Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6CD9928E159011F18258F289DAE4EC9C.roa
File: 6CD9928E159011F18258F289DAE4EC9C.roa (raw, json)
Hash identifier: GDwJvYUH9UuVAnrtkvWrFdVa6dzinri74RcAlILIdus=
Subject key identifier: 05:79:21:40:9F:78:2A:D8:6C:93:B2:19:DF:B2:36:67:82:AC:54:8C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A196
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6CD9928E159011F18258F289DAE4EC9C.roa
Signing time: Sun 01 Mar 2026 17:02:27 +0000
ROA not before: Sun 01 Mar 2026 17:02:23 +0000
ROA not after: Wed 08 Apr 2026 17:02:23 +0000
asID: 44559
IP address blocks: 45.196.106.0/24 maxlen: 24
45.196.107.0/24 maxlen: 24
45.202.192.0/24 maxlen: 24
45.202.193.0/24 maxlen: 24
45.202.198.0/24 maxlen: 24
45.202.200.0/24 maxlen: 24
45.202.201.0/24 maxlen: 24
45.202.202.0/24 maxlen: 24
45.202.205.0/24 maxlen: 24
45.202.206.0/24 maxlen: 24
45.202.207.0/24 maxlen: 24
45.202.208.0/24 maxlen: 24
45.202.213.0/24 maxlen: 24
45.204.65.0/24 maxlen: 24
45.204.73.0/24 maxlen: 24
45.204.75.0/24 maxlen: 24
45.207.2.0/24 maxlen: 24
45.207.3.0/24 maxlen: 24
45.207.161.0/24 maxlen: 24
45.207.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106902 (0x1a196)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 1 17:02:23 2026 GMT
Not After : Apr 8 17:02:23 2026 GMT
Subject: CN=69a47123-1434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:68:8e:d6:21:12:de:53:ea:b5:9b:34:06:7b:
27:ee:c1:bb:37:08:21:47:a7:52:cc:93:4c:3b:42:
b1:2a:ad:1c:ce:40:ce:c1:b7:b9:96:ad:e2:06:28:
10:56:9c:1d:16:8f:24:2b:3e:3f:79:11:aa:7a:95:
60:b3:52:29:b6:40:53:46:a8:8d:2f:35:22:1b:ee:
68:f8:44:53:c4:d5:c9:98:06:0e:f1:75:15:b3:a4:
e4:64:0e:54:25:44:c9:87:00:62:fd:66:41:a3:69:
80:d7:58:ac:41:46:67:03:79:d3:69:a2:92:d3:1e:
c8:bf:01:1e:c1:6a:42:c3:2f:c7:f0:81:7b:f4:34:
64:f1:cf:60:60:1c:09:31:9d:86:aa:91:ca:7f:3a:
4e:04:1d:62:3f:fa:e2:4c:33:80:0d:10:99:bf:05:
9d:f9:8d:ec:d3:23:d9:f7:02:63:46:7a:9f:4e:ce:
08:03:d2:ec:5e:31:14:46:24:b1:e0:7d:11:c3:32:
b3:65:69:98:b3:4c:a1:44:d8:3f:f7:b3:df:3c:3d:
a4:08:b3:28:c4:aa:9b:8e:7b:30:96:07:62:87:3a:
19:fb:69:a1:f5:54:24:33:8d:29:d0:19:35:38:2b:
5d:df:ef:34:8a:e1:f6:ec:f7:04:bd:d2:0f:66:33:
ee:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:79:21:40:9F:78:2A:D8:6C:93:B2:19:DF:B2:36:67:82:AC:54:8C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6CD9928E159011F18258F289DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.106.0/23
45.202.192.0/23
45.202.198.0/24
45.202.200.0-45.202.202.255
45.202.205.0-45.202.208.255
45.202.213.0/24
45.204.65.0/24
45.204.73.0/24
45.204.75.0/24
45.207.2.0/23
45.207.161.0-45.207.162.255
Signature Algorithm: sha256WithRSAEncryption
81:8e:06:39:67:9c:49:da:ff:7d:c2:7a:26:1a:e6:7d:53:ca:
83:17:ad:cc:56:58:a9:c3:6c:8c:4b:6e:58:e6:27:d7:5d:1d:
26:82:3a:8b:7b:88:1b:3a:d9:d5:45:99:c1:5b:06:19:e5:97:
70:ae:4b:04:b7:2b:ad:6a:ad:f0:d2:cc:14:d4:ba:51:73:84:
74:7e:24:35:cb:ce:e2:0a:81:a4:53:ba:86:b9:67:c1:bc:d0:
fe:74:5d:f9:a0:91:05:c5:f0:41:05:e7:66:89:d9:ec:06:45:
d3:9d:a7:4e:16:ea:9e:3b:25:56:39:51:28:c8:ba:cf:31:80:
4c:34:b9:c0:48:f7:12:65:87:ac:cd:76:cf:24:73:00:d1:a7:
d1:cf:54:95:4e:05:ea:55:10:14:76:81:12:72:c1:ce:6e:8f:
70:c0:e1:08:67:06:3b:7e:07:04:e7:94:d9:71:27:ed:a5:64:
ab:b0:9b:5a:17:cf:2a:98:ab:76:9d:35:ce:38:76:d0:6d:f0:
9a:01:12:46:46:dc:f2:d3:70:37:12:cd:98:7d:8f:f2:85:cc:
c8:6c:a8:19:a2:2b:8b:ec:27:d2:78:1c:e8:3d:d6:28:37:02:
98:4b:31:c9:be:64:e7:8b:70:ec:60:5d:bf:cc:44:1e:34:3b:
e3:30:5b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:21:01 2026 by rpki-client