Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/38F740A0582611F1A96519F8CE1D38B0.roa
File: 38F740A0582611F1A96519F8CE1D38B0.roa (raw, json)
Hash identifier: Anmy8FrU6r64DMnACuI3dnvl6lcDjpzXX13Z1txZzYM=
Subject key identifier: EC:3C:C7:7B:60:6D:46:31:ED:D1:A4:A0:0F:D3:70:2D:B3:29:D5:E5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B982
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/38F740A0582611F1A96519F8CE1D38B0.roa
Signing time: Mon 25 May 2026 10:41:02 +0000
ROA not before: Mon 25 May 2026 10:40:57 +0000
ROA not after: Fri 25 May 2029 10:40:57 +0000
asID: 17561
IP address blocks: 45.192.2.0/24 maxlen: 24
45.196.80.0/24 maxlen: 24
45.196.81.0/24 maxlen: 24
45.196.82.0/24 maxlen: 24
45.196.83.0/24 maxlen: 24
45.196.84.0/24 maxlen: 24
45.196.85.0/24 maxlen: 24
45.196.86.0/24 maxlen: 24
45.196.87.0/24 maxlen: 24
45.198.74.0/24 maxlen: 24
45.198.85.0/24 maxlen: 24
45.198.96.0/24 maxlen: 24
45.200.127.0/24 maxlen: 24
45.202.108.0/24 maxlen: 24
45.207.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113026 (0x1b982)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 25 10:40:57 2026 GMT
Not After : May 25 10:40:57 2029 GMT
Subject: CN=6a14273d-756a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:59:d1:1b:09:12:e0:f6:b6:4d:26:d9:01:80:
fc:6e:cd:69:ee:3a:0e:00:e9:95:81:f4:f1:c5:77:
30:38:7e:da:8c:9e:5b:1f:1d:23:bc:41:77:de:c6:
93:ce:30:06:84:56:e8:a0:3b:28:69:c3:4c:37:64:
12:97:6c:40:c9:58:e3:08:dc:6c:3d:d2:d5:d8:7f:
ef:eb:a1:71:dc:37:f7:f8:69:c2:e9:19:a3:9c:06:
d9:68:6d:9a:20:e2:93:cf:50:b1:22:a8:02:fb:d2:
05:dd:f1:5e:c1:9f:5c:17:9b:52:2d:fa:d2:32:0b:
e2:97:c1:d2:1f:98:7e:19:de:27:7a:86:2a:a0:d0:
fc:23:f0:70:a1:85:d3:18:ec:6a:4e:11:34:e4:69:
a7:5d:7e:4f:8b:39:37:7a:5d:f1:a1:51:b9:1d:08:
04:aa:2e:ca:28:ee:7e:eb:bb:6d:d4:4d:86:0f:f6:
f9:ac:08:ad:fd:67:f9:d1:f0:76:12:4d:dc:df:a6:
5e:c4:da:de:59:3d:8b:1d:16:86:2e:f4:ed:07:f9:
9d:3e:a9:fa:c5:e4:1d:26:62:11:7d:fd:9f:90:e9:
6a:18:1a:39:94:b3:8b:5d:df:19:7c:ec:83:1b:df:
3b:63:a1:51:d0:00:25:5e:b3:37:2c:79:47:b7:a2:
d1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:3C:C7:7B:60:6D:46:31:ED:D1:A4:A0:0F:D3:70:2D:B3:29:D5:E5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/38F740A0582611F1A96519F8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.2.0/24
45.196.80.0/21
45.198.74.0/24
45.198.85.0/24
45.198.96.0/24
45.200.127.0/24
45.202.108.0/24
45.207.61.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:c0:96:28:57:f9:8b:a0:31:51:b4:fe:a7:e6:e0:bc:5c:2d:
80:c1:41:d2:2e:d5:4f:bb:17:13:34:c0:86:fa:99:b6:f3:3f:
86:8d:6e:f3:57:0c:2b:9c:4c:d6:15:45:99:4f:39:b8:04:d2:
84:11:54:25:e8:e3:a6:3e:d2:f4:23:24:b6:b9:74:ba:87:aa:
c5:c5:36:2a:a8:0a:b0:41:f6:e8:6b:3d:f9:77:c4:90:f1:36:
e1:a6:8b:56:99:46:44:42:db:c1:52:e2:65:49:be:66:b6:e5:
92:be:9e:4d:c2:d5:e7:64:b3:7b:b0:b8:06:4c:7e:64:3b:d1:
cd:7a:83:eb:ec:e9:72:b9:eb:f9:dd:d5:a6:ca:83:02:54:1f:
14:82:7d:e2:73:c4:a0:a6:ba:fb:82:83:2d:c9:e6:18:03:9e:
4a:e5:60:51:6c:ef:ae:4d:68:59:b3:c0:4e:e2:d2:27:cf:7a:
1a:99:b6:aa:7d:2c:de:02:f3:9c:0f:4d:32:c0:b9:dd:61:2c:
9d:77:20:0f:b9:10:0b:66:1e:93:05:5f:97:f5:9a:8d:8e:3a:
c5:1d:39:88:79:5b:1e:a7:cc:85:a8:6a:59:a2:8d:0f:5d:bd:
10:29:04:67:c9:78:8b:c9:ce:e0:e7:2f:a9:32:7a:0f:62:ef:
11:ae:d2:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:14:16 2026 by rpki-client