Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/64866FA0189A11F1833486BDDAE4EC9C.roa
File: 64866FA0189A11F1833486BDDAE4EC9C.roa (raw, json)
Hash identifier: hIEh9Z7m+VMmxjE5eLquG7b6Xn4xzqBQ70nBdGUzljM=
Subject key identifier: A0:8E:4B:41:5D:DC:13:97:F8:E8:D6:A9:4E:EA:5A:3B:77:5B:CD:9A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A2B5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/64866FA0189A11F1833486BDDAE4EC9C.roa
Signing time: Thu 05 Mar 2026 13:51:22 +0000
ROA not before: Thu 05 Mar 2026 13:51:17 +0000
ROA not after: Thu 09 Apr 2026 13:51:17 +0000
asID: 54801
IP address blocks: 45.200.14.0/23 maxlen: 24
45.200.16.0/23 maxlen: 24
45.200.18.0/23 maxlen: 24
45.200.20.0/22 maxlen: 24
45.200.24.0/21 maxlen: 24
45.200.32.0/19 maxlen: 24
45.201.214.0/23 maxlen: 24
45.201.216.0/21 maxlen: 24
45.201.224.0/21 maxlen: 24
45.201.240.0/20 maxlen: 24
45.204.0.0/24 maxlen: 24
45.207.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107189 (0x1a2b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 5 13:51:17 2026 GMT
Not After : Apr 9 13:51:17 2026 GMT
Subject: CN=69a98a5a-10a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:86:6f:f6:00:80:b8:9c:1a:a0:fd:d8:32:e1:
02:60:5d:14:00:c8:53:0b:f3:00:d2:e6:b0:25:13:
36:52:07:b4:74:a8:a6:0a:e1:be:02:e2:dd:9f:b9:
ac:ff:81:96:bd:89:0c:a6:7b:6c:ee:cd:b1:e5:74:
2e:41:5a:5d:b0:6c:42:da:07:3e:fb:6a:c6:39:50:
cd:eb:b2:d3:60:f9:86:a8:e4:d4:14:37:5d:74:39:
66:ce:54:6d:75:d5:29:76:4a:fb:71:fb:01:21:9c:
94:46:1a:0a:8f:b2:a7:ad:de:44:50:fb:1c:17:76:
06:3f:36:76:0c:20:3d:d8:a2:7e:d5:a1:69:09:57:
09:22:49:ca:90:0b:58:40:24:06:4e:b5:bf:f7:51:
d4:b6:79:c0:61:62:66:f7:e9:b4:8d:df:24:32:54:
bb:a0:93:66:0b:97:f1:0e:74:21:fa:fa:1d:b4:57:
d2:cc:da:1a:7a:1f:90:4e:e5:72:39:81:9f:d4:02:
62:de:22:d8:cb:e2:cc:31:64:93:5f:aa:c3:7d:b6:
f2:df:11:05:0f:cb:52:3a:56:19:42:b5:61:26:8e:
12:58:4a:1d:99:e2:aa:d1:74:c6:8c:a4:70:51:ef:
13:b8:8f:4e:53:f2:cb:e9:d7:ba:38:9d:77:f5:d3:
d6:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:8E:4B:41:5D:DC:13:97:F8:E8:D6:A9:4E:EA:5A:3B:77:5B:CD:9A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/64866FA0189A11F1833486BDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.14.0-45.200.63.255
45.201.214.0-45.201.231.255
45.201.240.0/20
45.204.0.0/24
45.207.224.0/19
Signature Algorithm: sha256WithRSAEncryption
04:07:77:ee:3d:be:c1:d2:ea:37:60:f1:40:01:1c:12:ad:44:
a1:11:7b:46:6f:2b:92:d4:15:69:c9:cd:d6:e2:9a:9f:08:28:
ec:28:27:35:7e:f8:23:4c:c9:22:94:9e:e4:c6:a1:ff:ad:93:
d6:66:0a:b1:e5:86:a1:86:65:05:57:6c:2d:43:a0:d9:c4:74:
ef:e8:a6:07:03:b8:c4:50:62:76:4e:c1:a6:d1:05:1c:4c:38:
f2:48:f6:bb:e1:12:3c:f9:41:4b:fe:c3:ee:da:9e:fe:de:c8:
c0:e3:f4:50:ea:18:09:6d:1f:44:62:dc:aa:1c:f2:a6:6b:3c:
36:6a:00:5d:35:ab:0f:0f:ae:23:32:6c:0b:6c:ff:fe:06:2a:
45:e0:ba:7e:34:9f:b4:a7:0d:e1:79:8e:f6:0c:47:c6:70:d5:
2a:db:5e:7f:92:c8:25:21:a1:50:ab:a4:53:fa:b4:85:77:0f:
6b:1d:db:3c:1b:6a:85:28:fc:88:84:56:7a:21:59:46:1e:c2:
37:bc:a8:5b:00:19:27:31:a3:2f:93:fb:5e:a3:1b:13:a1:13:
00:10:79:eb:35:d1:29:57:c6:38:40:d1:ee:f2:f4:b4:79:28:
28:5a:5d:cf:e5:b1:29:4f:7a:d9:ab:4e:d6:99:58:63:c9:5d:
09:1c:ea:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:15:05 2026 by rpki-client