Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2933589C373411F1857F5216CF1D38B0.roa
File: 2933589C373411F1857F5216CF1D38B0.roa (raw, json)
Hash identifier: LTcR5uvnrPvmDM2NAsMx0+DLJmS13FXbRhXuCncoJ+0=
Subject key identifier: 36:5D:D3:C5:BB:39:0D:84:47:4A:9E:79:C2:CD:A5:5E:70:91:77:0D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AC6C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2933589C373411F1857F5216CF1D38B0.roa
Signing time: Mon 13 Apr 2026 12:27:40 +0000
ROA not before: Mon 13 Apr 2026 12:27:34 +0000
ROA not after: Tue 19 May 2026 12:27:34 +0000
asID: 6079
IP address blocks: 45.192.64.0/19 maxlen: 24
45.202.32.0/21 maxlen: 24
45.202.40.0/23 maxlen: 24
45.202.42.0/23 maxlen: 24
45.202.44.0/23 maxlen: 24
45.202.124.0/24 maxlen: 24
45.204.78.0/24 maxlen: 24
45.205.80.0/23 maxlen: 24
45.205.86.0/23 maxlen: 24
45.205.96.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Apr 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109676 (0x1ac6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 13 12:27:34 2026 GMT
Not After : May 19 12:27:34 2026 GMT
Subject: CN=69dce13c-906d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a9:3b:9e:8f:7d:08:f5:56:90:af:e1:c7:aa:
4d:bb:dd:f6:a9:b1:2e:cc:36:08:52:db:eb:0f:70:
1e:43:73:00:23:c6:33:61:30:9d:f1:4e:3d:8d:14:
da:02:df:17:a1:45:a2:da:2e:8e:7f:f7:97:a8:13:
a7:72:b9:b8:10:87:e7:e3:b3:33:6c:6c:6d:07:ac:
55:24:f5:50:53:bd:95:5e:b4:56:ea:3a:05:5f:97:
6a:01:6e:ca:25:ec:4e:ff:b6:cc:c4:75:07:22:29:
21:a3:2d:c3:ec:6b:1c:b6:ac:2b:49:43:7e:d7:29:
73:23:3c:55:a6:1c:8d:db:ec:21:b6:13:02:c2:95:
35:e4:13:0d:99:42:31:30:db:84:3b:6f:b7:e9:0f:
70:b1:a3:c3:53:ca:57:5b:71:d1:2e:ab:14:6a:01:
10:49:77:2c:ce:78:71:13:13:f2:fd:78:51:86:9c:
b0:0e:e2:b5:8b:79:14:3b:88:57:f6:b7:c1:c2:21:
77:b8:c2:ea:84:ce:c5:68:38:7a:12:b1:f3:89:f3:
34:cf:45:9b:a7:51:0b:9d:ac:01:9f:6e:6b:5f:c5:
ea:70:cc:3f:74:52:3a:e8:59:64:09:b6:f7:08:58:
7c:54:e9:bd:f5:7f:7d:07:2c:b2:c0:e3:c0:32:98:
12:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:5D:D3:C5:BB:39:0D:84:47:4A:9E:79:C2:CD:A5:5E:70:91:77:0D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2933589C373411F1857F5216CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.64.0/19
45.202.32.0-45.202.45.255
45.202.124.0/24
45.204.78.0/24
45.205.80.0/23
45.205.86.0/23
45.205.96.0/23
Signature Algorithm: sha256WithRSAEncryption
29:77:b4:53:e6:70:21:67:22:19:cc:cc:21:5e:77:7e:20:62:
2f:d7:9c:4e:aa:1e:f5:a9:68:ef:b1:85:6c:d5:c7:66:7b:50:
9d:20:5b:b2:b6:22:9d:14:72:a0:b5:d0:de:49:74:9d:8a:9e:
bf:5e:6c:e2:45:64:bb:ae:4d:6d:68:93:ce:1f:81:7e:28:d2:
4b:47:8b:24:6c:53:b9:5d:28:40:21:91:5e:2b:49:35:5e:0b:
b9:cd:7a:25:6c:ae:93:4e:dd:ab:14:4e:1a:d9:be:85:b5:a6:
1d:eb:01:98:19:50:3f:57:d0:a5:ab:a5:39:c9:3e:04:c7:c6:
62:0b:4e:55:a1:38:af:79:02:b6:98:31:13:90:2f:2b:07:9c:
d8:7c:24:78:36:af:96:4e:f0:a4:70:72:3b:b0:bc:cb:a0:f8:
95:0b:28:ad:38:00:53:00:70:56:c9:31:17:6a:2d:03:a2:94:
12:4d:b5:e3:ef:0d:94:bb:ef:db:0a:2e:ee:42:de:77:10:ac:
4b:94:81:a6:78:05:ce:c3:26:21:f4:72:99:db:48:cb:92:d9:
0a:cb:2c:13:9b:88:89:36:c7:b9:30:c3:46:9f:55:05:bd:92:
fe:11:34:e8:5b:6d:f2:c4:b5:ca:fa:25:91:6e:1c:8a:f1:38:
d0:d5:ca:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 14:29:53 2026 by rpki-client