Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1B21A320543B11F1BD0B980ECF1D38B0.roa
File: 1B21A320543B11F1BD0B980ECF1D38B0.roa (raw, json)
Hash identifier: 9IBcyFjCNqxcO0xpCbYGfjgodklJFrkRBA6WxiSlhJM=
Subject key identifier: DF:7C:50:BA:A1:5B:7E:72:92:A5:F7:2A:D8:58:BE:7D:17:2C:47:A8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B632
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1B21A320543B11F1BD0B980ECF1D38B0.roa
Signing time: Wed 20 May 2026 11:00:26 +0000
ROA not before: Wed 20 May 2026 11:00:21 +0000
ROA not after: Sat 08 Aug 2026 11:00:21 +0000
asID: 137443
IP address blocks: 45.192.160.0/22 maxlen: 24
45.192.172.0/22 maxlen: 24
45.192.176.0/24 maxlen: 24
45.192.177.0/24 maxlen: 24
45.192.178.0/23 maxlen: 24
45.192.180.0/22 maxlen: 24
45.192.184.0/22 maxlen: 24
45.192.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112178 (0x1b632)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 20 11:00:21 2026 GMT
Not After : Aug 8 11:00:21 2026 GMT
Subject: CN=6a0d944a-6264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:de:f1:cb:19:a2:bc:c8:de:4c:bc:39:be:c7:
a4:20:ff:d6:34:c6:86:31:ec:88:5f:96:42:c9:8b:
f1:d4:d9:90:64:37:48:55:e1:29:25:f3:90:37:8d:
d5:ab:68:2d:a3:ea:fa:a6:7f:b8:b1:ad:10:85:4a:
4a:8f:24:ea:85:1c:9f:6d:d4:f4:df:9b:22:5b:66:
bc:cd:50:7c:ed:f4:8a:f0:1b:88:65:7c:e6:ac:87:
08:a3:ff:26:4e:7e:5b:22:3f:dd:9d:ce:7c:31:5b:
5c:ec:b0:85:1f:cf:c4:d3:42:33:7f:d2:f5:5a:c4:
3a:b6:1a:bb:8b:c9:57:d1:ec:7a:cc:82:78:34:ef:
8f:ea:a5:41:97:88:c1:b3:7c:8e:de:96:14:00:bb:
3a:30:de:71:11:7c:75:e0:4c:ce:b6:a3:a4:8d:b6:
e5:f9:da:0c:fe:f3:30:67:e2:5a:26:d6:ad:94:e2:
bb:fc:ce:e1:f6:d7:15:c9:a2:62:dc:85:ba:98:c7:
97:bf:7a:a2:a6:02:34:35:bc:b3:73:0a:0c:0f:cd:
26:4d:88:d4:f9:7f:11:51:a2:5a:0e:76:a4:4c:92:
05:48:9a:69:44:42:62:ce:71:83:4b:63:01:a5:83:
da:c0:6b:1a:b0:3a:3a:e7:21:2a:7e:bb:53:c8:e3:
ba:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:7C:50:BA:A1:5B:7E:72:92:A5:F7:2A:D8:58:BE:7D:17:2C:47:A8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1B21A320543B11F1BD0B980ECF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.160.0/22
45.192.172.0-45.192.191.255
Signature Algorithm: sha256WithRSAEncryption
1e:8a:4b:fd:9a:c6:3e:23:6f:c5:94:7d:46:41:7f:cd:22:dc:
85:b9:54:b6:a4:08:49:45:8e:e1:ab:85:43:81:9c:07:8a:ca:
bd:1e:e1:a5:c4:51:19:45:e2:f9:f7:09:16:2f:f1:0a:43:56:
b1:1f:c6:3f:cc:b9:ce:d6:c4:56:b8:25:44:8a:50:66:99:d1:
85:4e:9d:65:de:70:2a:78:30:3d:a6:6d:ca:43:ba:42:d1:6d:
b6:6f:7d:5a:7a:f7:a0:dc:77:8e:d4:06:62:7a:6b:01:9b:71:
1f:f4:58:80:0d:e3:7b:fd:05:3f:8c:e1:f9:ad:df:92:73:79:
50:48:23:5e:8a:3c:8c:13:ff:c7:e5:90:cb:6d:b0:8c:f8:92:
6b:6f:64:38:78:ee:51:ac:ed:34:1f:54:4e:87:0e:b6:64:18:
7e:37:3b:b4:9f:ac:e1:cd:bc:96:85:75:21:7e:34:2f:54:4b:
b7:34:8d:eb:d3:b3:a8:45:42:bf:4a:55:96:86:ed:9d:4d:c3:
1f:0e:cb:79:83:9c:29:1a:d3:2e:de:8a:5f:1b:3e:52:91:5b:
18:3c:23:dd:f6:31:d0:10:91:55:85:31:6a:07:a5:44:1e:b5:
c3:79:90:d4:95:c0:74:45:62:bb:f2:ec:ec:9d:f8:c3:d1:f1:
75:cd:c7:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:07:24 2026 by rpki-client