Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/644A0C94552C11F1AE529ACECE1D38B0.roa
File: 644A0C94552C11F1AE529ACECE1D38B0.roa (raw, json)
Hash identifier: qTRjFivRdmjQv2VxtzcOjG2183eZN42DNrstXmSQCqo=
Subject key identifier: 12:0F:84:49:34:CD:D6:9D:37:A0:1E:CE:C8:45:71:E9:E9:30:CE:EB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B755
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/644A0C94552C11F1AE529ACECE1D38B0.roa
Signing time: Thu 21 May 2026 15:47:38 +0000
ROA not before: Thu 21 May 2026 15:47:33 +0000
ROA not after: Sat 08 Aug 2026 15:47:33 +0000
asID: 137443
IP address blocks: 45.192.160.0/22 maxlen: 24
45.192.172.0/22 maxlen: 24
45.192.176.0/24 maxlen: 24
45.192.177.0/24 maxlen: 24
45.192.178.0/23 maxlen: 24
45.192.180.0/22 maxlen: 24
45.192.184.0/22 maxlen: 24
45.192.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112469 (0x1b755)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 21 15:47:33 2026 GMT
Not After : Aug 8 15:47:33 2026 GMT
Subject: CN=6a0f291a-107f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:49:ce:38:9f:de:0b:75:b6:e6:be:b5:06:3f:
f4:26:63:38:1a:5e:1d:f4:e4:11:8f:01:44:75:73:
fa:02:ec:6f:61:c3:ef:77:d6:49:9d:85:db:d6:56:
9d:b0:75:5f:d8:e8:e8:5f:db:12:b5:9a:f7:65:2c:
ca:8e:5b:7b:05:41:fd:51:3a:67:09:df:fa:bd:b0:
b7:77:5c:7c:f8:d4:e6:1c:52:16:e9:ce:53:d6:05:
5d:48:a0:9e:33:3a:2d:5a:3f:f1:29:75:59:27:3c:
00:ba:b8:9c:00:6a:95:79:a4:bd:08:98:b1:dd:48:
39:4d:f4:81:a9:f3:ab:a8:0a:76:9f:5a:bd:50:17:
f9:1b:02:03:8f:72:01:42:09:5f:12:61:1a:8e:c9:
d9:a9:ec:b8:5a:42:fe:22:d7:bb:98:24:9b:4d:f6:
64:f2:e6:66:35:66:79:52:14:59:98:fd:96:4d:1f:
03:80:9a:13:00:64:e4:08:2d:e0:f4:75:ef:b3:86:
59:85:73:1a:4e:41:17:72:41:17:c8:51:87:5b:d4:
8f:72:cc:95:0e:36:a8:99:ed:c1:e2:2a:d3:97:e3:
f0:10:f5:cc:d1:7f:87:d3:88:b6:69:1e:48:35:50:
0c:66:64:2e:40:af:6f:84:5a:22:18:71:c0:44:16:
24:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:0F:84:49:34:CD:D6:9D:37:A0:1E:CE:C8:45:71:E9:E9:30:CE:EB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/644A0C94552C11F1AE529ACECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.160.0/22
45.192.172.0-45.192.191.255
Signature Algorithm: sha256WithRSAEncryption
64:4c:09:51:02:72:99:03:01:f5:90:a0:61:49:66:0c:4a:df:
f4:e6:ef:d5:41:6b:63:7f:4d:3f:1a:4f:20:8e:5f:d8:86:e9:
9a:f2:a9:d5:1e:81:b9:72:17:22:c5:6a:e0:31:00:ad:19:25:
55:c7:2b:dc:2e:8a:f3:ef:c4:7f:3d:3b:fd:cd:22:10:0e:90:
e4:74:ce:de:ad:21:5f:54:d5:8b:ee:aa:c1:66:1b:28:bb:6c:
e3:68:6f:57:a5:0b:dc:f1:87:f8:fa:5f:15:19:76:f7:78:0a:
0e:ae:08:e5:6f:32:ef:0f:e7:78:0a:4e:7b:b6:0b:79:6d:f1:
8a:7f:db:41:25:db:14:a6:d9:5d:4a:6e:e1:c5:87:6b:27:ea:
74:94:6a:67:16:f0:3f:2b:17:e7:2b:04:9a:f8:da:1f:cc:af:
6a:36:da:82:cf:28:c0:75:83:4f:85:fc:39:cd:63:2d:cc:7f:
ae:56:41:b8:8b:85:1a:c1:19:16:50:bf:3f:fc:e2:24:81:b6:
02:a0:20:c5:59:a8:57:26:49:0d:f8:8e:f6:a3:97:69:d5:ad:
c6:61:c7:9d:c5:4a:ca:1b:99:38:9e:97:4f:d2:39:cb:bb:0d:
e7:de:c4:33:b5:6c:33:f6:6d:59:cb:58:e6:84:ee:dd:30:de:
7b:ff:d6:9f
-----BEGIN CERTIFICATE-----
MIIFjzCCBHegAwIBAgIDAbdVMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNTIxMTU0NzMzWhcNMjYwODA4MTU0NzMzWjAYMRYw
FAYDVQQDEw02YTBmMjkxYS0xMDdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAyEnOOJ/eC3W25r61Bj/0JmM4Gl4d9OQRjwFEdXP6AuxvYcPvd9ZJnYXb
1ladsHVf2OjoX9sStZr3ZSzKjlt7BUH9UTpnCd/6vbC3d1x8+NTmHFIW6c5T1gVd
SKCeMzotWj/xKXVZJzwAuricAGqVeaS9CJix3Ug5TfSBqfOrqAp2n1q9UBf5GwID
j3IBQglfEmEajsnZqey4WkL+Ite7mCSbTfZk8uZmNWZ5UhRZmP2WTR8DgJoTAGTk
CC3g9HXvs4ZZhXMaTkEXckEXyFGHW9SPcsyVDjaome3B4irTl+PwEPXM0X+H04i2
aR5INVAMZmQuQK9vhFoiGHHARBYkBQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFBIP
hEk0zdadN6AezshFcenpMM7rMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82NDRBMEM5NDU1MkMxMUYxQUU1MjlBQ0VDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQCLcCgMAwDBAItwKwDBAYtwIAw
DQYJKoZIhvcNAQELBQADggEBAGRMCVECcpkDAfWQoGFJZgxK3/Tm79VBa2N/TT8a
TyCOX9iG6ZryqdUegblyFyLFauAxAK0ZJVXHK9wuivPvxH89O/3NIhAOkOR0zt6t
IV9U1YvuqsFmGyi7bONob1elC9zxh/j6XxUZdvd4Cg6uCOVvMu8P53gKTnu2C3lt
8Yp/20El2xSm2V1KbuHFh2sn6nSUamcW8D8rF+crBJr42h/Mr2o22oLPKMB1g0+F
/DnNYy3Mf65WQbiLhRrBGRZQvz/84iSBtgKgIMVZqFcmSQ34jvajl2nVrcZhx53F
SsobmTiel0/SOcu7DefexDO1bDP2bVnLWOaE7t0w3nv/1p8=
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:28:37 2026 by rpki-client