Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/69575E1680F211F19D952CC3CE1D38B0.roa
File: 69575E1680F211F19D952CC3CE1D38B0.roa (raw, json)
Hash identifier: vWkdqgq0p5wjUe9PhJwkBwK9ACNdCeWYtkUWxJMhsMs=
Subject key identifier: 96:42:BA:FA:D3:D9:CE:89:2F:A2:87:3A:BD:FF:44:A7:87:99:56:5B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C54F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/69575E1680F211F19D952CC3CE1D38B0.roa
Signing time: Thu 16 Jul 2026 08:43:27 +0000
ROA not before: Thu 16 Jul 2026 08:43:22 +0000
ROA not after: Sun 26 Jul 2026 08:43:22 +0000
asID: 134365
IP address blocks: 45.197.144.0/21 maxlen: 24
45.197.144.0/24 maxlen: 24
45.197.145.0/24 maxlen: 24
45.197.146.0/24 maxlen: 24
45.197.147.0/24 maxlen: 24
45.197.148.0/24 maxlen: 24
45.197.149.0/24 maxlen: 24
45.197.150.0/24 maxlen: 24
45.197.151.0/24 maxlen: 24
156.226.176.0/21 maxlen: 24
156.226.176.0/24 maxlen: 24
156.226.177.0/24 maxlen: 24
156.226.178.0/24 maxlen: 24
156.226.179.0/24 maxlen: 24
156.226.180.0/22 maxlen: 24
156.226.180.0/24 maxlen: 24
156.226.181.0/24 maxlen: 24
156.226.182.0/24 maxlen: 24
156.226.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116047 (0x1c54f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 16 08:43:22 2026 GMT
Not After : Jul 26 08:43:22 2026 GMT
Subject: CN=6a5899ae-e130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:dd:60:4e:43:8f:c9:28:11:2b:1d:30:82:e5:
be:3e:80:19:f0:16:04:eb:f4:dc:63:19:8f:0e:0c:
88:51:bf:03:be:89:20:ef:52:41:30:11:27:a2:ce:
31:f7:72:52:8e:88:20:16:b7:77:e6:80:b2:96:f3:
b0:57:6f:d2:9b:d3:e3:58:cb:f0:ed:b8:4c:77:17:
29:2a:41:9a:2b:53:d6:07:88:2f:3d:24:38:c9:ec:
e2:53:b7:21:7e:02:0f:80:32:8d:19:c6:57:7c:f0:
52:c9:a7:ea:b1:fa:7d:7c:ca:ec:82:95:37:ed:67:
d1:bd:e6:79:8e:ce:8b:ea:0c:37:ef:18:80:90:e5:
21:41:fa:a2:5f:d1:a3:54:61:9e:4e:4c:d5:28:84:
56:d3:1d:63:67:49:ef:0b:e6:9e:e8:3c:b4:d3:6f:
7e:0d:78:01:4d:1f:10:0f:8e:53:19:99:2a:68:3f:
97:aa:00:05:2c:00:d3:49:4d:18:d7:f8:70:c0:ef:
57:05:06:99:8a:a1:a6:59:36:8d:d7:21:6c:39:e7:
5c:50:63:8c:9f:ba:fd:19:65:37:27:71:b9:1e:bc:
0f:6a:5f:cc:5f:81:0e:b9:a2:67:ce:25:33:c6:fc:
cc:cf:56:bf:0c:9b:5c:49:b6:68:05:a8:28:2a:30:
3c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:42:BA:FA:D3:D9:CE:89:2F:A2:87:3A:BD:FF:44:A7:87:99:56:5B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/69575E1680F211F19D952CC3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.144.0/21
156.226.176.0/21
Signature Algorithm: sha256WithRSAEncryption
37:83:cf:cb:5b:d7:84:fb:fd:c6:06:a5:8c:35:1c:1b:6c:43:
01:28:3f:82:af:8b:59:73:86:1c:fd:31:2b:7f:ed:36:72:23:
e0:bb:60:df:fa:23:82:69:fc:8e:af:1e:e6:f6:37:41:9c:da:
26:af:04:20:dd:19:c7:25:a2:3b:c0:52:4e:15:67:ff:4c:f9:
e7:46:9c:66:e6:b7:03:5c:7f:07:83:04:83:36:1f:be:d5:7c:
a0:03:fb:5b:4a:fa:58:43:c1:d9:c6:9f:87:d2:11:1b:4b:c2:
e1:24:ad:8d:aa:8a:66:27:cb:53:58:71:23:9c:16:2a:dc:ad:
7d:ec:83:c9:87:0d:a8:3c:cf:d0:19:64:a5:4d:05:0b:f8:b7:
67:1b:d2:36:d3:ad:8a:58:dd:7c:fe:7e:de:2a:5f:57:31:92:
a9:3e:82:c6:f9:33:2e:6d:1a:34:f7:10:47:9d:bb:9c:50:cc:
fd:e6:fe:ad:9f:74:88:86:6a:c7:06:6a:d8:ce:82:6a:75:52:
8b:20:32:d8:6e:39:e2:8c:9c:34:ec:08:f9:f1:79:ec:44:0d:
db:29:5f:21:45:d3:ce:9d:a9:89:e3:02:4f:81:ab:d1:f8:00:
24:42:3c:72:41:c9:e2:58:0c:bb:5a:b1:92:a0:aa:04:4d:73:
4c:98:fa:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:13 2026 by rpki-client