Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/94949146313011F188AA03C2DAE4EC9C.roa
File: 94949146313011F188AA03C2DAE4EC9C.roa (raw, json)
Hash identifier: ZkoqS6zKwSIPuwTkFChS6UXrCh8aNKU3JlpLJDBaocU=
Subject key identifier: F9:E3:C3:0C:36:9F:E0:A7:55:FD:31:0C:CC:A5:7A:FB:29:BA:D3:56
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AA6C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/94949146313011F188AA03C2DAE4EC9C.roa
Signing time: Sun 05 Apr 2026 20:46:55 +0000
ROA not before: Sun 05 Apr 2026 20:46:50 +0000
ROA not after: Sun 10 May 2026 20:46:50 +0000
asID: 61112
IP address blocks: 45.192.240.0/22 maxlen: 24
45.192.240.0/24 maxlen: 24
45.192.241.0/24 maxlen: 24
45.196.96.0/24 maxlen: 24
45.196.97.0/24 maxlen: 24
45.202.244.0/24 maxlen: 24
45.202.246.0/23 maxlen: 24
45.202.246.0/24 maxlen: 24
45.202.247.0/24 maxlen: 24
45.202.248.0/22 maxlen: 24
45.202.248.0/23 maxlen: 24
45.202.248.0/24 maxlen: 24
45.202.249.0/24 maxlen: 24
45.207.40.0/24 maxlen: 24
45.207.58.0/24 maxlen: 24
45.207.59.0/24 maxlen: 24
45.207.156.0/23 maxlen: 24
45.207.158.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Apr 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109164 (0x1aa6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 5 20:46:50 2026 GMT
Not After : May 10 20:46:50 2026 GMT
Subject: CN=69d2ca3f-b85d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9b:81:7e:73:49:da:ee:95:ee:04:48:dc:bc:
a7:52:1d:a4:de:3c:e3:c3:03:11:f3:ab:4f:32:26:
a9:96:58:d9:6e:fd:85:43:e5:2b:9a:8d:c1:f9:7d:
27:3d:40:24:31:cf:42:f9:b5:7b:1c:f1:34:c4:df:
7d:05:bb:5a:0e:d5:2e:62:6a:b8:cb:ec:d3:c4:d6:
ac:9e:bf:5f:b5:f1:cb:6e:86:22:7b:cb:6f:5f:d5:
7f:55:0d:b1:39:ab:e0:05:47:7c:e3:5c:32:d6:aa:
47:33:86:04:f7:d9:0c:52:46:f2:73:6a:70:94:00:
5d:34:e7:21:09:ee:f0:3a:5f:4c:e3:14:8d:0b:72:
49:37:04:97:8d:79:fc:94:1b:6c:f8:dc:5d:a3:7d:
55:fc:1a:75:d9:72:e7:da:97:7a:3a:73:e9:93:66:
14:fe:4f:a8:52:84:25:bc:eb:d8:65:db:ac:c6:f2:
72:b8:b5:27:96:34:8f:21:3b:99:02:cb:58:bd:08:
cb:8c:90:b4:49:82:c1:ec:6a:ec:0e:05:c3:ff:6b:
f3:df:32:d6:bf:42:3c:51:96:5d:68:aa:ca:d1:38:
59:90:1d:70:bb:06:dd:8f:82:e3:31:13:2f:e7:8f:
bb:8f:e6:48:b8:e7:0b:88:60:e0:c3:12:a6:2b:94:
b1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:E3:C3:0C:36:9F:E0:A7:55:FD:31:0C:CC:A5:7A:FB:29:BA:D3:56
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/94949146313011F188AA03C2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.240.0/22
45.196.96.0/23
45.202.244.0/24
45.202.246.0-45.202.251.255
45.207.40.0/24
45.207.58.0/23
45.207.156.0/22
Signature Algorithm: sha256WithRSAEncryption
01:a4:6e:bc:75:82:22:c0:b7:85:0e:f7:64:7f:b4:91:2e:14:
e0:35:2c:ca:51:5f:8a:3a:87:3f:55:2d:95:5a:b2:a2:db:ac:
92:8b:73:58:04:e3:af:0b:26:b4:ba:8d:9c:d5:35:36:2e:a8:
bc:6a:29:8a:2a:99:16:cb:c9:0e:27:8f:9e:45:67:ad:a8:8b:
e9:df:f5:62:7f:09:5d:77:64:50:8b:90:3e:82:16:07:55:68:
42:d3:18:ac:4b:fa:0c:de:0e:97:f4:ca:e6:8a:55:2e:8d:0d:
a1:ff:04:6b:19:52:ba:48:3c:2f:91:01:2f:53:d3:83:a0:f8:
68:a8:36:0c:58:9f:ab:1e:28:11:95:0d:70:c3:84:e4:95:76:
5e:8a:59:f0:b2:5d:94:7d:f1:c0:6a:d1:b6:b1:cc:0e:96:13:
64:d7:b3:00:47:60:79:4f:b2:d8:41:c0:7d:90:3e:6e:7e:da:
90:20:4f:76:21:4a:91:9c:61:34:54:7a:a3:be:6d:3e:e4:5d:
3f:d3:74:c7:98:dd:41:2f:b8:4d:99:ea:b9:08:1c:ce:b5:c0:
9f:08:9e:fa:17:7a:37:69:3c:04:6f:b8:cf:57:a3:88:11:e4:
40:4b:7f:5d:f8:35:e6:5a:b7:a3:fc:09:4f:bd:7c:44:21:31:
2e:b5:5a:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 14:30:36 2026 by rpki-client