Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1A2DB33C3E6A11F1B16BD5BFCE1D38B0.roa
File: 1A2DB33C3E6A11F1B16BD5BFCE1D38B0.roa (raw, json)
Hash identifier: yIqDrBZr0EsLAntj1V0DqDm88fRhILnIs6y/gcFDPAc=
Subject key identifier: 47:94:D2:1F:66:46:70:9E:B9:51:72:B2:7A:1A:A7:F7:F2:5D:0E:59
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AE41
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1A2DB33C3E6A11F1B16BD5BFCE1D38B0.roa
Signing time: Wed 22 Apr 2026 16:41:25 +0000
ROA not before: Wed 22 Apr 2026 16:41:20 +0000
ROA not after: Tue 09 Jun 2026 16:41:20 +0000
asID: 401783
IP address blocks: 45.192.13.0/24 maxlen: 24
45.192.113.0/24 maxlen: 24
45.192.114.0/24 maxlen: 24
45.192.116.0/23 maxlen: 24
45.192.118.0/23 maxlen: 24
45.192.235.0/24 maxlen: 24
45.195.255.0/24 maxlen: 24
45.207.138.0/23 maxlen: 24
45.207.140.0/23 maxlen: 24
45.207.142.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110145 (0x1ae41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 22 16:41:20 2026 GMT
Not After : Jun 9 16:41:20 2026 GMT
Subject: CN=69e8fa35-9c6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:82:ac:0c:8e:a5:99:7f:2e:9f:a5:5d:9f:ee:
20:24:6f:e3:50:95:7e:e1:0d:db:49:a8:d3:d3:b8:
cf:d4:73:81:e9:de:ee:66:0e:b7:b4:9e:ee:d3:16:
d3:10:23:92:e1:78:93:56:0a:32:ea:95:36:18:95:
54:5f:18:b8:2c:36:00:fc:9b:8b:4b:ee:e1:9b:e4:
23:31:2c:4f:15:c5:44:d8:d8:4d:a5:b3:57:1b:c4:
44:20:2f:03:12:76:d1:cc:50:cb:98:f6:4c:45:f8:
8a:e0:f1:01:9f:36:72:a6:75:fc:b2:87:ef:d3:21:
4a:3e:c4:a0:13:25:1c:78:a6:49:38:98:53:81:2f:
b7:25:58:be:f5:e1:f4:9b:8f:52:0c:29:3b:27:cb:
27:21:e5:85:75:77:1b:7e:81:7c:94:f1:54:fc:b5:
b8:ed:02:5f:69:6f:0f:e5:66:72:e2:0f:2d:85:f0:
f7:01:9f:22:0e:3e:dc:6e:60:26:bf:11:f4:7e:64:
0f:a5:62:ab:84:73:26:1c:5a:ed:67:f3:a9:94:01:
22:fe:12:58:8e:c0:0e:a4:92:44:c6:28:50:0c:65:
ac:d7:9b:04:9d:4c:d9:e3:9d:73:46:d5:99:25:46:
65:c9:00:2c:ab:37:75:58:6a:58:10:c4:c8:78:48:
ee:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:94:D2:1F:66:46:70:9E:B9:51:72:B2:7A:1A:A7:F7:F2:5D:0E:59
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1A2DB33C3E6A11F1B16BD5BFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.13.0/24
45.192.113.0-45.192.114.255
45.192.116.0/22
45.192.235.0/24
45.195.255.0/24
45.207.138.0-45.207.143.255
Signature Algorithm: sha256WithRSAEncryption
88:01:0f:95:ef:72:66:2f:d6:02:a0:2a:b4:db:52:a2:3d:0d:
9d:56:30:48:e0:f6:01:5c:0b:ae:a6:2b:df:47:f6:d1:ea:1c:
89:70:44:85:53:d5:9e:d4:b3:b8:c8:e7:0c:67:c9:f0:f0:43:
9c:fa:cc:68:26:23:04:62:95:5e:98:5d:ca:46:e6:6e:56:08:
01:66:df:9d:dc:09:04:a1:20:cc:2e:46:c4:df:9f:70:66:36:
21:86:65:c4:b5:cc:b5:73:27:9f:91:a9:37:5a:28:cc:cf:98:
a6:68:6d:b0:df:60:db:46:a9:0b:cc:a6:33:57:ba:a3:04:1c:
58:2e:fd:ff:81:d4:06:5e:4d:ee:73:6e:92:03:59:b1:37:1d:
6e:43:68:d8:c1:83:a5:e3:a7:cf:6c:63:cc:0c:aa:f3:d6:ac:
72:8b:78:5b:b6:21:83:b4:b7:94:5e:f1:a4:2e:c2:2b:63:c0:
90:4d:c8:20:d0:03:81:e4:24:aa:01:f4:aa:ef:16:8b:33:d2:
5b:23:60:be:ef:70:f1:d7:78:93:66:f6:dd:8c:e3:e8:e6:d1:
c4:79:e6:ed:3b:f1:18:13:95:cd:35:e0:e2:2d:9a:21:0d:de:
b5:52:54:33:66:7a:e0:23:5e:44:0e:29:d3:52:bc:5c:4f:f1:
73:67:3b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:54:34 2026 by rpki-client