Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/89C8908C341911F192E7D1BBCE1D38B0.roa
File: 89C8908C341911F192E7D1BBCE1D38B0.roa (raw, json)
Hash identifier: GByuhWTdknuRgeBlIMIugogopz2De9dx32srA1ikCP4=
Subject key identifier: D0:60:20:88:B8:95:55:C2:A0:56:00:5A:A8:A0:D7:DE:8A:1B:41:8F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AB61
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/89C8908C341911F192E7D1BBCE1D38B0.roa
Signing time: Thu 09 Apr 2026 13:39:32 +0000
ROA not before: Thu 09 Apr 2026 13:39:27 +0000
ROA not after: Tue 07 Jul 2026 13:39:27 +0000
asID: 328608
IP address blocks: 45.205.118.0/24 maxlen: 24
45.205.119.0/24 maxlen: 24
45.205.120.0/24 maxlen: 24
45.205.121.0/24 maxlen: 24
45.205.122.0/24 maxlen: 24
45.205.123.0/24 maxlen: 24
45.205.124.0/24 maxlen: 24
45.205.125.0/24 maxlen: 24
45.205.126.0/24 maxlen: 24
45.205.127.0/24 maxlen: 24
45.205.128.0/24 maxlen: 24
45.205.131.0/24 maxlen: 24
45.205.133.0/24 maxlen: 24
45.205.134.0/24 maxlen: 24
45.205.135.0/24 maxlen: 24
45.205.136.0/24 maxlen: 24
45.205.137.0/24 maxlen: 24
45.205.138.0/24 maxlen: 24
45.205.139.0/24 maxlen: 24
45.205.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109409 (0x1ab61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 9 13:39:27 2026 GMT
Not After : Jul 7 13:39:27 2026 GMT
Subject: CN=69d7ac14-d516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:24:af:cd:c1:5b:e4:d7:57:46:25:87:3d:a4:
a3:6f:5e:9e:ba:8a:0c:44:7d:64:fa:08:bd:4c:4f:
b4:5e:f8:a4:3b:7c:7c:07:61:7a:57:c1:e8:14:8e:
b9:4a:31:f4:7a:1b:e9:fc:87:7b:1a:26:e7:87:91:
f7:fe:3a:b9:2c:b7:ed:5f:d7:31:65:72:00:21:d0:
10:b7:6f:e0:28:ee:7d:84:04:e1:55:f7:88:e7:cb:
a5:cb:7c:c9:3e:16:61:ca:17:df:22:ea:50:7d:7a:
98:40:0a:24:ac:a6:b8:71:6a:96:f0:a0:a5:2e:1c:
00:96:92:76:89:a0:d7:a0:c3:61:1c:de:b4:fd:94:
7f:70:18:30:a3:47:b9:9d:1f:7b:df:27:08:22:74:
c3:d6:76:83:14:bc:3e:3b:cb:6f:35:5a:a5:d0:c3:
cf:62:55:a0:cd:be:71:84:2e:4c:85:0a:eb:bf:e2:
06:d6:9c:b9:de:d4:c1:86:fc:44:c3:ae:33:39:12:
68:50:ab:ca:bd:03:e7:70:94:f5:14:9c:c1:64:ae:
fa:01:ff:9e:b2:7a:b7:f0:cd:eb:fb:2d:b4:02:e4:
14:78:f4:10:80:a7:67:4b:0a:bf:99:3e:17:d0:45:
2c:7a:ba:0c:8e:73:7b:89:36:47:0e:d9:b3:22:b4:
a9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:60:20:88:B8:95:55:C2:A0:56:00:5A:A8:A0:D7:DE:8A:1B:41:8F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/89C8908C341911F192E7D1BBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.118.0-45.205.128.255
45.205.131.0/24
45.205.133.0-45.205.140.255
Signature Algorithm: sha256WithRSAEncryption
b5:c6:02:ab:ca:02:4c:69:2e:10:64:44:4d:ac:98:2e:91:80:
d4:9e:f3:a8:4d:9e:ed:6c:51:a8:bd:a3:4d:88:08:68:69:f8:
33:77:a0:80:3f:85:ed:0b:e5:60:72:0e:21:23:05:bb:39:48:
9d:72:3b:ed:42:bb:fa:f4:c3:53:89:57:38:c8:5b:8c:40:68:
9a:c3:17:d7:59:ef:eb:cb:a9:4b:32:01:e3:09:13:6b:8c:14:
7d:04:6f:33:31:71:62:68:2f:70:cc:3a:07:9d:0f:60:c9:f4:
79:e4:3d:df:a7:ae:bd:c0:0f:19:90:c3:17:6f:6b:20:ae:7f:
16:54:fa:f2:9b:0d:f2:90:14:de:1d:de:96:85:01:60:bb:d0:
e4:e0:df:e4:31:76:04:4a:9b:65:14:95:fc:9c:46:df:24:ce:
67:8a:0f:47:e1:97:6b:f2:95:75:20:0a:bd:04:d6:92:2d:37:
eb:38:cc:f5:86:31:57:e5:32:6c:e3:55:3e:41:08:8c:74:25:
53:d0:ca:e9:38:1a:90:00:ac:c7:33:ed:fe:0b:c7:99:12:fe:
20:97:41:ea:af:58:7e:31:39:99:70:79:42:a6:b5:8c:0c:58:
6d:01:50:9c:2d:e5:8b:8c:e4:14:94:3f:1a:b4:d2:ea:1c:ba:
f2:54:4a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:58:50 2026 by rpki-client