Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/582666123E8711F1BA6B7CEECE1D38B0.roa
File: 582666123E8711F1BA6B7CEECE1D38B0.roa (raw, json)
Hash identifier: /lrfjVEX3/iasx7j0L4r2HucLOgOdVyvHxtSk1XeY4s=
Subject key identifier: C4:4D:50:55:DF:6B:D5:86:18:CE:86:78:8A:38:4E:6F:AC:D8:1C:4F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AE5E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/582666123E8711F1BA6B7CEECE1D38B0.roa
Signing time: Wed 22 Apr 2026 20:10:45 +0000
ROA not before: Wed 22 Apr 2026 20:10:40 +0000
ROA not after: Thu 28 May 2026 20:10:40 +0000
asID: 202656
IP address blocks: 45.192.48.0/24 maxlen: 24
45.192.62.0/24 maxlen: 24
45.199.206.0/24 maxlen: 24
45.199.221.0/24 maxlen: 24
45.199.222.0/24 maxlen: 24
45.199.223.0/24 maxlen: 24
45.199.224.0/24 maxlen: 24
45.199.226.0/24 maxlen: 24
45.199.227.0/24 maxlen: 24
45.199.228.0/24 maxlen: 24
45.199.229.0/24 maxlen: 24
45.199.230.0/24 maxlen: 24
45.199.241.0/24 maxlen: 24
45.199.242.0/24 maxlen: 24
45.199.243.0/24 maxlen: 24
45.199.244.0/24 maxlen: 24
45.199.245.0/24 maxlen: 24
45.199.249.0/24 maxlen: 24
45.199.250.0/24 maxlen: 24
45.199.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110174 (0x1ae5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 22 20:10:40 2026 GMT
Not After : May 28 20:10:40 2026 GMT
Subject: CN=69e92b45-82b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b1:65:a2:39:af:3d:45:52:c2:31:5b:61:72:
19:21:d4:e0:b6:4d:6f:83:1c:8b:0e:3f:97:70:2f:
69:56:82:29:f7:a4:dc:f6:ee:31:e6:21:85:53:6d:
bd:09:a0:19:f4:c4:31:40:bb:c2:d0:2c:e9:d9:42:
09:bf:91:c6:96:17:f9:a2:4c:7c:58:84:6a:77:09:
64:03:1f:be:47:f0:65:7b:b9:b5:31:87:d6:38:1f:
74:39:f7:e9:ec:61:0c:c7:aa:06:55:15:37:44:07:
aa:6b:c1:59:db:d8:7e:72:53:cf:38:e7:65:e6:d4:
cb:a6:84:3c:71:c3:36:34:80:41:53:31:05:be:dc:
5e:e6:09:10:5e:95:b1:9d:3b:5c:19:a8:0e:d4:4c:
30:a2:9a:29:dd:64:02:52:20:2e:73:c1:33:85:a2:
a5:1c:85:a2:51:4c:fa:db:15:ed:92:b8:08:ad:aa:
16:6c:01:98:6e:1e:7f:47:51:9a:e0:99:03:1e:33:
5c:38:7c:1d:1d:3e:a6:1e:20:83:47:a8:0f:26:3d:
f3:3a:14:76:06:01:8d:16:5b:6e:f2:b5:9b:7f:29:
cc:ea:13:52:e9:55:38:c8:59:37:69:a1:57:b6:8d:
b9:97:36:32:15:d7:e8:d7:2b:ca:eb:a6:e2:99:91:
b9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:4D:50:55:DF:6B:D5:86:18:CE:86:78:8A:38:4E:6F:AC:D8:1C:4F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/582666123E8711F1BA6B7CEECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.48.0/24
45.192.62.0/24
45.199.206.0/24
45.199.221.0-45.199.224.255
45.199.226.0-45.199.230.255
45.199.241.0-45.199.245.255
45.199.249.0-45.199.250.255
45.199.252.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:0e:4f:75:34:35:40:ac:65:7a:c9:1b:8e:77:1f:08:46:69:
25:e0:c5:55:8b:b4:a6:c7:37:4c:40:cf:f3:41:a3:b3:99:af:
16:1d:d8:47:0d:77:c4:77:87:f3:a3:65:c1:7f:e4:6e:23:94:
bf:72:b8:9a:6d:57:f4:5d:a2:c6:ee:c7:8e:1f:a0:80:be:ad:
fc:37:72:21:e9:0b:cd:a9:84:5e:e9:39:95:44:b3:00:e3:97:
c4:43:94:a3:0f:d6:94:18:5c:60:ec:df:45:09:b9:a8:04:86:
22:4d:11:dd:4e:99:bf:c7:47:99:ea:7e:46:0e:82:d2:d1:2c:
2c:a6:78:d3:4d:02:a3:34:cd:9a:40:95:1e:70:08:79:95:17:
47:db:ae:41:2e:74:0d:d3:0e:90:b5:92:60:d5:a8:3f:d1:4c:
fb:e0:df:1c:aa:98:e4:92:0e:c7:d5:0c:de:66:13:8d:30:28:
71:c1:41:69:1b:c0:89:3c:83:32:f1:6e:36:f9:07:fa:00:a6:
22:70:b7:a9:d1:4c:8f:e1:41:f3:67:57:c5:6a:11:95:25:d4:
3f:d3:21:b5:bb:77:5a:00:65:2c:6e:78:47:e3:62:71:6c:44:
59:d7:6f:08:21:ce:2f:71:51:c8:06:9a:75:b5:51:77:7e:64:
f7:29:be:2a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed May 13 13:02:17 2026 by rpki-client