Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2134BF143EDC11F1B31AD904CF1D38B0.roa
File: 2134BF143EDC11F1B31AD904CF1D38B0.roa (raw, json)
Hash identifier: xLp5RVceRZu1RHnILpsaWrEO8dw7BkVrHBxFaKZth2g=
Subject key identifier: 38:31:9E:70:A2:61:A7:EE:A6:10:AE:32:90:90:B3:9F:F9:88:B5:0B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AE89
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2134BF143EDC11F1B31AD904CF1D38B0.roa
Signing time: Thu 23 Apr 2026 06:17:40 +0000
ROA not before: Thu 23 Apr 2026 06:17:35 +0000
ROA not after: Thu 28 May 2026 06:17:35 +0000
asID: 62240
IP address blocks: 45.192.32.0/24 maxlen: 24
45.192.33.0/24 maxlen: 24
45.192.34.0/24 maxlen: 24
45.192.35.0/24 maxlen: 24
45.192.36.0/24 maxlen: 24
45.192.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110217 (0x1ae89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 23 06:17:35 2026 GMT
Not After : May 28 06:17:35 2026 GMT
Subject: CN=69e9b984-2b29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:80:bb:fc:9a:7e:80:15:76:ae:3d:02:a0:50:
4b:2b:33:6d:e0:d3:c9:a7:72:28:3e:c0:a3:ed:80:
d9:c7:ba:5b:22:20:27:cd:e2:4b:90:ce:85:3c:09:
c9:86:78:32:1b:a3:f0:e5:10:7e:a2:20:5c:a4:38:
d5:91:5d:1e:44:76:6c:23:69:4d:44:23:df:aa:31:
f3:96:5b:43:23:3f:6e:14:da:64:11:bd:37:8b:29:
8a:59:ef:d4:64:0d:48:99:71:24:e0:3e:bd:74:d0:
af:5e:f1:d2:1e:21:e7:53:95:7a:6e:79:5b:fd:6c:
7a:e4:a0:d6:b4:01:18:e6:f9:d0:60:4e:43:02:ee:
e0:16:c1:0c:05:10:d7:cb:52:99:03:79:ee:bd:47:
80:5a:0a:a5:72:f5:7b:45:5b:70:56:3c:7a:e7:01:
40:ce:fa:4f:67:b2:d6:c4:40:cd:12:8a:22:1f:ef:
ef:76:5c:84:b2:d1:35:aa:88:30:be:53:5b:9c:f0:
dc:09:15:15:f3:6f:53:46:ab:c2:68:14:5e:ce:ab:
e4:cf:73:c5:08:69:68:fb:35:80:dd:a2:84:8e:cb:
af:a1:06:4a:83:0c:5a:38:8f:56:09:c2:2c:dc:a4:
77:32:0f:f7:94:c3:16:72:7e:29:da:9c:dd:5e:25:
e5:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:31:9E:70:A2:61:A7:EE:A6:10:AE:32:90:90:B3:9F:F9:88:B5:0B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2134BF143EDC11F1B31AD904CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.32.0-45.192.37.255
Signature Algorithm: sha256WithRSAEncryption
94:cb:91:e9:55:32:17:6a:f4:a7:7b:63:b4:a4:ec:a8:36:be:
27:ee:1b:a3:e8:7a:b3:02:1f:d3:66:68:70:8d:1b:a4:cf:65:
db:42:53:48:7b:4d:42:b9:69:01:3d:f2:8e:32:14:66:ad:89:
64:a3:f2:e0:65:a9:34:58:1a:21:35:ab:e3:95:2f:52:8c:6d:
a1:ed:4c:b9:26:7e:a2:6d:0a:2a:06:2b:e4:d2:d3:1b:e0:21:
7c:54:26:8e:eb:57:1c:1d:04:7c:61:7f:df:a8:5b:84:06:50:
bb:5d:a3:8a:0b:34:db:81:39:8c:46:6a:c6:fd:90:f0:ea:24:
58:73:51:31:ce:06:55:63:85:1b:87:c6:64:05:88:61:47:92:
51:49:96:c2:b9:41:bf:2b:2b:1a:6b:24:64:12:f6:18:4b:a9:
f9:5e:60:3b:2f:35:9e:8c:a0:05:37:1f:93:0c:ce:d0:75:aa:
07:6f:2b:41:87:1a:b5:39:f9:83:74:cb:6a:e1:36:2f:5c:e9:
b0:cd:99:c8:ee:00:2f:fc:9c:6f:5b:1d:87:23:0b:3e:a1:b8:
54:cf:24:8d:21:54:cd:b4:03:36:99:16:fc:de:c3:f4:7f:87:
ca:11:23:28:3e:f2:aa:b7:5a:d6:0d:2a:c0:50:56:c1:0d:9e:
7b:9a:42:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:10:23 2026 by rpki-client