Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/16A29290131E11F1993D8987DAE4EC9C.roa
File: 16A29290131E11F1993D8987DAE4EC9C.roa (raw, json)
Hash identifier: iR5Z+d7aG8a+ly//AlDMGst2j7PqBVPHU1Nvw8m6xFY=
Subject key identifier: F2:42:7D:D1:DB:AF:10:6A:B6:C7:56:8D:D3:05:0A:67:9B:D2:D2:70
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A0D5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/16A29290131E11F1993D8987DAE4EC9C.roa
Signing time: Thu 26 Feb 2026 14:18:57 +0000
ROA not before: Thu 26 Feb 2026 14:18:53 +0000
ROA not after: Thu 09 Apr 2026 14:18:53 +0000
asID: 2914
IP address blocks: 45.192.232.0/24 maxlen: 24
45.192.244.0/24 maxlen: 24
45.201.12.0/22 maxlen: 24
45.202.74.0/24 maxlen: 24
45.204.149.0/24 maxlen: 24
45.204.150.0/24 maxlen: 24
45.204.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106709 (0x1a0d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 26 14:18:53 2026 GMT
Not After : Apr 9 14:18:53 2026 GMT
Subject: CN=69a05651-0615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:b9:f4:de:2a:49:54:f1:f2:a0:9a:9d:6b:22:
90:0a:44:4f:2a:21:9e:57:c8:93:af:d3:87:08:9b:
35:cb:70:9e:5d:c0:e2:2b:3e:fe:23:ab:df:7a:d9:
53:05:c7:b2:ef:ce:3c:6b:12:c9:e7:66:c6:ca:9e:
4b:5b:d9:62:08:74:e2:cc:db:e2:8a:98:9b:46:a0:
2e:19:b5:4f:ca:ec:c2:01:d6:35:47:06:92:78:77:
fd:ea:59:25:41:43:43:a1:3d:ef:d5:98:e0:83:7e:
99:a6:be:69:71:22:0c:ff:15:0f:e7:25:c1:2c:a6:
20:1a:18:36:75:a4:24:1d:32:f7:c0:23:65:6f:2f:
67:50:23:5e:61:a8:10:3b:8c:5b:d7:c2:71:bf:4c:
16:bf:84:33:3e:f1:1c:ff:b7:43:0d:7c:6d:4b:57:
9f:cc:6a:26:2c:b3:4f:1c:7c:c5:24:3b:a1:0a:b9:
2b:79:fe:ef:2e:ba:0e:31:1b:8e:fd:ee:ef:58:85:
d5:3f:4f:96:cc:c2:8c:7d:d7:7d:9b:c3:ee:b5:bf:
23:50:27:5b:c5:5e:7c:45:8a:35:13:ca:18:39:51:
69:8e:f6:85:8d:85:c3:20:59:ea:e4:0e:48:db:9b:
54:0a:78:50:04:d7:eb:ab:a7:85:02:dc:6b:74:6e:
61:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:42:7D:D1:DB:AF:10:6A:B6:C7:56:8D:D3:05:0A:67:9B:D2:D2:70
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/16A29290131E11F1993D8987DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.232.0/24
45.192.244.0/24
45.201.12.0/22
45.202.74.0/24
45.204.149.0-45.204.151.255
Signature Algorithm: sha256WithRSAEncryption
01:6a:ce:27:d2:f8:0f:77:87:7c:82:fa:b3:59:c3:de:f2:dd:
3d:e7:86:60:32:b5:94:af:ef:db:b5:a0:11:3e:1d:f5:9f:3a:
dc:3a:39:46:f4:be:13:42:8d:d8:e5:7d:82:f5:d8:bf:12:af:
7f:90:10:7b:12:b8:e7:7a:98:67:41:fd:4a:7e:c0:0e:77:5f:
10:cc:3b:6a:e6:88:76:e9:e3:67:6d:a4:82:9a:7a:99:5e:52:
6f:53:eb:f6:49:0a:14:70:5b:ae:63:d7:7d:01:8c:27:d2:4f:
81:fa:cb:84:5a:f8:23:b9:e1:84:fb:04:06:c2:b3:02:35:c7:
cc:6a:d6:59:82:64:58:48:04:45:21:7d:2b:27:8a:20:95:62:
07:91:8f:7c:18:dc:6c:38:ec:fa:aa:50:c6:12:61:46:cf:c0:
73:56:fd:80:90:49:6d:71:40:c6:c5:40:01:07:12:03:a1:12:
f5:31:51:d6:8d:e2:18:6c:75:2d:c9:c2:6b:15:40:42:d4:6b:
1e:27:ad:0d:b3:7f:31:ac:79:ca:ab:02:99:a4:08:a3:0c:5b:
41:18:e8:37:89:49:b7:d4:96:56:a6:53:b1:fa:e1:00:99:8b:
d9:56:b7:cd:7d:46:d6:2e:cb:2a:07:a5:5c:74:d1:76:cf:a7:
15:fb:e3:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:04:57 2026 by rpki-client