Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/337776FA252B11F1B8E09E7EDAE4EC9C.roa
File: 337776FA252B11F1B8E09E7EDAE4EC9C.roa (raw, json)
Hash identifier: QZwscx4s+onEOxCCgh9IYY7pLCNOlkz0zFFVanJAd+w=
Subject key identifier: C3:C3:A2:6B:12:38:BD:AD:F1:D7:3E:9F:3F:07:1C:A6:14:B7:CE:45
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A662
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/337776FA252B11F1B8E09E7EDAE4EC9C.roa
Signing time: Sat 21 Mar 2026 13:38:11 +0000
ROA not before: Sat 21 Mar 2026 13:38:05 +0000
ROA not after: Tue 28 Apr 2026 13:38:05 +0000
asID: 44559
IP address blocks: 45.192.52.0/24 maxlen: 24
45.192.53.0/24 maxlen: 24
45.195.162.0/24 maxlen: 24
45.195.163.0/24 maxlen: 24
45.195.164.0/24 maxlen: 24
45.195.165.0/24 maxlen: 24
45.195.167.0/24 maxlen: 24
45.195.168.0/24 maxlen: 24
45.195.170.0/24 maxlen: 24
45.195.174.0/24 maxlen: 24
45.195.175.0/24 maxlen: 24
45.195.176.0/24 maxlen: 24
45.195.177.0/24 maxlen: 24
45.195.179.0/24 maxlen: 24
45.195.181.0/24 maxlen: 24
45.195.186.0/24 maxlen: 24
45.195.189.0/24 maxlen: 24
45.195.190.0/24 maxlen: 24
45.199.209.0/24 maxlen: 24
45.199.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108130 (0x1a662)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 21 13:38:05 2026 GMT
Not After : Apr 28 13:38:05 2026 GMT
Subject: CN=69be9f43-2a14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d6:da:1d:23:76:fb:b4:bc:8a:50:17:eb:1e:
cf:2c:23:67:ca:d4:b0:87:70:06:c3:6b:57:c7:a3:
c6:b7:19:29:70:70:c4:4b:d6:73:c5:50:78:fb:ce:
58:01:8d:d5:a1:32:a6:f6:f9:0a:81:d7:ef:6c:63:
e2:37:bb:7c:ae:c4:e2:8d:42:9e:61:7c:60:10:ce:
f3:6a:60:e0:9f:ea:dc:39:06:43:39:73:40:14:b3:
cb:56:b4:55:26:47:9d:c0:cb:c9:8f:66:32:ff:86:
2c:b3:67:d4:06:ff:d7:6d:0e:cb:9d:e9:48:57:28:
89:ac:08:44:a0:42:ae:bd:9a:b1:ce:03:99:d7:e3:
77:c6:b7:26:66:f2:44:ba:bd:a4:c6:fc:b5:a8:25:
02:77:e7:0d:bd:40:4f:52:e3:01:ea:32:cd:b5:da:
b2:c7:49:89:01:10:03:35:ca:9a:60:8f:e0:06:cc:
ce:d3:a0:17:67:30:4b:2b:41:d2:ee:46:36:27:8c:
40:e5:f4:33:19:f9:e0:2b:0b:13:89:f6:ec:a3:c1:
e0:e6:56:1f:93:32:08:fd:df:48:c6:12:56:dc:8c:
e1:18:75:93:71:72:9c:aa:1b:f0:ae:ab:b2:d6:64:
03:5a:ec:1c:2a:b7:41:94:5e:d6:1f:c4:ea:3c:31:
09:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:C3:A2:6B:12:38:BD:AD:F1:D7:3E:9F:3F:07:1C:A6:14:B7:CE:45
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/337776FA252B11F1B8E09E7EDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.52.0/23
45.195.162.0-45.195.165.255
45.195.167.0-45.195.168.255
45.195.170.0/24
45.195.174.0-45.195.177.255
45.195.179.0/24
45.195.181.0/24
45.195.186.0/24
45.195.189.0-45.195.190.255
45.199.209.0-45.199.210.255
Signature Algorithm: sha256WithRSAEncryption
3f:5c:11:48:35:bf:c8:30:16:3f:ea:e9:ed:b2:ed:92:79:cf:
6a:55:f7:83:ce:8f:dc:66:2f:09:0c:a3:6a:ee:05:66:df:b8:
87:18:76:6a:67:93:a9:08:c4:f9:a2:db:2d:90:f4:ad:ea:22:
d1:14:4d:c3:32:c8:d0:20:f3:5e:9d:5b:33:42:a1:9c:0a:b3:
5a:45:f8:6a:3e:f7:19:17:5d:d3:55:12:24:10:9e:f1:58:db:
a7:a0:64:48:2f:f8:a4:b3:eb:68:59:9e:b2:18:0a:97:37:f2:
1a:24:07:f2:85:21:c4:83:66:bf:eb:b8:51:00:1c:d9:e6:ce:
a1:55:2e:41:a1:30:c5:3a:0e:e1:3f:ea:21:1b:7a:9c:e8:91:
ef:22:d4:d9:ca:b2:9d:57:24:93:f4:db:0b:3d:a3:30:d2:8b:
d5:64:8d:17:9e:3f:d4:14:b6:ea:05:9e:99:b2:02:7b:25:5f:
ca:df:e3:ad:ca:56:da:28:b5:45:91:79:84:e0:f4:6b:b5:a9:
56:af:e4:0a:d4:3a:6f:1a:1c:ad:62:80:da:9a:b1:20:b6:7d:
59:c7:02:be:cf:72:80:27:09:40:db:65:fb:2d:59:a8:71:26:
82:4b:df:f5:51:3d:c9:14:8a:43:a7:94:c0:e7:ab:dc:fa:06:
90:da:21:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:15:46 2026 by rpki-client