Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/292C775203FE11F19484B8A1DAE4EC9C.roa
File: 292C775203FE11F19484B8A1DAE4EC9C.roa (raw, json)
Hash identifier: Fdo9W+a+rCUaGP0hFZEwoku7g+35IrjN9BotJBGpPTQ=
Subject key identifier: 23:7C:96:09:91:E1:32:18:72:B5:7F:3B:E5:50:79:EB:A0:00:AC:0C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019C1B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/292C775203FE11F19484B8A1DAE4EC9C.roa
Signing time: Sat 07 Feb 2026 08:22:38 +0000
ROA not before: Sat 07 Feb 2026 08:22:33 +0000
ROA not after: Mon 16 Mar 2026 08:22:33 +0000
asID: 137899
IP address blocks: 45.192.96.0/20 maxlen: 24
45.192.96.0/21 maxlen: 24
45.192.96.0/22 maxlen: 24
45.192.100.0/22 maxlen: 24
45.192.104.0/21 maxlen: 24
45.192.104.0/22 maxlen: 24
45.192.108.0/22 maxlen: 24
45.207.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105499 (0x19c1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 7 08:22:33 2026 GMT
Not After : Mar 16 08:22:33 2026 GMT
Subject: CN=6986f64d-2b1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f6:be:6c:21:7f:a8:e0:c3:53:86:9b:32:47:
57:cd:87:67:95:4d:42:d8:f6:a5:ca:da:e0:a2:cd:
16:bc:aa:1f:f2:47:47:87:d0:bc:8b:ae:82:8a:2e:
41:06:34:0e:63:f4:25:cd:3c:7c:ef:8f:c1:4f:a3:
c8:3d:3d:d6:9f:2e:2a:85:ba:bf:16:6c:c9:ce:c1:
0c:69:88:ee:65:be:ca:fe:1b:f4:72:bc:c4:59:3d:
a2:44:08:5b:26:89:0a:67:38:a7:5f:b6:ed:58:63:
5f:aa:0a:56:a0:ae:86:8a:5c:fd:dc:68:3b:ce:6a:
8b:02:4b:6f:be:da:42:51:26:d8:05:05:c8:d2:5c:
73:b0:b4:46:5f:1d:b3:5f:34:86:28:a7:09:cf:b2:
87:cf:1f:32:1f:4f:b3:e3:4f:63:c4:c0:3d:89:92:
4c:ab:93:3d:c9:97:59:36:0a:1d:fe:f1:d9:ac:e9:
fd:9e:98:f9:d0:29:18:45:5b:bc:d9:38:7d:66:85:
3e:f4:ef:d7:90:d1:6a:d7:9c:e9:24:72:86:05:10:
4f:69:61:7d:98:83:23:5a:39:26:39:0d:4f:9c:66:
3c:95:80:02:8c:37:8a:ef:5e:64:df:7c:e3:81:1d:
00:58:9b:a7:5b:50:d4:ca:94:5e:64:12:2e:5a:20:
e7:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:7C:96:09:91:E1:32:18:72:B5:7F:3B:E5:50:79:EB:A0:00:AC:0C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/292C775203FE11F19484B8A1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.96.0/20
45.207.192.0/19
Signature Algorithm: sha256WithRSAEncryption
77:14:76:3b:8e:0d:90:e6:f7:3d:39:bc:6f:b2:16:37:46:18:
1b:58:40:80:34:a8:a0:e4:14:7f:9f:6c:28:a0:8d:ba:c8:7e:
fb:20:fe:86:60:e1:59:f6:b4:a6:b2:97:43:13:c8:ce:ef:a0:
43:82:bd:ba:5e:70:d3:3f:ba:63:97:bc:17:84:6e:d1:27:46:
ac:ad:ae:d2:a2:87:b7:ae:c8:58:5b:74:d5:6b:19:d2:23:5e:
b3:fc:23:b6:78:78:05:52:5d:40:f0:bf:8f:e1:e3:ee:03:53:
b0:1d:06:20:01:b8:2a:e2:03:84:85:5a:1a:13:3a:da:3a:59:
ba:dd:35:b7:a9:88:ac:cc:e4:a8:92:ee:93:8f:a9:19:f7:15:
42:37:57:53:8e:bc:7b:ee:97:cb:df:56:f0:d8:40:c0:21:ce:
10:85:03:42:a9:5f:be:d7:0d:0c:6a:39:c2:63:b2:bc:95:9d:
49:bc:25:5d:aa:aa:07:ee:c2:40:13:b2:01:fa:ea:fe:e1:71:
75:48:a0:fd:22:19:93:1f:5b:37:bd:19:ef:45:d0:94:4a:de:
9e:73:19:11:e4:8e:1e:4a:6e:d7:9e:26:39:bf:16:38:6f:32:
cf:2a:23:a4:10:35:0a:d7:0a:c2:79:03:61:1e:a0:93:4e:32:
26:db:de:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:45:57 2026 by rpki-client