Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3AABE6B884DF11F18E50D2ACCE1D38B0.roa
File: 3AABE6B884DF11F18E50D2ACCE1D38B0.roa (raw, json)
Hash identifier: SbxxxEtTH7jHkTuJBAaLT7JbY8cjGgRtHVpzlBwL4SY=
Subject key identifier: 06:CB:F2:94:AE:CB:B8:7B:B4:F2:B0:11:01:D0:AE:1A:A4:0B:4D:06
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C6A8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3AABE6B884DF11F18E50D2ACCE1D38B0.roa
Signing time: Tue 21 Jul 2026 08:36:12 +0000
ROA not before: Tue 21 Jul 2026 08:36:08 +0000
ROA not after: Sat 29 Aug 2026 08:36:08 +0000
asID: 202656
IP address blocks: 45.192.48.0/24 maxlen: 24
45.192.49.0/24 maxlen: 24
45.192.50.0/24 maxlen: 24
45.192.51.0/24 maxlen: 24
45.192.54.0/24 maxlen: 24
45.192.55.0/24 maxlen: 24
45.192.56.0/24 maxlen: 24
45.192.57.0/24 maxlen: 24
45.192.58.0/24 maxlen: 24
45.192.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116392 (0x1c6a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 21 08:36:08 2026 GMT
Not After : Aug 29 08:36:08 2026 GMT
Subject: CN=6a5f2f7c-56f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:68:9c:db:51:9f:6a:14:65:12:a1:a4:1b:09:
72:b2:56:ed:8c:b6:c0:b8:f7:b4:75:69:fc:fa:c7:
30:58:d0:be:2c:e9:2b:8b:18:ad:6f:7e:00:e2:b8:
99:ec:9a:c9:f0:ce:49:f1:f5:da:e4:f9:ba:99:27:
c5:29:29:50:86:bc:2d:b6:d5:33:77:aa:0d:66:f0:
d6:1f:81:be:6e:a2:10:48:c3:4c:26:ae:e4:2a:28:
6d:32:db:5f:70:81:00:21:2b:26:4f:dd:34:da:18:
61:15:70:80:df:4c:f2:18:71:9d:8a:63:f8:8d:66:
3c:dd:71:a4:11:7e:b4:0b:75:7e:bb:d9:85:07:49:
90:67:61:6d:22:a5:dd:34:4d:15:f9:ee:63:ad:9f:
f6:2d:04:48:6f:2f:93:be:eb:f1:38:15:52:e7:a6:
c1:f1:b4:32:65:b6:0a:ca:b2:3f:1e:20:a0:1d:3b:
65:66:91:a9:14:da:44:bc:fc:07:cd:45:b7:5f:5d:
7b:4e:fc:86:3d:b2:c4:df:d5:4e:b6:fa:f6:43:82:
f6:0c:2b:7e:aa:d0:99:8a:1f:23:3a:4b:27:0a:f9:
e2:82:15:02:97:99:08:95:99:58:aa:b3:f8:f6:53:
c4:4e:c7:af:3e:0d:f2:8d:de:fe:61:f5:b6:d8:fd:
35:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:CB:F2:94:AE:CB:B8:7B:B4:F2:B0:11:01:D0:AE:1A:A4:0B:4D:06
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3AABE6B884DF11F18E50D2ACCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.48.0/22
45.192.54.0-45.192.59.255
Signature Algorithm: sha256WithRSAEncryption
b2:aa:b2:8d:06:02:f0:c4:12:8e:33:4f:72:1b:54:fb:f9:72:
4e:3a:b6:20:cc:ce:cb:98:69:18:da:0d:b7:28:a2:0d:f3:eb:
a6:7c:f3:17:73:3a:15:09:19:37:f6:fc:20:1d:69:fd:c7:06:
23:76:e4:e5:61:f9:b3:ae:be:5f:fb:64:00:0d:cb:80:1e:78:
e1:28:dc:37:17:2f:a3:53:86:fc:58:39:57:e5:6e:21:da:bc:
98:42:3a:95:55:62:cc:40:91:9e:e3:97:15:54:08:ae:67:22:
9e:51:d6:a9:94:f7:07:a3:f8:48:56:16:f1:40:e7:45:d4:10:
3a:6b:00:85:b2:c0:e5:b9:ce:c6:96:3b:81:d1:06:a6:26:8b:
0c:ea:bc:20:cf:e5:02:89:f7:4d:40:3d:87:b6:65:f1:e7:9a:
c0:d1:d1:dd:9f:52:66:f8:31:0a:bf:51:25:5b:15:79:f4:08:
2a:aa:96:74:67:cd:ec:15:af:39:ea:82:d2:0c:9c:90:dd:e4:
23:39:5e:5e:30:1a:a8:fd:f3:46:7b:91:23:6b:90:f4:4a:d1:
b3:76:a6:2c:5e:22:17:18:fb:44:8a:07:e8:26:32:c7:65:ce:
f8:d2:fe:92:fa:a7:43:45:21:4d:37:3d:f2:16:fe:62:7e:c6:
d1:61:f1:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:10:04 2026 by rpki-client