e:de:ff:d5:72:56:43:0b:20:fc:c9:ac:da:
9a:56:97:ef:86:5b:82:61:17:51:7f:08:db:ee:ba:73:de:b3:
21:3f:b7:ab:62:2f:b0:5d:f9:56:66:39:45:b4:0b:1a:50:36:
a8:c8:9d:77:4d:dd:60:e2:e0:73:d5:f0:8a:87:fc:7d:b0:5f:
f5:ba:1b:4a:e6:34:e8:90:f9:18:ec:22:b6:75:35:d7:b0:f2:
40:7a:ae:3a:3f:62:7c:1b:72:7e:11:36:2d:cc:0e:98:7e:fb:
84:58:52:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:34:52 2026 by rpki-client