Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D75C7FD6552811F18B5C3BB8CE1D38B0.roa
File: D75C7FD6552811F18B5C3BB8CE1D38B0.roa (raw, json)
Hash identifier: p4sD/D32Enqivq7nfBhSWFiaOF5OaIuTUqExFBcCkLE=
Subject key identifier: 10:5E:0B:69:1B:35:FF:8D:7E:D6:CB:10:5E:13:93:8F:29:C9:1D:EA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B746
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D75C7FD6552811F18B5C3BB8CE1D38B0.roa
Signing time: Thu 21 May 2026 15:22:13 +0000
ROA not before: Thu 21 May 2026 15:22:08 +0000
ROA not after: Fri 10 Jul 2026 15:22:08 +0000
asID: 395793
IP address blocks: 45.192.13.0/24 maxlen: 24
45.192.14.0/24 maxlen: 24
45.192.15.0/24 maxlen: 24
45.192.16.0/24 maxlen: 24
45.192.227.0/24 maxlen: 24
45.192.228.0/22 maxlen: 24
45.192.228.0/24 maxlen: 24
45.192.229.0/24 maxlen: 24
45.192.230.0/24 maxlen: 24
45.192.231.0/24 maxlen: 24
45.192.232.0/22 maxlen: 24
45.192.236.0/22 maxlen: 24
45.192.239.0/24 maxlen: 24
45.192.244.0/24 maxlen: 24
45.198.226.0/24 maxlen: 24
45.201.30.0/24 maxlen: 24
45.207.138.0/23 maxlen: 24
45.207.140.0/23 maxlen: 24
45.207.142.0/23 maxlen: 24
45.207.144.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112454 (0x1b746)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 21 15:22:08 2026 GMT
Not After : Jul 10 15:22:08 2026 GMT
Subject: CN=6a0f2325-8350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:97:c2:32:65:8c:e6:00:98:d9:42:6c:77:81:
5e:6f:1c:c7:4e:95:c2:0f:21:20:27:ed:60:c5:cf:
77:53:b6:f4:c6:53:22:93:32:e5:66:ac:bf:7c:c0:
c2:8c:76:fc:26:e3:5b:6f:42:5e:39:ce:2e:cd:dd:
9e:19:9d:ce:8b:e8:e6:c1:d3:52:1d:b0:c8:29:af:
61:7e:9a:1d:74:84:76:12:c5:66:e7:8f:20:88:bc:
82:3c:c3:10:da:61:e7:30:88:ac:58:b7:46:32:ea:
33:43:a6:fc:d9:00:32:01:47:e0:52:61:9f:fd:23:
ea:eb:2e:93:9d:11:ef:62:00:fc:7f:5e:4f:ca:45:
d1:2f:ab:91:9e:f3:6b:bc:81:48:dc:23:f2:fe:b6:
88:25:e1:9b:29:7a:9d:a0:dd:a1:bb:b9:95:1e:f2:
97:aa:d8:57:f4:c7:88:4f:bf:61:83:10:46:40:df:
30:54:8c:05:50:90:a2:1e:a1:dd:15:a7:77:e1:74:
cc:25:46:6c:3d:36:ff:4b:a9:d0:ca:b6:90:f3:7b:
ac:34:aa:0b:52:be:0e:de:45:88:e5:c0:b9:9b:2f:
fa:e7:91:da:d6:a8:5f:fc:1c:49:3f:c1:ca:24:91:
ce:e2:63:2e:75:38:30:72:24:dd:64:dd:3a:c9:61:
d6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:5E:0B:69:1B:35:FF:8D:7E:D6:CB:10:5E:13:93:8F:29:C9:1D:EA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D75C7FD6552811F18B5C3BB8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.13.0-45.192.16.255
45.192.227.0-45.192.239.255
45.192.244.0/24
45.198.226.0/24
45.201.30.0/24
45.207.138.0-45.207.147.255
Signature Algorithm: sha256WithRSAEncryption
68:7b:1a:b9:d0:d7:5f:e7:63:2e:f3:e4:21:26:dd:dd:19:22:
e4:5b:63:b8:7b:67:70:27:01:75:35:64:f8:0d:b6:a1:e8:35:
62:a9:34:35:2f:d4:bc:9f:2e:49:1a:71:92:14:40:20:2c:5f:
17:09:1f:18:22:08:9f:82:db:8f:e9:d9:83:27:1d:49:c8:ed:
64:0c:81:6b:5b:0a:96:b1:3b:9f:a6:12:a0:e2:48:92:f2:dd:
e7:cb:f1:76:7f:83:ce:d6:85:67:4a:0c:7d:59:5d:95:93:ae:
9a:dd:d4:0c:6c:ab:48:9c:c4:9a:59:f7:18:b2:e6:98:ad:ab:
8f:77:27:ca:3d:b5:8d:c0:b3:e9:57:58:f0:0b:39:ac:00:f0:
90:60:f1:2b:93:bc:ef:b8:0f:c5:03:58:e2:ff:7d:6d:f1:79:
cb:60:fe:87:b4:14:32:79:1a:50:77:ee:6a:e6:79:66:be:82:
50:7b:ee:34:fc:84:e5:25:3f:92:7a:84:08:cc:be:6a:a2:d7:
e3:d5:39:44:60:2c:8d:99:18:e5:bf:b6:d7:ad:99:36:74:c8:
70:3b:41:e0:bc:17:d6:a8:ea:5a:5f:0e:dc:6d:01:f1:e8:ec:
49:82:68:df:8b:13:39:6a:e7:1b:12:58:95:a0:79:7b:46:02:
1e:d3:95:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:14:09 2026 by rpki-client