Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B0072C740A9B11F195B907BADAE4EC9C.roa
File: B0072C740A9B11F195B907BADAE4EC9C.roa (raw, json)
Hash identifier: PGysDrGBiolwiEVkBeDevrZo9lXkytZbU/ZgUg+a8Z4=
Subject key identifier: CA:E5:28:9C:61:FE:2F:68:E4:D2:BC:01:5B:AA:62:71:B5:46:80:9D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019DF7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B0072C740A9B11F195B907BADAE4EC9C.roa
Signing time: Sun 15 Feb 2026 18:25:22 +0000
ROA not before: Sun 15 Feb 2026 18:25:15 +0000
ROA not after: Mon 02 Mar 2026 18:25:15 +0000
asID: 395793
IP address blocks: 45.192.13.0/24 maxlen: 24
45.192.14.0/24 maxlen: 24
45.192.15.0/24 maxlen: 24
45.192.16.0/24 maxlen: 24
45.198.226.0/24 maxlen: 24
45.207.138.0/23 maxlen: 24
45.207.140.0/23 maxlen: 24
45.207.142.0/23 maxlen: 24
45.207.144.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 02 Mar 2026 18:25:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105975 (0x19df7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 15 18:25:15 2026 GMT
Not After : Mar 2 18:25:15 2026 GMT
Subject: CN=69920f92-1e81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0d:a0:96:3e:fe:61:21:3e:9f:f8:2c:9b:f0:
d4:68:44:3d:22:fb:15:92:da:59:75:7e:3e:54:bc:
5c:c2:38:ca:f8:3c:fe:19:39:1e:7a:3e:de:ba:ee:
5c:92:35:35:83:db:78:c7:4c:16:c1:72:1c:49:59:
15:aa:ab:67:03:0a:1d:bf:c7:c5:33:db:9e:80:11:
2f:28:f4:70:a2:98:49:f0:d3:8f:bb:ce:00:e8:5d:
8c:89:5d:bb:41:e5:63:fe:b2:34:ae:6e:0c:b8:6a:
05:44:90:aa:3a:7b:ed:9c:0d:fd:92:22:5d:26:89:
87:34:84:50:d4:13:3c:91:3f:d9:5a:35:2d:bc:ed:
09:dc:09:6f:5a:2a:1e:d5:89:92:eb:1d:ff:6e:c2:
d5:35:f0:f8:ff:9e:7c:d7:ac:47:d9:b5:97:04:45:
79:49:fb:96:ac:51:6c:fa:a4:50:f0:3a:ab:52:88:
75:0c:99:d1:c7:3c:8b:f0:d1:1d:f9:f6:fb:2e:94:
a9:2e:50:13:f9:55:24:08:cf:b8:32:be:d6:78:71:
2a:a3:45:7f:0c:3d:c3:de:5d:c9:f3:8a:22:ac:b7:
52:70:93:f2:05:9c:52:92:d0:d1:d1:06:20:8e:0e:
65:35:0b:d9:a7:0a:a8:c6:e3:5d:db:07:2e:4f:4b:
c2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:E5:28:9C:61:FE:2F:68:E4:D2:BC:01:5B:AA:62:71:B5:46:80:9D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B0072C740A9B11F195B907BADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.13.0-45.192.16.255
45.198.226.0/24
45.207.138.0-45.207.147.255
Signature Algorithm: sha256WithRSAEncryption
74:70:db:b6:14:79:89:d8:7d:e0:f3:98:8d:c6:72:ed:53:69:
a3:94:98:ab:fc:f2:dd:83:fc:f9:73:78:b7:fb:7d:60:00:e9:
eb:92:34:c1:7d:8c:2c:0a:ca:b1:6b:f0:03:cf:b1:e0:70:f7:
33:6f:d4:3d:40:c2:53:67:40:f7:fe:6f:bb:a7:e2:19:57:05:
2f:fb:8e:86:e0:0f:ce:4b:76:f5:95:b1:ad:2b:b4:4d:cc:ae:
c1:77:a9:31:0a:2a:8c:05:2c:da:71:4c:21:65:9d:1a:af:de:
c9:9d:2c:9c:0e:ff:92:e4:da:9c:35:45:39:95:2d:7b:62:be:
22:61:ad:08:8f:83:dd:6a:5b:48:07:e0:ea:af:90:15:0a:ff:
8c:8c:1f:65:d9:34:a3:61:2b:2d:de:85:67:81:da:0d:37:c1:
e8:dd:76:64:93:82:1e:2e:33:2b:28:c2:d5:60:8f:62:96:69:
be:6b:db:0d:77:7b:4c:23:9c:e7:a8:d0:81:02:95:1f:62:09:
06:00:62:36:0c:94:04:67:4d:fe:b4:ff:97:14:02:d7:61:aa:
46:72:a6:d2:eb:6e:21:f8:47:03:48:8a:99:ec:39:24:83:04:
96:ff:90:c5:13:da:00:f0:9e:a5:b5:f1:c2:06:de:02:d8:94:
b7:a5:45:83
-----BEGIN CERTIFICATE-----
MIIFnTCCBIWgAwIBAgIDAZ33MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMjE1MTgyNTE1WhcNMjYwMzAyMTgyNTE1WjAYMRYw
FAYDVQQDEw02OTkyMGY5Mi0xZTgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzA2glj7+YSE+n/gsm/DUaEQ9IvsVktpZdX4+VLxcwjjK+Dz+GTkeej7e
uu5ckjU1g9t4x0wWwXIcSVkVqqtnAwodv8fFM9uegBEvKPRwophJ8NOPu84A6F2M
iV27QeVj/rI0rm4MuGoFRJCqOnvtnA39kiJdJomHNIRQ1BM8kT/ZWjUtvO0J3Alv
Wioe1YmS6x3/bsLVNfD4/55816xH2bWXBEV5SfuWrFFs+qRQ8DqrUoh1DJnRxzyL
8NEd+fb7LpSpLlAT+VUkCM+4Mr7WeHEqo0V/DD3D3l3J84oirLdScJPyBZxSktDR
0QYgjg5lNQvZpwqoxuNd2wcuT0vCEwIDAQABo4ICvjCCArowHQYDVR0OBBYEFMrl
KJxh/i9o5NK8AVuqYnG1RoCdMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CMDA3MkM3NDBBOUIxMUYxOTVCOTA3QkFEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiMAwDBAAtwA0DBAAtwBADBAAtxuIw
DAMEAS3PigMEAi3PkDANBgkqhkiG9w0BAQsFAAOCAQEAdHDbthR5idh94POYjcZy
7VNpo5SYq/zy3YP8+XN4t/t9YADp65I0wX2MLArKsWvwA8+x4HD3M2/UPUDCU2dA
9/5vu6fiGVcFL/uOhuAPzkt29ZWxrSu0TcyuwXepMQoqjAUs2nFMIWWdGq/eyZ0s
nA7/kuTanDVFOZUte2K+ImGtCI+D3WpbSAfg6q+QFQr/jIwfZdk0o2ErLd6FZ4Ha
DTfB6N12ZJOCHi4zKyjC1WCPYpZpvmvbDXd7TCOc56jQgQKVH2IJBgBiNgyUBGdN
/rT/lxQC12GqRnKm0utuIfhHA0iKmew5JIMElv+QxRPaAPCepbXxwgbeAtiUt6VF
gw==
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:50:28 2026 by rpki-client