Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7BAA718616DD11F1BFBD3C94DAE4EC9C.roa
File: 7BAA718616DD11F1BFBD3C94DAE4EC9C.roa (raw, json)
Hash identifier: dfCeR72nAgnTXks1apreriJUg826lkOMRR1pIcjfNE0=
Subject key identifier: B4:60:28:C4:D0:2E:EA:A6:8B:CD:31:6E:D0:CE:90:17:AD:79:62:94
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A1EB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7BAA718616DD11F1BFBD3C94DAE4EC9C.roa
Signing time: Tue 03 Mar 2026 08:46:34 +0000
ROA not before: Tue 03 Mar 2026 08:46:29 +0000
ROA not after: Thu 12 Mar 2026 08:46:29 +0000
asID: 137443
IP address blocks: 45.192.160.0/22 maxlen: 24
45.192.172.0/22 maxlen: 24
45.192.178.0/23 maxlen: 24
45.192.180.0/22 maxlen: 24
45.192.184.0/22 maxlen: 24
45.192.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 06 Mar 2026 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106987 (0x1a1eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 3 08:46:29 2026 GMT
Not After : Mar 12 08:46:29 2026 GMT
Subject: CN=69a69fea-4310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f4:f1:18:d5:eb:61:f1:3a:59:88:89:2e:c9:
67:a4:c7:f7:90:89:9c:da:8a:42:40:13:32:0c:14:
e1:21:c0:5d:48:11:e4:53:a3:b4:01:5b:16:e3:f9:
16:d1:e0:a0:53:d9:0f:eb:43:4f:11:9d:ec:d2:fc:
eb:e7:03:b2:e5:5d:c1:88:4e:71:09:66:94:cf:48:
a2:f1:f4:3f:41:10:09:97:d0:07:30:c7:e6:45:9d:
f6:f1:44:41:01:e1:85:42:63:f6:66:8d:a3:05:2b:
8b:0b:95:c2:05:30:d5:61:01:96:0c:ef:66:5d:e2:
4f:f9:cf:a8:39:74:2d:d1:de:95:b4:8f:41:29:d5:
87:f0:e5:a2:7f:08:88:db:d7:f3:17:d1:62:61:22:
52:49:6d:9b:57:c7:47:3a:07:3c:22:e8:90:69:d1:
f7:97:bd:cc:6c:da:2b:41:d3:be:10:30:eb:c6:82:
3e:9f:9e:1f:90:76:e9:31:f8:13:36:6c:54:73:a1:
48:30:2a:ef:be:ff:6a:60:ba:99:22:c0:3d:ab:f8:
15:ff:9d:5c:48:96:0d:19:0f:26:1f:f3:e4:20:e6:
0f:62:19:1a:30:d3:eb:76:d6:ed:80:c0:7a:42:a6:
cb:a0:88:5d:97:0a:19:88:ad:98:04:e3:e3:f8:ad:
f0:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:60:28:C4:D0:2E:EA:A6:8B:CD:31:6E:D0:CE:90:17:AD:79:62:94
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7BAA718616DD11F1BFBD3C94DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.160.0/22
45.192.172.0/22
45.192.178.0-45.192.191.255
Signature Algorithm: sha256WithRSAEncryption
8e:f2:ba:e7:eb:45:80:b9:b1:86:11:9f:f2:b2:3b:92:b6:e9:
75:0c:a6:5e:34:3c:d5:1f:4d:de:ed:56:51:09:d1:5b:d6:1b:
dc:53:22:6f:71:49:ca:43:75:d3:3e:f8:87:5a:bb:4f:5e:f3:
56:b2:48:09:bf:35:c2:3c:30:6f:6d:8f:84:6d:fc:b6:d6:94:
e9:b4:ee:2b:29:a2:67:00:65:d6:a1:ef:b9:a4:c4:7f:27:61:
9b:6f:fe:75:2d:2c:dc:98:59:f6:cd:25:f0:8d:4b:e8:12:62:
a7:cd:dc:ba:c0:ec:8b:2c:2c:65:ba:34:47:86:9d:21:2f:5c:
bc:09:d1:fa:4d:a0:bf:8c:20:87:54:3c:c4:46:bf:ae:82:ff:
df:92:e8:68:70:84:3d:3e:55:a3:e6:59:81:07:78:40:57:1f:
e3:ca:ee:3e:3a:93:27:bb:5f:2b:8a:37:2c:23:01:5a:43:b0:
c4:71:2e:11:00:3a:14:aa:2f:cd:16:b6:c3:95:7d:10:81:74:
c5:fc:8d:e4:dd:eb:ee:db:c2:dd:6d:dd:ff:c6:13:df:60:39:
44:aa:8b:1d:d1:83:df:63:a3:37:e8:0a:a6:bf:04:39:25:0a:
e3:36:83:af:77:6a:67:89:fe:7a:dc:03:dc:46:71:78:63:4b:
e1:a9:77:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 11:16:30 2026 by rpki-client