Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/183B9406252C11F1B914B282DAE4EC9C.roa
File: 183B9406252C11F1B914B282DAE4EC9C.roa (raw, json)
Hash identifier: Xv3vDu53DFMr305xCxxDOvTOxZVBsiOucRXWOwb9kMw=
Subject key identifier: A2:BD:14:09:E9:86:FA:2E:DC:1A:51:F4:FC:74:29:D8:8A:31:D8:11
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A664
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/183B9406252C11F1B914B282DAE4EC9C.roa
Signing time: Sat 21 Mar 2026 13:44:34 +0000
ROA not before: Sat 21 Mar 2026 13:44:29 +0000
ROA not after: Tue 28 Apr 2026 13:44:29 +0000
asID: 44559
IP address blocks: 45.199.211.0/24 maxlen: 24
45.199.212.0/24 maxlen: 24
45.199.213.0/24 maxlen: 24
45.199.214.0/24 maxlen: 24
45.199.215.0/24 maxlen: 24
45.199.216.0/24 maxlen: 24
45.199.217.0/24 maxlen: 24
45.199.218.0/24 maxlen: 24
45.199.219.0/24 maxlen: 24
45.199.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108132 (0x1a664)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 21 13:44:29 2026 GMT
Not After : Apr 28 13:44:29 2026 GMT
Subject: CN=69bea0c2-55f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:05:d8:44:b5:98:13:af:b2:92:22:03:a5:55:
79:25:d0:75:df:2c:79:a5:6a:4f:f3:d4:6b:91:36:
ec:49:26:df:01:0b:43:93:a7:80:e4:6a:e8:fe:87:
98:01:f9:7f:41:d6:da:40:f9:16:4f:e8:ca:2f:e9:
7b:ef:5a:db:64:db:db:2f:ae:32:28:2d:8c:7d:18:
af:69:88:0c:b8:5b:66:47:de:c6:9e:e6:33:1d:5f:
2a:0f:7b:0c:5c:15:8e:4a:29:43:23:f0:52:f1:86:
3b:57:f2:29:b9:cf:3e:2b:25:85:3f:63:e3:53:a9:
48:60:1b:3a:36:89:88:ce:b2:66:a3:42:3d:28:26:
a2:92:b1:7a:47:f8:1e:b3:c7:4f:b6:99:96:ab:6e:
94:d7:8c:ec:ca:66:54:16:9b:9b:ca:f5:b2:36:b0:
b9:77:c0:66:37:c1:55:c1:56:a1:07:f4:3d:cc:85:
4d:07:40:9c:d3:6f:8d:bf:97:f3:15:4d:28:a9:82:
00:2d:fa:60:c3:f8:73:14:fd:19:dc:f9:9d:9b:bd:
f3:27:b9:cb:a9:d3:33:88:86:11:47:aa:42:f2:8f:
9a:61:78:45:33:c8:bd:24:07:56:6b:80:ca:ba:5d:
26:e6:2c:82:9a:c8:9a:94:09:e1:c6:53:b0:fa:99:
d5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:BD:14:09:E9:86:FA:2E:DC:1A:51:F4:FC:74:29:D8:8A:31:D8:11
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/183B9406252C11F1B914B282DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.211.0-45.199.220.255
Signature Algorithm: sha256WithRSAEncryption
5a:fb:27:91:c6:d0:64:5a:70:e3:d1:8c:05:d1:26:fe:40:9f:
d8:ba:b7:77:6d:96:b8:11:d3:b6:22:63:00:37:45:d2:5a:da:
ea:61:10:64:0d:02:fd:1c:33:81:b9:36:b9:3e:86:09:89:f7:
8d:e2:23:5c:4f:05:85:1a:8b:9f:4c:c5:a8:82:b5:14:95:64:
ee:95:80:cf:e3:65:33:c3:96:d8:35:35:95:34:d1:81:c9:aa:
f8:b1:41:39:0c:f0:01:6b:17:93:d0:38:2c:5f:20:d9:72:10:
8e:7b:64:a0:72:9b:d8:bc:e3:98:10:47:d7:2a:61:3e:35:3d:
c0:18:94:9f:54:fb:cc:e1:7f:26:a2:cd:3b:59:47:4c:8c:40:
58:c1:8c:f1:a4:6e:b6:a3:4f:5b:8a:99:65:bc:b7:66:41:d6:
cd:bf:d8:27:22:14:86:2e:30:02:19:c1:33:f1:24:f5:25:0a:
f5:f9:43:82:7d:c5:56:13:4c:a4:50:9d:06:ba:9f:6f:19:54:
15:01:90:fa:9d:cf:10:54:17:3e:ce:4f:20:5f:4b:c0:22:17:
ee:e1:7c:32:d1:3f:1b:01:82:6f:a2:96:a8:88:4a:20:bb:2c:
9b:c1:71:98:dc:18:3f:2a:3e:1c:78:d6:b3:6a:23:a6:76:ea:
9a:07:b6:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:15:10 2026 by rpki-client