Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FA280BF0601511F18ABB91B1CE1D38B0.roa
File: FA280BF0601511F18ABB91B1CE1D38B0.roa (raw, json)
Hash identifier: vJgpSUdseRLYeS+C2utMM9XVp7yk30tMKVzbJaMfpy0=
Subject key identifier: 6B:AB:EC:4C:EB:7C:28:58:55:80:18:21:ED:50:80:E1:F9:32:0C:A5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BBD6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FA280BF0601511F18ABB91B1CE1D38B0.roa
Signing time: Thu 04 Jun 2026 13:04:53 +0000
ROA not before: Thu 04 Jun 2026 13:04:49 +0000
ROA not after: Fri 10 Jul 2026 13:04:49 +0000
asID: 138915
IP address blocks: 45.197.64.0/24 maxlen: 24
45.197.74.0/24 maxlen: 24
45.197.75.0/24 maxlen: 24
45.197.96.0/24 maxlen: 24
45.197.97.0/24 maxlen: 24
45.197.106.0/24 maxlen: 24
45.197.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 16 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113622 (0x1bbd6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 4 13:04:49 2026 GMT
Not After : Jul 10 13:04:49 2026 GMT
Subject: CN=6a2177f5-b4eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e2:61:62:e5:b8:b8:9f:6a:8f:22:69:32:f8:
6d:f4:64:f4:9c:29:2a:6f:b9:de:0b:17:52:47:e8:
92:70:ac:6d:1a:27:09:0d:f4:c6:68:94:d6:b9:7d:
4e:ce:8d:83:92:e8:13:3b:b1:f5:af:16:ec:2c:3e:
fc:89:9a:e3:d3:bc:a1:da:55:bd:a9:41:b5:e0:55:
52:af:13:a8:87:5d:08:97:60:a1:62:fd:ad:e9:6d:
e3:7c:ee:98:90:5d:b5:1d:19:00:61:c2:47:f8:bd:
68:36:9c:c9:af:49:14:dd:b0:08:51:17:a4:07:ab:
27:27:18:c7:38:9a:ce:9c:a2:7f:50:2b:48:06:18:
64:a3:c1:0b:c9:64:86:31:e7:47:31:5b:65:3d:a2:
64:99:8b:5f:75:46:0c:76:6b:c5:ff:f0:60:f4:09:
06:a9:5e:90:53:2f:78:6c:13:79:d0:50:b2:e3:c2:
fa:bd:be:7a:b3:45:63:30:f1:35:d3:ef:7a:a7:54:
4a:96:43:16:cf:cf:73:df:09:a8:7e:ec:58:fa:fe:
03:44:d9:0f:89:9c:bf:eb:67:15:24:e1:d6:d4:9e:
cd:10:fa:d3:0b:84:1c:14:69:f9:b7:0c:07:a3:e7:
9c:b3:9c:5d:c7:67:65:b0:da:90:11:ab:42:ce:1b:
88:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:AB:EC:4C:EB:7C:28:58:55:80:18:21:ED:50:80:E1:F9:32:0C:A5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FA280BF0601511F18ABB91B1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.64.0/24
45.197.74.0/23
45.197.96.0/23
45.197.106.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:ea:57:46:cb:3d:a9:45:15:52:e8:b4:de:13:ec:7c:c6:d6:
ae:bc:a5:c7:50:27:94:13:45:99:ba:c0:2a:f2:d0:50:24:46:
75:33:56:bb:81:79:92:bb:9b:14:6c:5e:f8:84:ce:b2:a0:04:
64:21:6c:2c:a7:2a:32:6c:3f:15:3f:a6:89:4a:32:a0:bc:95:
68:ad:5d:d8:08:cd:8e:12:14:96:7f:ff:70:00:eb:25:ce:02:
16:6b:47:88:1f:f3:e4:c4:45:5d:9f:d5:cc:c7:f6:c1:36:34:
8e:3d:27:7a:44:1d:ff:04:77:49:d0:85:2d:82:45:7a:11:d2:
b9:82:31:e4:98:d1:47:4e:a4:0f:fd:60:e6:0e:2a:42:cf:c2:
d4:48:ac:56:b5:1a:24:8d:59:6a:fe:f5:21:bb:26:65:e2:e1:
0b:6f:b3:0d:0e:57:96:00:8c:88:21:5b:0f:ea:d4:6b:d3:05:
a9:fc:a4:14:61:5f:76:dc:7e:db:e0:e6:70:24:a0:00:7c:78:
0a:a3:97:79:a9:93:c5:79:e7:eb:12:04:ca:cf:b1:39:57:1a:
0f:c6:9b:ab:5a:d3:48:4d:41:b0:4b:6e:00:39:ea:04:ce:25:
e7:c1:74:cf:85:a4:27:41:3e:67:98:2d:d1:4f:93:d8:00:38:
23:27:ea:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:47:22 2026 by rpki-client