Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/963F460E1C8011F19968E8F0DAE4EC9C.roa
File: 963F460E1C8011F19968E8F0DAE4EC9C.roa (raw, json)
Hash identifier: GhdX1aYNdm9CmzYe1NV/4hSvkKTza3vH7s4QOQT1pYo=
Subject key identifier: 08:F6:E0:CE:9C:29:72:7E:44:D8:47:DE:2D:88:1D:B2:07:51:56:0B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A3CA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/963F460E1C8011F19968E8F0DAE4EC9C.roa
Signing time: Tue 10 Mar 2026 12:56:43 +0000
ROA not before: Tue 10 Mar 2026 12:56:38 +0000
ROA not after: Thu 09 Apr 2026 12:56:38 +0000
asID: 61112
IP address blocks: 45.192.240.0/24 maxlen: 24
45.192.241.0/24 maxlen: 24
45.196.96.0/24 maxlen: 24
45.196.97.0/24 maxlen: 24
45.196.215.0/24 maxlen: 24
45.196.222.0/24 maxlen: 24
45.196.233.0/24 maxlen: 24
45.196.234.0/23 maxlen: 24
45.196.235.0/24 maxlen: 24
45.196.240.0/24 maxlen: 24
45.202.240.0/22 maxlen: 24
45.202.244.0/24 maxlen: 24
45.202.246.0/23 maxlen: 24
45.202.246.0/24 maxlen: 24
45.202.247.0/24 maxlen: 24
45.202.248.0/22 maxlen: 24
45.202.248.0/23 maxlen: 24
45.202.248.0/24 maxlen: 24
45.202.249.0/24 maxlen: 24
45.207.156.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107466 (0x1a3ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 10 12:56:38 2026 GMT
Not After : Apr 9 12:56:38 2026 GMT
Subject: CN=69b0150b-e850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:79:4e:1c:e1:d8:bd:24:88:f5:47:74:38:f3:
14:cc:f3:e5:75:13:42:80:0b:89:f1:82:c3:2e:8f:
83:75:6e:0c:28:03:7c:c1:e2:8d:5e:fb:f0:e5:80:
7b:dd:e6:f9:7d:f0:de:c0:1c:25:13:f4:ee:ed:38:
c5:59:4d:07:fb:1d:54:ad:d8:57:71:6d:3e:4c:b1:
0e:3a:6a:57:7e:3d:2a:cc:0e:4a:02:45:34:04:12:
9f:c2:1d:c8:60:58:85:f1:94:b4:04:b0:c1:86:54:
75:a1:67:d3:32:b7:79:9c:98:a5:ad:fd:0f:d8:9e:
d6:7f:92:10:7b:a3:e4:10:70:4e:f6:06:74:f4:f4:
0e:29:b8:73:70:7b:23:62:f6:86:83:e4:e6:71:47:
91:b7:b0:d7:2f:84:83:af:2a:ee:ae:8d:f9:7c:22:
69:01:3c:ca:cb:9b:75:7c:13:32:2d:63:f1:df:ad:
0e:3b:86:cd:ac:2f:bb:88:7c:af:90:8e:3f:04:40:
20:ea:7b:24:2d:e5:4c:61:97:4e:13:88:cc:17:a7:
43:23:14:fb:ee:dc:78:6a:f9:9e:f6:f5:f6:eb:21:
eb:88:c2:f6:2a:77:71:70:f9:fb:9a:5d:06:8f:e2:
3e:0a:4f:c8:8f:30:e2:21:a9:94:9e:cc:b6:e9:ce:
25:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:F6:E0:CE:9C:29:72:7E:44:D8:47:DE:2D:88:1D:B2:07:51:56:0B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/963F460E1C8011F19968E8F0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.240.0/23
45.196.96.0/23
45.196.215.0/24
45.196.222.0/24
45.196.233.0-45.196.235.255
45.196.240.0/24
45.202.240.0-45.202.244.255
45.202.246.0-45.202.251.255
45.207.156.0/23
Signature Algorithm: sha256WithRSAEncryption
37:a0:ef:31:34:bb:4a:07:2e:c4:a2:50:06:d4:33:14:f9:72:
12:d4:95:26:46:c9:48:80:0a:b2:71:d1:7e:37:11:43:55:63:
2c:b8:8b:e9:d4:c5:fb:9c:ff:b7:e7:09:ba:4a:63:21:88:65:
27:0e:db:24:c8:72:e1:f6:1b:dc:14:5d:e2:7f:ac:3d:82:eb:
ec:4b:f6:57:a6:ea:43:f4:3e:21:7a:bd:77:a1:11:a7:89:5a:
79:51:3b:75:f5:5d:30:64:55:1f:29:62:1d:e0:88:c3:3f:07:
54:f0:4a:d0:17:16:2e:4c:70:35:ab:2b:d0:5b:c9:19:34:1c:
78:2a:dd:7d:36:97:eb:da:bf:41:c2:83:e8:9f:46:86:89:0c:
5e:77:73:60:4b:5d:a3:98:a5:ff:08:0b:16:20:98:b2:5e:b2:
05:25:fd:7f:5d:88:46:76:81:3b:42:21:ce:4e:69:df:21:42:
2f:a9:84:dd:92:ca:23:ae:84:3c:32:e8:20:dd:3c:48:55:b0:
45:da:07:f7:55:0a:d2:a4:55:be:eb:c7:1c:e9:da:84:80:12:
78:1c:fc:5a:f6:87:81:5a:a6:aa:e3:f9:29:ea:74:44:7b:27:
92:a5:49:15:fd:2b:7e:a1:db:48:e6:c5:74:02:4a:5b:23:f1:
33:2f:fc:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:10:19 2026 by rpki-client