Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7D2CF0FC58E011F1BCD962E9CE1D38B0.roa
File: 7D2CF0FC58E011F1BCD962E9CE1D38B0.roa (raw, json)
Hash identifier: M/MGER3cMmazt7WxAKPJ4QGTWXiFNraVU3rPEbL78aA=
Subject key identifier: 77:C1:BE:D9:DD:C0:31:54:1C:52:3D:75:E2:52:C1:91:46:64:27:F4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B9C9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7D2CF0FC58E011F1BCD962E9CE1D38B0.roa
Signing time: Tue 26 May 2026 08:54:22 +0000
ROA not before: Tue 26 May 2026 08:54:17 +0000
ROA not after: Sun 28 Jun 2026 08:54:17 +0000
asID: 202656
IP address blocks: 45.192.49.0/24 maxlen: 24
45.192.50.0/24 maxlen: 24
45.192.51.0/24 maxlen: 24
45.192.54.0/24 maxlen: 24
45.192.55.0/24 maxlen: 24
45.192.56.0/24 maxlen: 24
45.192.57.0/24 maxlen: 24
45.192.58.0/24 maxlen: 24
45.192.60.0/24 maxlen: 24
45.192.61.0/24 maxlen: 24
45.199.192.0/24 maxlen: 24
45.199.193.0/24 maxlen: 24
45.199.194.0/24 maxlen: 24
45.199.195.0/24 maxlen: 24
45.199.196.0/24 maxlen: 24
45.199.197.0/24 maxlen: 24
45.199.198.0/24 maxlen: 24
45.199.199.0/24 maxlen: 24
45.199.200.0/24 maxlen: 24
45.199.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113097 (0x1b9c9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 26 08:54:17 2026 GMT
Not After : Jun 28 08:54:17 2026 GMT
Subject: CN=6a155fbe-0098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7e:f8:33:cf:79:98:92:eb:e7:3e:2d:d8:44:
9d:78:b1:f9:cd:bb:3d:06:18:ee:17:ab:f0:5c:55:
45:da:a4:24:35:19:35:9d:88:9f:32:63:d7:55:c7:
ad:98:b7:ff:52:39:d1:90:66:01:f8:a8:62:67:1b:
1e:a2:5f:67:a3:87:7a:d4:ff:39:4f:82:64:92:0c:
ee:c1:f1:79:3b:5a:10:ef:1e:05:fc:8c:96:ee:32:
89:85:79:5d:cf:c5:41:d6:99:2c:09:e8:4d:40:65:
68:82:14:32:d0:2a:b7:67:a4:88:db:b3:2e:48:ad:
cd:0c:1d:28:d1:9d:3b:89:e0:52:d3:44:5e:0b:e0:
fe:36:b9:c5:a7:f3:f9:14:d6:02:e7:17:6a:75:db:
25:70:35:b1:2e:c9:ba:d1:74:37:59:ab:20:96:80:
de:7d:cd:3d:37:b5:4f:c7:51:57:60:2b:61:65:f5:
ff:0c:6d:1e:f5:51:ca:a0:70:01:1a:3e:96:26:8b:
58:ad:e7:9f:81:3e:5e:83:60:42:41:8f:3e:99:38:
d5:3f:20:a6:58:db:f1:25:be:1d:f1:51:96:67:72:
5e:cb:15:73:59:38:1c:d8:c4:da:f7:2d:93:24:f0:
5b:91:ae:e3:fd:f5:7d:f9:43:61:c4:23:ad:35:b8:
b5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:C1:BE:D9:DD:C0:31:54:1C:52:3D:75:E2:52:C1:91:46:64:27:F4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7D2CF0FC58E011F1BCD962E9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.49.0-45.192.51.255
45.192.54.0-45.192.58.255
45.192.60.0/23
45.199.192.0-45.199.200.255
45.199.252.0/24
Signature Algorithm: sha256WithRSAEncryption
51:c2:b4:38:19:de:11:da:f3:87:47:d2:95:09:70:88:b8:54:
da:82:2e:f1:a3:b6:71:cf:e0:9e:84:d7:88:39:bd:12:1b:3e:
8f:19:24:db:b4:1d:b5:83:11:9a:f9:bd:74:b0:57:12:db:27:
1f:36:06:0f:48:f8:c4:97:92:42:6b:4b:44:53:79:8d:7c:d3:
2e:df:0d:00:88:35:c9:d1:a2:78:87:85:15:dd:c1:ea:29:5f:
82:c1:0a:99:3e:9f:94:2c:1f:50:62:c4:f6:14:5b:96:e2:70:
ae:52:89:87:61:09:bc:fc:25:19:91:d7:b2:1b:0d:62:e2:c3:
98:72:1e:e0:28:4b:e0:98:3f:d3:2b:bc:29:ef:ba:12:14:b3:
ff:c2:a5:4e:5f:82:27:d5:04:c4:92:53:80:7f:f6:84:5d:6b:
ce:f4:29:7f:ad:3e:31:2e:2e:80:96:d0:1c:07:76:2d:45:fb:
78:53:1f:5c:d8:9d:3c:c9:c3:79:0a:96:a6:60:e6:be:5e:4c:
c4:23:26:89:b5:84:bf:08:ab:76:43:df:7c:fa:95:0a:db:72:
09:52:30:52:ff:ce:45:c7:bc:39:4e:eb:70:04:da:bc:79:4d:
b8:b1:f7:24:ef:16:20:66:d6:c9:bb:84:5a:cf:22:3b:4a:9e:
08:91:5e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:06:51 2026 by rpki-client