Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/831DA7F2112A11F1B7862D90DAE4EC9C.roa
File: 831DA7F2112A11F1B7862D90DAE4EC9C.roa (raw, json)
Hash identifier: nrFOtKVB7Xu5hk0B1fO2Jcj2g3szmghHxYsyiiJBkoI=
Subject key identifier: 3A:87:4C:30:FB:E0:FE:D9:8D:3E:C6:79:50:33:8A:E9:92:8C:EC:7E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019FF9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/831DA7F2112A11F1B7862D90DAE4EC9C.roa
Signing time: Tue 24 Feb 2026 02:42:51 +0000
ROA not before: Tue 24 Feb 2026 02:42:47 +0000
ROA not after: Tue 03 Mar 2026 02:42:47 +0000
asID: 149014
IP address blocks: 45.192.160.0/24 maxlen: 24
45.192.161.0/24 maxlen: 24
45.192.162.0/24 maxlen: 24
45.192.163.0/24 maxlen: 24
45.192.172.0/24 maxlen: 24
45.192.173.0/24 maxlen: 24
45.192.174.0/24 maxlen: 24
45.192.175.0/24 maxlen: 24
45.192.180.0/24 maxlen: 24
45.192.181.0/24 maxlen: 24
45.192.182.0/24 maxlen: 24
45.192.183.0/24 maxlen: 24
45.192.184.0/24 maxlen: 24
45.192.185.0/24 maxlen: 24
45.192.186.0/24 maxlen: 24
45.192.187.0/24 maxlen: 24
45.192.188.0/24 maxlen: 24
45.192.189.0/24 maxlen: 24
45.192.190.0/24 maxlen: 24
45.192.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106489 (0x19ff9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 24 02:42:47 2026 GMT
Not After : Mar 3 02:42:47 2026 GMT
Subject: CN=699d102b-9695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:dd:d8:e5:5f:7c:eb:40:c0:00:b2:96:8a:4e:
2e:2e:a5:90:b8:46:00:32:58:fd:08:c0:de:93:6c:
70:95:3b:5a:f1:f1:14:ed:02:37:eb:11:93:2d:03:
63:b8:81:00:35:88:cd:f1:a7:1b:44:db:71:13:42:
74:fa:fe:21:17:8d:91:fb:26:22:c5:a8:52:4f:65:
a1:0a:54:e2:47:b5:8c:da:36:49:29:61:8d:96:ce:
30:34:16:23:57:65:dd:80:4c:a3:5f:2e:e2:23:d5:
43:c1:a2:52:28:26:69:0c:bb:bd:eb:5c:74:d3:0f:
c4:b5:7d:a9:6b:40:25:2e:d3:06:23:f2:bd:74:47:
45:14:5b:33:17:8c:6a:ee:a7:03:77:ef:6f:83:c1:
fc:31:ee:d9:e8:32:ce:3a:db:39:67:24:af:70:46:
de:b1:31:23:73:79:a4:81:0b:d4:72:b9:5f:6a:2a:
c6:0b:45:e1:57:04:5b:af:80:31:a7:c0:2d:12:01:
de:c4:0b:93:c3:04:f4:d0:2c:94:c0:2a:87:c5:f3:
a2:3c:c9:b2:de:94:13:20:c5:2e:12:09:74:a5:e9:
0c:6e:21:0e:4f:2e:7a:34:a7:8d:9c:8f:9b:ba:8d:
3c:5c:9c:da:43:b9:e0:37:59:a6:62:4a:73:e4:18:
6e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:87:4C:30:FB:E0:FE:D9:8D:3E:C6:79:50:33:8A:E9:92:8C:EC:7E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/831DA7F2112A11F1B7862D90DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.160.0/22
45.192.172.0/22
45.192.180.0-45.192.191.255
Signature Algorithm: sha256WithRSAEncryption
54:1d:68:36:ae:f3:4a:9e:73:21:3c:93:d0:e4:3e:52:c2:57:
3f:3b:b9:f0:10:62:df:f7:87:59:1d:bf:90:09:19:56:eb:20:
fc:87:7c:08:00:97:42:48:ff:ac:1e:c0:74:86:4f:9c:3a:4e:
b2:e2:83:c5:8f:8c:cd:38:69:8a:a2:65:55:c3:f4:1b:61:7a:
cd:fd:40:7f:a7:a6:03:8f:ed:5f:31:0f:c4:16:ab:4c:90:43:
27:da:b3:0e:15:a4:ab:6d:e2:7d:76:6a:d5:0b:e7:13:e5:33:
8d:3f:5c:8e:5c:dd:d4:9c:9e:40:c1:6a:6c:36:91:ac:25:68:
8c:c6:7f:b2:51:17:b3:b1:44:1e:4e:db:2b:a6:03:10:9b:8c:
2d:ed:1f:19:30:4f:62:fd:e2:af:ed:ff:80:72:be:02:55:80:
48:a5:c1:85:33:b1:87:64:f7:7b:39:c0:52:93:cc:61:45:10:
93:24:6d:89:c0:fc:92:1a:25:5e:28:87:7a:04:6d:26:9f:d6:
99:61:23:4b:f1:e6:d3:be:d1:c0:40:1e:16:7d:37:71:36:35:
82:8c:3f:9e:90:01:f0:3c:50:c2:ba:a1:93:ed:0d:28:06:5c:
0a:c1:c5:57:91:5d:c3:4a:b6:2f:0b:06:b7:40:6f:35:c8:4b:
ba:a9:d3:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:08:32 2026 by rpki-client