Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1455FB8E0F0511F19015CBE9DAE4EC9C.roa
File: 1455FB8E0F0511F19015CBE9DAE4EC9C.roa (raw, json)
Hash identifier: oVYV7n7MzWM1c8IVU5MiOvQAsEA2Gk7AbqmpHd+Li7c=
Subject key identifier: 9B:23:C8:12:4C:77:3F:F5:0F:B4:1D:BE:89:C7:59:CA:C6:C7:CE:CB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019F44
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1455FB8E0F0511F19015CBE9DAE4EC9C.roa
Signing time: Sat 21 Feb 2026 09:09:52 +0000
ROA not before: Sat 21 Feb 2026 09:09:47 +0000
ROA not after: Sat 28 Mar 2026 09:09:47 +0000
asID: 62240
IP address blocks: 45.192.42.0/24 maxlen: 24
45.192.43.0/24 maxlen: 24
45.192.44.0/24 maxlen: 24
45.192.45.0/24 maxlen: 24
45.192.46.0/24 maxlen: 24
45.192.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106308 (0x19f44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 21 09:09:47 2026 GMT
Not After : Mar 28 09:09:47 2026 GMT
Subject: CN=6999765f-d376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:34:f1:44:c7:b6:5e:fc:98:6f:d5:7f:f2:33:
1a:97:cf:52:a8:a5:d0:61:de:42:e6:07:6b:d7:60:
a8:92:db:f3:4f:13:81:5b:79:b0:84:e9:1b:52:13:
09:55:12:39:91:ad:7e:f7:14:c3:a6:21:42:09:73:
4e:1a:d4:87:33:af:bb:98:08:a3:21:1c:03:0f:22:
a8:80:d5:60:5c:1f:d6:d7:e3:ef:aa:a7:8f:0e:12:
cc:5c:40:28:c7:95:21:f5:bd:a0:21:77:7f:49:8a:
2d:a2:f6:ef:2c:7a:7a:f7:a9:8c:1b:1a:59:35:a9:
a7:ba:76:b3:e2:66:e9:ee:07:1f:d9:1d:36:30:15:
1c:80:33:24:b1:a2:3d:3f:0a:09:f1:a9:60:a4:4f:
c7:cc:bc:89:fb:41:e5:79:6f:99:7b:19:63:ef:d1:
9c:8f:9e:5e:6d:c2:ae:60:2f:64:fa:25:d7:a2:eb:
ed:4e:2a:9a:eb:79:2f:34:05:f6:c3:be:4e:7b:52:
f0:ea:a4:7c:e4:41:40:22:89:be:48:74:60:bc:91:
ec:2e:c8:33:61:ba:3b:cb:8a:c8:40:14:8b:81:23:
16:5e:48:cf:13:af:64:d1:14:9e:6f:61:e3:92:0a:
35:ae:5d:60:6f:0d:e2:17:e8:56:e8:56:f3:ce:c9:
d9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:23:C8:12:4C:77:3F:F5:0F:B4:1D:BE:89:C7:59:CA:C6:C7:CE:CB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1455FB8E0F0511F19015CBE9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.42.0-45.192.47.255
Signature Algorithm: sha256WithRSAEncryption
b8:cd:2f:83:b7:57:9e:63:47:af:67:e0:91:03:37:1b:38:ad:
88:0d:0a:7c:56:dd:f5:f4:b2:52:65:82:02:77:b3:c1:1e:78:
18:26:9f:d1:b7:ac:c2:56:5a:7e:0f:90:81:f5:0d:a1:b2:cc:
d0:06:53:ff:15:7f:40:cf:11:cd:e3:d1:0f:70:d1:37:5f:a4:
95:da:e2:05:71:03:8b:95:9c:51:5e:b7:43:60:4b:69:6b:39:
bf:58:1f:20:bd:18:7f:da:66:a1:51:da:ec:b2:db:b2:50:42:
63:fb:e7:73:3b:bf:14:ba:b2:89:20:a3:34:cb:c7:1f:ce:f2:
be:98:b6:4d:5a:50:f4:ea:bd:26:02:81:bd:90:30:10:1e:b3:
6a:7e:53:c4:43:cc:1a:36:ca:48:00:c4:d6:1d:10:3c:19:53:
b3:a5:5f:7c:2c:37:83:b3:a0:c9:80:6d:21:09:43:97:4d:67:
6d:0e:ef:e4:4b:d2:96:b5:30:ac:0a:0f:7b:1a:b3:44:83:29:
e2:13:cd:5c:73:dd:8f:b9:11:c9:a2:1c:c2:19:1e:8e:46:16:
00:8c:41:2b:d3:ad:ef:5a:c5:7c:f6:5d:2b:1e:f7:8e:cd:e4:
e7:af:77:9b:95:c9:bd:ca:4b:17:c2:ec:ee:e1:df:65:83:43:
fd:d7:4d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:59:39 2026 by rpki-client