Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/538E44EC16DE11F1B0867298DAE4EC9C.roa
File: 538E44EC16DE11F1B0867298DAE4EC9C.roa (raw, json)
Hash identifier: yNcwu9NCe7vVsmCAX8Mb2xnpxKTQcB8PY2YdVsZf+cY=
Subject key identifier: A2:FA:A1:8D:FD:22:2A:E4:45:DB:E8:26:1C:B7:29:91:4D:8A:9E:60
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A1ED
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/538E44EC16DE11F1B0867298DAE4EC9C.roa
Signing time: Tue 03 Mar 2026 08:52:37 +0000
ROA not before: Tue 03 Mar 2026 08:52:33 +0000
ROA not after: Thu 12 Mar 2026 08:52:33 +0000
asID: 149014
IP address blocks: 45.192.160.0/22 maxlen: 24
45.192.172.0/22 maxlen: 24
45.192.176.0/24 maxlen: 24
45.192.177.0/24 maxlen: 24
45.192.178.0/23 maxlen: 24
45.192.180.0/22 maxlen: 24
45.192.184.0/22 maxlen: 24
45.192.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 06 Mar 2026 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106989 (0x1a1ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 3 08:52:33 2026 GMT
Not After : Mar 12 08:52:33 2026 GMT
Subject: CN=69a6a154-8928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e2:32:1b:8e:4e:a1:40:9a:b7:f8:6d:9f:a8:
7e:90:1d:77:ee:7d:51:da:c7:30:4e:e2:35:6a:48:
39:98:4d:e5:a8:21:56:25:33:7f:2f:13:34:7c:f5:
72:a1:55:d1:5c:c2:64:30:a9:0a:da:37:69:d3:2c:
c0:50:0b:f6:35:41:0c:1e:e9:5d:63:f2:98:e9:42:
16:1b:c9:5c:6a:d0:45:46:45:d1:d4:e9:6f:db:e1:
f4:e0:a7:bc:b9:86:80:ac:6c:aa:b0:d6:24:7a:73:
06:6e:59:f8:e1:32:0f:4d:0c:1a:44:be:01:87:0f:
ba:33:cd:04:2a:4f:76:b0:d1:d8:bc:f2:cb:11:d2:
86:75:57:ff:69:d5:16:38:0d:58:16:1e:8c:3d:fc:
60:5f:14:e7:4c:ce:a5:b1:b8:8f:91:4e:da:e9:a5:
b4:d9:87:1f:3c:ec:e4:85:73:35:4d:8b:2f:24:be:
26:8a:ce:81:18:50:33:1a:13:45:bc:66:e6:14:42:
c8:74:9f:b9:7d:c7:3f:cb:2f:87:8c:16:39:1f:a2:
51:8e:8a:08:9a:4f:4b:88:45:94:62:a8:8d:ee:5e:
b9:8b:91:41:0c:e1:cb:9e:0d:e4:0e:da:e8:44:5b:
dc:45:cb:b7:1f:b7:e1:56:c0:93:8f:7c:fb:c5:25:
8e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:FA:A1:8D:FD:22:2A:E4:45:DB:E8:26:1C:B7:29:91:4D:8A:9E:60
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/538E44EC16DE11F1B0867298DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.160.0/22
45.192.172.0-45.192.191.255
Signature Algorithm: sha256WithRSAEncryption
4a:09:72:a3:ac:ce:e7:a5:f4:5b:b5:9a:f4:52:b1:42:98:10:
9a:1c:fd:4c:b7:d9:cd:13:a9:82:17:d9:33:05:9c:e2:6a:69:
79:9a:e6:c2:cb:27:00:70:e8:44:df:02:e9:a2:24:d0:84:8e:
a5:55:dc:f8:e6:c4:be:7d:22:48:ff:0e:3a:b9:b4:cc:57:81:
12:62:1c:16:50:2c:ff:e1:f8:7d:71:66:02:28:26:46:05:d9:
a2:40:84:20:b0:f8:66:46:70:e1:a1:be:1d:48:90:5a:cc:88:
19:0e:dd:00:30:1b:64:a1:49:88:09:ed:e5:22:e1:01:ec:16:
c5:db:90:18:b3:d5:0d:ec:65:3b:a4:74:9a:56:a7:f9:14:07:
3a:e8:84:a4:45:d3:69:cd:6f:34:b0:a9:4e:77:22:ed:57:a6:
0c:91:b9:95:36:59:df:29:ff:ae:64:29:6a:f4:00:1d:e1:b2:
01:1b:52:fc:66:70:54:21:77:20:43:23:6a:fe:9e:de:4a:c0:
4c:e7:2b:2d:3f:ac:69:3f:fd:69:b1:af:57:a1:3a:22:d4:a8:
ad:1a:9d:ad:51:fc:2d:d3:f7:86:71:a6:da:95:21:27:7c:e0:
29:79:f2:eb:33:d6:4e:ac:b9:b6:58:55:67:cc:15:1a:3c:a4:
7c:38:77:bf
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgIDAaHtMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMzAzMDg1MjMzWhcNMjYwMzEyMDg1MjMzWjAYMRYw
FAYDVQQDEw02OWE2YTE1NC04OTI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAteIyG45OoUCat/htn6h+kB137n1R2scwTuI1akg5mE3lqCFWJTN/LxM0
fPVyoVXRXMJkMKkK2jdp0yzAUAv2NUEMHuldY/KY6UIWG8lcatBFRkXR1Olv2+H0
4Ke8uYaArGyqsNYkenMGbln44TIPTQwaRL4Bhw+6M80EKk92sNHYvPLLEdKGdVf/
adUWOA1YFh6MPfxgXxTnTM6lsbiPkU7a6aW02YcfPOzkhXM1TYsvJL4mis6BGFAz
GhNFvGbmFELIdJ+5fcc/yy+HjBY5H6JRjooImk9LiEWUYqiN7l65i5FBDOHLng3k
DtroRFvcRcu3H7fhVsCTj3z7xSWOVwIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFKL6
oY39IirkRdvoJhy3KZFNip5gMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC81MzhFNDRFQzE2REUxMUYxQjA4NjcyOThEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQCLcCgMAwDBAItwKwDBAYtwIAw
DQYJKoZIhvcNAQELBQADggEBAEoJcqOszuel9Fu1mvRSsUKYEJoc/Uy32c0TqYIX
2TMFnOJqaXma5sLLJwBw6ETfAumiJNCEjqVV3PjmxL59Ikj/Djq5tMxXgRJiHBZQ
LP/h+H1xZgIoJkYF2aJAhCCw+GZGcOGhvh1IkFrMiBkO3QAwG2ShSYgJ7eUi4QHs
FsXbkBiz1Q3sZTukdJpWp/kUBzrohKRF02nNbzSwqU53Iu1XpgyRuZU2Wd8p/65k
KWr0AB3hsgEbUvxmcFQhdyBDI2r+nt5KwEznKy0/rGk//Wmxr1ehOiLUqK0ana1R
/C3T94ZxptqVISd84Cl58usz1k6subZYVWfMFRo8pHw4d78=
-----END CERTIFICATE-----
Generated at Wed Mar 4 11:16:24 2026 by rpki-client