Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7B2EAB8A3E5D11F185485EF3CE1D38B0.roa
File: 7B2EAB8A3E5D11F185485EF3CE1D38B0.roa (raw, json)
Hash identifier: 9m8m5PWi5bB5JCh20fVWnwXq9Z/a2IJnpUn5m4Q4YX4=
Subject key identifier: FB:25:76:6F:58:BB:BF:17:47:13:0D:0A:1F:FD:13:48:87:D7:91:F2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AE2D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7B2EAB8A3E5D11F185485EF3CE1D38B0.roa
Signing time: Wed 22 Apr 2026 15:11:05 +0000
ROA not before: Wed 22 Apr 2026 15:11:00 +0000
ROA not after: Tue 09 Jun 2026 15:11:00 +0000
asID: 32043
IP address blocks: 45.195.133.0/24 maxlen: 24
45.196.225.0/24 maxlen: 24
45.196.227.0/24 maxlen: 24
45.197.168.0/22 maxlen: 24
45.198.228.0/24 maxlen: 24
45.198.229.0/24 maxlen: 24
45.203.48.0/22 maxlen: 24
45.204.54.0/24 maxlen: 24
45.204.55.0/24 maxlen: 24
45.206.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Apr 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110125 (0x1ae2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 22 15:11:00 2026 GMT
Not After : Jun 9 15:11:00 2026 GMT
Subject: CN=69e8e509-da5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:91:3d:dd:a5:ce:a0:ed:06:8d:c5:88:06:50:
f7:30:e2:82:81:4d:37:9e:c7:60:40:ad:79:6a:23:
22:63:a7:8a:73:22:78:32:3a:97:5b:85:dc:77:ed:
a6:09:c3:49:28:93:03:11:21:80:5f:90:af:76:ee:
d1:f6:4a:61:d6:d7:12:30:b6:b0:b2:3f:3f:f8:5a:
33:27:47:15:42:19:d8:38:93:8f:43:cc:f0:f9:63:
04:93:67:05:b8:43:34:c1:6d:fb:14:44:15:44:45:
13:92:cf:b0:64:85:67:8d:45:a2:60:9c:04:c6:b4:
80:b0:eb:d6:5f:a9:c1:4f:6a:7f:33:df:80:75:9b:
e9:2b:7a:c2:72:03:e0:b7:d3:bb:7e:54:0f:83:c2:
5a:b1:81:4e:a6:ce:c0:0e:61:d3:f2:e5:ea:04:f1:
ba:7d:d1:ef:80:d5:df:e9:bd:fb:96:9c:15:9d:43:
81:87:53:33:da:46:79:5e:35:e6:8e:0c:24:8e:be:
94:43:62:f4:7c:6f:ce:eb:cc:9e:d8:9c:46:6e:08:
44:41:0a:ac:57:31:06:9a:ec:01:35:8b:ef:7f:25:
f8:1a:11:18:aa:48:3c:44:e7:92:81:19:11:f1:8b:
7a:5d:07:e4:02:3a:1e:f4:11:77:0b:95:51:ca:e6:
67:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:25:76:6F:58:BB:BF:17:47:13:0D:0A:1F:FD:13:48:87:D7:91:F2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7B2EAB8A3E5D11F185485EF3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.133.0/24
45.196.225.0/24
45.196.227.0/24
45.197.168.0/22
45.198.228.0/23
45.203.48.0/22
45.204.54.0/23
45.206.66.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:c4:27:31:d5:00:18:21:ab:35:c7:79:b5:83:e6:d0:37:42:
51:ef:48:75:89:68:67:8c:66:a6:13:62:d8:eb:be:61:80:71:
45:0c:91:cb:26:33:61:00:95:06:54:4a:09:77:fe:de:dd:fe:
96:9e:e6:93:89:d9:ba:1f:43:69:69:e4:66:7a:4a:3b:4f:56:
13:8a:0e:ab:d8:f7:df:eb:d9:7a:05:33:57:e9:30:d8:62:2c:
9b:7b:0c:69:d2:54:38:e1:a9:61:31:88:37:a1:d5:c0:31:5c:
af:58:07:f0:16:32:48:23:74:87:31:c3:cb:c5:2c:36:66:e0:
c4:bb:c9:e1:f9:3e:f7:18:08:b2:65:64:da:a1:fd:66:6e:e7:
d1:e9:f5:77:b0:ff:9d:84:d5:86:d0:ee:a9:80:57:ba:a3:0c:
31:e5:77:02:bb:e9:20:91:0e:67:10:b1:40:62:3c:c0:8e:17:
88:32:e7:4d:33:97:bb:aa:8f:bb:90:a5:7e:99:1b:3e:94:3d:
02:95:65:ca:28:50:86:ec:14:cb:12:d6:48:a6:f0:3d:5d:b7:
07:8d:33:a1:53:a9:c3:0e:50:af:2e:b9:98:60:24:28:fd:38:
1f:b6:20:79:be:85:2f:2d:f5:4c:40:2f:90:16:a7:b4:f3:75:
f2:e1:56:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 24 18:35:47 2026 by rpki-client