Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/83291ED63E9611F1A29B01CBCE1D38B0.roa
File: 83291ED63E9611F1A29B01CBCE1D38B0.roa (raw, json)
Hash identifier: IayKvRGj5AoCLgaiL8sffaFw4ZUmdpIlR22vMvOcbTU=
Subject key identifier: 05:B4:B3:16:B2:0B:61:05:B6:90:A1:E7:4A:70:46:48:95:A5:14:8F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AE70
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/83291ED63E9611F1A29B01CBCE1D38B0.roa
Signing time: Wed 22 Apr 2026 21:59:19 +0000
ROA not before: Wed 22 Apr 2026 21:59:14 +0000
ROA not after: Fri 29 May 2026 21:59:14 +0000
asID: 214143
IP address blocks: 45.195.3.0/24 maxlen: 24
45.197.135.0/24 maxlen: 24
45.198.69.0/24 maxlen: 24
45.198.75.0/24 maxlen: 24
45.198.81.0/24 maxlen: 24
45.198.84.0/24 maxlen: 24
45.198.86.0/24 maxlen: 24
45.198.89.0/24 maxlen: 24
45.198.90.0/24 maxlen: 24
45.198.97.0/24 maxlen: 24
45.198.104.0/24 maxlen: 24
45.198.109.0/24 maxlen: 24
45.198.112.0/24 maxlen: 24
45.198.138.0/24 maxlen: 24
45.198.163.0/24 maxlen: 24
45.198.168.0/24 maxlen: 24
45.198.176.0/24 maxlen: 24
45.198.181.0/24 maxlen: 24
45.206.44.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110192 (0x1ae70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 22 21:59:14 2026 GMT
Not After : May 29 21:59:14 2026 GMT
Subject: CN=69e944b7-fee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b6:6e:ca:6a:68:e0:45:ba:9f:ac:bc:6c:59:
ac:8b:e2:ab:81:81:50:55:00:f9:0a:21:03:85:40:
42:8c:3e:ac:17:aa:6d:80:71:eb:93:38:53:52:55:
21:dd:3c:16:21:e7:e4:5e:8f:82:bc:bb:2b:d5:d5:
f1:dd:e9:f5:35:d4:2e:ae:8d:a8:f9:6f:74:e9:4c:
e9:6d:17:78:e3:a6:20:80:9e:fc:dd:3a:41:76:50:
58:0c:75:1f:33:54:de:f4:2c:15:aa:26:72:77:57:
20:0a:96:76:3c:19:44:03:e5:7e:3b:e9:91:a1:82:
4c:47:29:b9:91:b9:33:7a:67:fa:07:80:7d:d3:2d:
41:e9:a0:73:89:bf:67:23:c4:08:e7:6f:27:74:f3:
80:82:9e:e5:3d:3d:64:a0:e2:b5:90:ce:8c:17:93:
d4:a4:5b:52:41:ac:c5:47:05:a7:89:5d:4b:1b:55:
27:7e:db:b1:56:5e:42:00:db:67:87:b1:98:44:25:
bc:04:51:b2:22:01:e3:9a:79:a5:a8:60:e8:74:2c:
77:f3:18:86:83:6d:3e:e7:8e:64:1d:15:10:0f:a1:
31:aa:b8:0d:0b:af:42:88:db:b3:71:c4:b7:34:02:
56:e2:3c:6c:01:06:d0:68:64:33:a4:86:27:93:b1:
06:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:B4:B3:16:B2:0B:61:05:B6:90:A1:E7:4A:70:46:48:95:A5:14:8F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/83291ED63E9611F1A29B01CBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.3.0/24
45.197.135.0/24
45.198.69.0/24
45.198.75.0/24
45.198.81.0/24
45.198.84.0/24
45.198.86.0/24
45.198.89.0-45.198.90.255
45.198.97.0/24
45.198.104.0/24
45.198.109.0/24
45.198.112.0/24
45.198.138.0/24
45.198.163.0/24
45.198.168.0/24
45.198.176.0/24
45.198.181.0/24
45.206.44.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:31:1a:2e:98:18:9d:2c:9b:f6:48:00:02:7e:6b:57:01:72:
92:65:ed:53:ac:5b:42:98:b8:df:fa:37:3e:d1:6f:bf:fb:03:
67:62:3d:0b:33:53:42:01:08:02:ef:6a:cf:9a:c8:61:37:43:
d8:56:41:ba:eb:18:80:fd:af:c8:cf:fe:1e:e5:07:5f:04:80:
43:74:5b:0c:2f:ca:5e:be:44:bc:85:97:b5:1a:3d:ef:93:4a:
d8:2a:36:68:15:19:de:15:2c:5b:d4:92:3d:e4:8e:3b:4d:a7:
96:b5:22:32:51:ac:1c:e8:9f:16:00:f8:e9:ce:3d:90:e0:6f:
fb:da:d2:83:94:0d:c3:d8:a2:e4:94:a2:3c:9c:c2:d1:89:25:
c7:98:a8:48:01:52:2a:ad:cf:54:2f:02:7f:e3:31:a8:0c:3e:
d6:af:7a:35:8b:3c:01:50:ab:62:f1:57:15:b6:19:5b:53:f0:
68:70:9b:d9:cd:b9:21:db:ac:fd:c5:22:e9:53:dd:a1:28:9a:
9d:3d:d8:7d:6b:30:ac:29:fd:34:84:93:a8:11:da:ce:f4:f9:
6f:e8:4f:cf:c3:04:c7:1f:a0:b4:f6:38:7c:b7:79:81:21:c3:
6f:9b:19:29:8f:e8:80:53:21:e6:a1:79:70:59:be:87:23:28:
39:41:e7:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:17:44 2026 by rpki-client