Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F73288CC27C011F19D4EDE8ADAE4EC9C.roa
File: F73288CC27C011F19D4EDE8ADAE4EC9C.roa (raw, json)
Hash identifier: 1xc9JkNEd3xMe2DoG8e00+l6ioQi51LBl9aOR0c6E8s=
Subject key identifier: C2:CE:16:03:9C:18:B0:3F:19:67:8A:FE:C4:52:45:81:DE:C1:D9:36
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A73A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F73288CC27C011F19D4EDE8ADAE4EC9C.roa
Signing time: Tue 24 Mar 2026 20:35:16 +0000
ROA not before: Tue 24 Mar 2026 20:35:12 +0000
ROA not after: Fri 01 May 2026 20:35:12 +0000
asID: 44559
IP address blocks: 45.192.252.0/24 maxlen: 24
45.195.103.0/24 maxlen: 24
45.195.252.0/24 maxlen: 24
45.195.253.0/24 maxlen: 24
45.196.121.0/24 maxlen: 24
45.196.124.0/24 maxlen: 24
45.196.125.0/24 maxlen: 24
45.196.126.0/24 maxlen: 24
45.196.127.0/24 maxlen: 24
45.196.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108346 (0x1a73a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 24 20:35:12 2026 GMT
Not After : May 1 20:35:12 2026 GMT
Subject: CN=69c2f584-7495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8d:0e:ed:09:bc:42:94:95:62:b6:75:dc:10:
b6:55:82:dd:62:51:d2:68:c0:59:46:e0:f2:3d:b5:
13:3d:47:81:33:03:81:a7:28:b2:6f:ba:b2:13:8f:
24:2d:09:6f:93:71:99:a1:b9:67:2a:73:43:09:70:
ab:ed:13:5c:e8:9c:f8:12:36:23:c1:30:1d:15:8b:
6d:e7:f1:e5:8c:6d:58:9e:c7:11:2e:d4:91:d2:ca:
87:17:52:26:f0:7e:6b:44:a8:55:ff:cd:15:11:45:
04:a2:d3:11:03:28:65:a9:9b:f6:10:d5:62:d6:84:
ec:cc:32:ab:9a:dd:f4:d8:20:d8:7d:70:46:f1:f9:
cb:98:c8:b5:9d:24:4d:bf:58:ea:c1:e2:61:c8:f2:
14:9f:3e:f6:a5:40:c4:2b:9a:8d:bc:57:65:89:22:
73:0c:03:12:6d:b5:1b:4f:92:ea:bb:7b:83:6c:d2:
7f:b4:8c:92:5b:90:08:11:01:3f:0c:41:2b:5a:91:
28:26:8c:18:de:66:92:ab:b7:21:b2:f0:17:91:d6:
a8:14:35:c9:c9:3d:59:68:5b:76:4e:54:11:a5:79:
22:6a:c2:bd:1f:3f:b5:4f:e3:c9:02:92:49:82:09:
a0:5a:9f:9a:96:c1:11:48:fa:99:42:79:cc:83:53:
13:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:CE:16:03:9C:18:B0:3F:19:67:8A:FE:C4:52:45:81:DE:C1:D9:36
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F73288CC27C011F19D4EDE8ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.252.0/24
45.195.103.0/24
45.195.252.0/23
45.196.121.0/24
45.196.124.0/22
45.196.139.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:cb:93:06:be:c3:b1:d4:25:fc:cd:86:85:b1:ef:be:42:82:
de:ef:41:92:48:04:28:97:ec:fb:26:8f:69:62:39:94:73:0c:
aa:84:bc:72:ef:bf:68:08:39:c3:e3:9a:1e:b5:b3:7f:1e:00:
cb:e2:4f:b2:b5:ee:a7:00:2b:2e:cd:37:35:16:30:47:3f:a0:
6e:31:e5:03:4e:54:a8:39:b4:8a:a6:6a:a8:27:cf:b8:e4:59:
ee:f9:4a:d6:61:05:47:64:ab:8f:9d:ca:65:2a:ce:42:4f:89:
bd:c4:96:92:da:d5:c6:e9:16:28:90:61:0f:0e:96:2b:f5:c5:
49:f0:1f:49:f9:af:73:81:31:e7:a2:a8:39:b4:95:01:5d:c9:
5d:14:fd:de:14:55:b6:35:4b:41:f4:87:c1:b5:73:0e:7b:a9:
0b:ea:53:ad:c0:18:14:85:36:8e:cd:c0:24:b2:fa:e0:59:16:
7d:c7:b4:1c:29:57:79:0c:3d:b3:2e:03:e3:94:5a:81:6e:5a:
45:d0:d1:ce:bf:66:68:b8:b4:24:16:91:14:b1:dc:de:93:28:
bd:5d:39:f7:c7:e0:6d:f0:55:da:7b:7e:61:f9:4d:f2:db:4c:
78:3e:66:8b:55:71:9e:58:c7:13:b0:25:64:6b:4a:3e:9e:5b:
3a:6a:9f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:10:42 2026 by rpki-client