Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/21DB15AA2E9011F1A6967988DAE4EC9C.roa
File: 21DB15AA2E9011F1A6967988DAE4EC9C.roa (raw, json)
Hash identifier: I1LkkqtET1zV9IY253cSI2DkLVbN9wgo/bEYGrBb2ts=
Subject key identifier: 5B:C0:00:06:33:1A:F0:F6:6A:FE:35:E5:4D:AD:35:50:12:6C:44:51
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A943
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/21DB15AA2E9011F1A6967988DAE4EC9C.roa
Signing time: Thu 02 Apr 2026 12:33:21 +0000
ROA not before: Thu 02 Apr 2026 12:33:16 +0000
ROA not after: Sat 09 May 2026 12:33:16 +0000
asID: 44559
IP address blocks: 45.196.106.0/24 maxlen: 24
45.196.107.0/24 maxlen: 24
45.202.192.0/24 maxlen: 24
45.202.193.0/24 maxlen: 24
45.207.6.0/24 maxlen: 24
45.207.148.0/24 maxlen: 24
45.207.149.0/24 maxlen: 24
45.207.150.0/24 maxlen: 24
45.207.151.0/24 maxlen: 24
45.207.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Apr 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108867 (0x1a943)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 2 12:33:16 2026 GMT
Not After : May 9 12:33:16 2026 GMT
Subject: CN=69ce6211-5df6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a7:97:70:83:d3:26:d7:30:b5:d8:54:29:07:
ca:2e:21:92:7f:75:44:43:22:f1:a0:e9:bf:1e:39:
ab:17:e7:77:a7:c1:e3:ca:27:a1:19:74:e6:0c:9d:
6b:db:0e:e0:24:df:f2:bf:06:f8:bd:bf:ac:0a:29:
19:2e:cd:4a:14:7c:e6:6c:bf:63:71:29:22:42:0f:
7d:b9:e4:ae:5a:79:63:e0:41:aa:0d:e0:75:a6:1a:
45:c4:e5:0c:13:bd:29:70:6e:88:f0:79:ff:71:cd:
04:9b:1a:79:b0:1e:6f:bc:82:e7:9a:30:88:de:9f:
b2:fd:76:f4:c1:76:2c:70:88:c9:36:c8:a9:26:12:
3f:6f:7e:2d:6b:24:d6:f1:5c:b6:aa:42:16:f3:f7:
c3:92:df:0f:4d:41:f5:87:ee:7d:ff:34:47:bf:e5:
6d:bf:e8:e4:a4:b2:90:09:bc:69:fd:fb:39:72:4b:
7d:da:70:8b:17:3f:31:cb:e5:aa:ae:0e:6c:2f:59:
d8:f6:9d:32:f1:b6:56:b0:f5:7a:69:63:1f:ce:89:
fd:39:2f:78:6b:ff:a4:45:fe:ac:07:35:3b:b5:e2:
e4:7b:96:0d:cf:51:8c:10:66:e2:da:8c:30:dc:ec:
bd:9b:81:ea:dc:69:8e:a6:6b:bb:19:81:c3:bd:c2:
dd:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:C0:00:06:33:1A:F0:F6:6A:FE:35:E5:4D:AD:35:50:12:6C:44:51
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/21DB15AA2E9011F1A6967988DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.106.0/23
45.202.192.0/23
45.207.6.0/24
45.207.148.0/22
45.207.160.0/24
Signature Algorithm: sha256WithRSAEncryption
50:5c:f5:31:ab:e1:e8:89:ae:69:54:c4:4f:a5:b1:01:a6:dc:
3d:39:42:6a:ad:30:0f:5e:dc:2c:07:4b:e2:b0:a8:9e:54:2f:
71:4f:ef:40:0d:69:0f:95:d1:9e:d7:52:08:81:a1:bd:8d:08:
72:a5:72:bb:00:74:dd:bf:27:e6:74:54:b5:fb:99:cb:37:ba:
c3:08:7a:98:ce:33:48:51:0d:16:aa:12:37:e9:4c:58:e1:b0:
c7:54:c1:40:c9:0a:75:76:3e:18:c2:3f:8b:bc:3b:7c:d5:dc:
39:7a:4f:d9:94:cb:4f:de:55:3f:a9:bc:55:26:92:8e:e7:d8:
a9:53:f9:25:8e:fa:55:97:84:21:8b:e6:a4:9d:2d:79:60:54:
68:cb:2d:8c:ec:9d:1c:ae:fe:a3:e9:ef:9d:ee:e3:c5:c6:a5:
e5:11:bd:2c:42:b6:f0:6d:a5:eb:67:a4:c4:0d:cb:b6:49:71:
b7:b8:f7:a8:92:c6:d7:7a:58:7a:44:38:86:0e:6a:40:76:f7:
84:72:c1:66:7f:f5:84:26:e9:8e:9c:a5:58:e1:ae:32:4c:bc:
6c:a6:36:aa:5d:8d:50:c0:0c:9a:93:54:26:80:a5:44:a0:7b:
ea:11:76:77:a6:b9:b5:23:01:41:14:9b:39:cc:e5:6a:d3:2a:
89:16:c8:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 14:30:02 2026 by rpki-client