Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2B094D02534F11F19FAF84F4CE1D38B0.roa
File: 2B094D02534F11F19FAF84F4CE1D38B0.roa (raw, json)
Hash identifier: 9uCHPv6BD4Yd6zWTyKbEPbMs7TXox/YqDOSQ+f+11Y0=
Subject key identifier: 77:DF:9E:13:D3:AE:0D:E6:A4:41:B5:97:B5:0A:A2:10:0F:30:4A:15
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B596
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2B094D02534F11F19FAF84F4CE1D38B0.roa
Signing time: Tue 19 May 2026 06:51:32 +0000
ROA not before: Tue 19 May 2026 06:51:26 +0000
ROA not after: Sat 08 Aug 2026 06:51:26 +0000
asID: 150706
IP address blocks: 45.192.160.0/22 maxlen: 24
45.192.172.0/22 maxlen: 24
45.192.176.0/24 maxlen: 24
45.192.177.0/24 maxlen: 24
45.192.178.0/23 maxlen: 24
45.192.180.0/22 maxlen: 24
45.192.184.0/22 maxlen: 24
45.192.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112022 (0x1b596)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 19 06:51:26 2026 GMT
Not After : Aug 8 06:51:26 2026 GMT
Subject: CN=6a0c0874-7db3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:86:8c:65:36:5e:39:d5:ec:4c:64:3f:7b:ee:
37:18:0a:b0:7b:41:30:33:9f:e9:c2:57:36:c4:91:
82:9f:8c:37:92:4f:43:41:f3:dd:bb:89:f3:a5:ae:
50:e7:75:66:6b:ca:a2:b5:51:cb:fb:52:19:29:51:
8b:98:41:91:9e:18:0d:71:6e:69:08:6c:ed:06:f0:
58:1e:f3:26:e8:c5:3b:c4:fb:06:ad:cd:29:61:47:
78:fe:d6:60:7e:1c:23:97:9f:bc:ff:3c:86:3a:4b:
9b:36:9c:79:38:e6:10:1e:0c:06:c3:77:ca:15:25:
09:d2:12:73:0a:05:f6:91:90:93:bb:a1:fa:24:59:
88:a7:ac:79:6b:b0:2b:9e:8c:c0:03:6a:22:36:d4:
ec:d4:15:b9:2d:1e:07:8b:b9:f3:d8:6b:1f:d6:3d:
81:49:2b:d3:8f:e5:48:64:62:9d:d9:74:b6:26:d1:
da:70:a1:c9:da:98:8a:23:17:0b:9e:43:b4:40:31:
0f:d8:43:66:a5:b7:46:49:62:2f:a3:67:c3:02:94:
51:34:4c:70:87:7f:30:84:66:5c:44:48:e8:52:e2:
b9:94:1c:6a:f2:a6:44:9d:43:2a:1f:e0:7e:6f:0e:
94:8b:69:dc:13:f9:34:5e:44:b8:52:dc:28:bc:2d:
3c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:DF:9E:13:D3:AE:0D:E6:A4:41:B5:97:B5:0A:A2:10:0F:30:4A:15
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2B094D02534F11F19FAF84F4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.160.0/22
45.192.172.0-45.192.191.255
Signature Algorithm: sha256WithRSAEncryption
a1:9d:2b:ae:01:4b:d5:e5:f6:95:f4:a1:03:6a:16:fe:ec:45:
21:fe:2d:8a:98:a2:78:eb:7e:b5:d0:74:b3:78:5f:30:d0:e1:
2d:9c:c5:92:5b:67:62:87:f4:9c:6b:dd:68:64:2e:51:ab:0a:
e1:01:bf:da:f0:9b:e9:fe:d6:dc:10:f3:16:b3:63:e2:85:ef:
5f:e1:0b:3e:e5:59:09:21:2e:d0:b5:89:b9:49:54:70:83:65:
7e:4f:d7:60:5b:9f:95:7d:47:b6:1b:57:59:73:9f:d4:56:55:
30:4c:61:5e:7c:3c:61:7e:7a:f6:65:70:33:e0:3f:63:4e:54:
86:58:3c:95:9c:14:71:75:69:f0:67:47:c3:72:54:2d:ea:d2:
c8:54:d8:0a:d3:76:16:69:7c:fa:e9:b2:24:fe:92:f1:46:b3:
b1:ac:5e:bb:17:b1:5f:51:03:44:a6:6e:5d:38:2c:76:be:69:
54:66:a4:7b:80:61:a6:d8:a1:ac:33:69:26:08:5c:2b:a1:b0:
0b:eb:32:64:9c:b5:1a:3a:6b:a6:9b:a2:b4:f2:d9:f2:95:37:
64:83:0f:0c:11:8d:5b:8d:02:12:a5:5f:15:93:b4:43:00:1c:
e7:64:68:43:4a:1d:0b:6b:05:99:2e:a6:fc:57:7c:ce:18:2b:
c6:f3:78:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:06:53 2026 by rpki-client