Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/45538868265D11F183CCA7ECDAE4EC9C.roa
File: 45538868265D11F183CCA7ECDAE4EC9C.roa (raw, json)
Hash identifier: 6i+7BfaCgdABAV3uUu0Heb7Mxwd3/QFCv2r39U4r/ss=
Subject key identifier: 54:4C:EB:41:DE:08:59:FC:CF:9C:4F:AC:DA:90:23:16:5D:CE:7B:EB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A6B5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/45538868265D11F183CCA7ECDAE4EC9C.roa
Signing time: Mon 23 Mar 2026 02:09:07 +0000
ROA not before: Mon 23 Mar 2026 02:09:00 +0000
ROA not after: Thu 16 Apr 2026 02:09:00 +0000
asID: 213169
IP address blocks: 45.192.246.0/23 maxlen: 24
45.192.246.0/24 maxlen: 24
45.192.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108213 (0x1a6b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 23 02:09:00 2026 GMT
Not After : Apr 16 02:09:00 2026 GMT
Subject: CN=69c0a0c3-9407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:58:b2:4f:2a:1f:0c:51:1d:b0:11:da:c5:88:
db:93:e8:a5:63:e0:8b:21:e4:ce:f8:a2:ea:bb:1d:
1f:0b:e5:a4:01:6d:98:c2:25:67:d5:06:c3:1d:52:
5e:44:13:2b:0a:15:ca:51:7e:49:22:22:e0:83:d3:
28:5d:2f:3d:86:e5:1e:c1:d3:b3:32:2f:76:ca:d2:
f4:f2:1c:31:19:75:43:ae:0b:62:e7:4e:fd:9b:08:
b9:59:a0:b9:16:96:ae:4a:9d:f9:fd:33:61:f7:89:
c5:f7:b9:39:54:3e:38:1a:fc:04:31:24:64:80:2b:
df:40:19:11:d1:0d:47:54:e3:1e:e8:9b:f1:17:08:
cc:c5:51:af:14:8b:ac:46:66:e2:c2:d2:cf:d7:80:
fa:bd:b4:ad:1e:1b:13:19:30:12:4b:2c:5f:3a:cf:
db:94:1c:22:bc:ac:52:f0:90:ac:b5:33:48:c2:50:
d7:7b:93:a6:0b:c3:ab:ff:74:b8:37:74:0b:9b:a5:
1e:1c:23:8d:ae:70:be:fc:d4:7f:92:b6:e6:9c:99:
b7:01:cd:9d:7e:09:e5:3f:7f:f9:42:c3:c4:bd:23:
e0:ea:97:d9:c8:54:6c:79:7a:3b:13:3e:d2:09:f1:
74:c6:88:c6:01:75:96:5e:78:d2:c7:55:8d:c3:ac:
b3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:4C:EB:41:DE:08:59:FC:CF:9C:4F:AC:DA:90:23:16:5D:CE:7B:EB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/45538868265D11F183CCA7ECDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.246.0/23
Signature Algorithm: sha256WithRSAEncryption
b9:51:2c:e5:40:c5:67:a4:53:fb:6f:1f:c2:0f:9a:99:c5:9c:
90:30:1b:d2:23:a1:05:86:90:21:90:d2:bc:21:45:0d:77:0e:
26:2e:58:fd:67:69:01:72:72:ee:9a:f9:4a:03:45:1c:69:b1:
6d:d8:c2:fd:f0:4e:19:05:ac:dc:06:5e:ce:87:a7:f4:a5:12:
eb:bb:c3:02:49:bd:79:ed:5e:7a:94:8a:f0:01:06:bc:53:3a:
51:f0:a5:b9:4c:49:f1:6c:b4:fc:78:f4:9b:8d:82:0d:1e:29:
d6:cc:e9:15:08:53:15:8f:c8:20:e8:b4:82:a3:f0:3d:42:51:
2d:48:35:4c:b4:3f:93:34:3f:6e:e7:32:e5:04:70:1a:0b:01:
73:c8:d6:88:98:50:2b:c6:d4:45:df:34:75:f9:5f:00:89:35:
f1:c9:05:6f:71:c5:86:0a:9d:a2:ed:62:a8:ea:be:01:bc:d4:
c4:c1:7e:68:e3:39:fe:4e:e2:57:ef:5e:08:80:b6:87:bd:79:
be:81:e2:ff:c2:e9:36:31:bc:c7:a6:f5:be:e7:5e:8d:45:ab:
10:e2:e0:42:13:7e:06:91:3c:94:99:d5:a4:63:d5:54:9a:d2:
8c:ea:38:d5:22:3a:41:de:2d:bd:37:f7:ed:85:ad:66:f7:16:
1c:74:65:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:11:06 2026 by rpki-client