Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D6F886BC0EFF11F1B70B7EC9DAE4EC9C.roa
File: D6F886BC0EFF11F1B70B7EC9DAE4EC9C.roa (raw, json)
Hash identifier: vh3qkizESRrqSJwhEr9r2GvOkCTEkh0Sq9RQqqre+OA=
Subject key identifier: A3:BC:CD:52:F1:71:69:25:90:3B:1E:D6:CC:CA:FF:E8:03:E9:80:E9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019F30
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D6F886BC0EFF11F1B70B7EC9DAE4EC9C.roa
Signing time: Sat 21 Feb 2026 08:32:21 +0000
ROA not before: Sat 21 Feb 2026 08:32:17 +0000
ROA not after: Sat 28 Mar 2026 08:32:17 +0000
asID: 202656
IP address blocks: 45.195.160.0/24 maxlen: 24
45.195.166.0/24 maxlen: 24
45.195.169.0/24 maxlen: 24
45.195.171.0/24 maxlen: 24
45.195.172.0/24 maxlen: 24
45.195.173.0/24 maxlen: 24
45.195.178.0/24 maxlen: 24
45.195.180.0/24 maxlen: 24
45.195.182.0/24 maxlen: 24
45.195.183.0/24 maxlen: 24
45.195.184.0/24 maxlen: 24
45.195.185.0/24 maxlen: 24
45.195.187.0/24 maxlen: 24
45.195.188.0/24 maxlen: 24
45.195.191.0/24 maxlen: 24
45.199.201.0/24 maxlen: 24
45.199.202.0/24 maxlen: 24
45.199.203.0/24 maxlen: 24
45.199.204.0/24 maxlen: 24
45.199.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106288 (0x19f30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 21 08:32:17 2026 GMT
Not After : Mar 28 08:32:17 2026 GMT
Subject: CN=69996d95-97d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:66:a9:b2:aa:7b:94:f0:17:b2:91:e6:3a:11:
c5:7c:71:90:31:f9:a0:4f:6e:0c:71:1a:52:28:49:
21:af:cb:be:f6:63:47:cf:93:ee:60:56:f4:d5:b5:
f0:a5:2f:a3:23:1b:c8:f4:f9:80:20:6c:a4:a0:f2:
94:a2:f3:6d:66:79:84:c6:e1:68:9d:78:5b:e2:ed:
0a:9f:1f:f6:38:cf:9a:06:9d:8a:27:09:00:8f:15:
29:1b:3c:aa:a5:58:5f:bc:36:97:15:1d:96:17:6c:
4f:11:bd:d4:fc:0c:ea:e8:d8:0b:c1:97:0c:2b:c2:
8a:17:14:9d:04:01:71:89:de:59:19:f8:27:a0:de:
9e:4f:eb:36:57:c1:74:8c:38:87:33:6f:6a:1c:08:
da:ec:31:94:65:27:f9:34:33:92:cf:f1:fe:24:d2:
b3:ae:94:24:a1:9a:c8:38:4c:a5:e6:61:20:b7:8b:
2a:b9:13:0d:74:d6:76:06:4f:c3:c4:b8:4e:d0:7f:
15:a4:77:22:2d:5a:bc:11:92:7c:a0:b3:c9:b2:37:
1a:0e:c6:f0:71:b2:8a:74:09:3a:1c:9b:99:22:2b:
d9:a4:3a:ee:60:75:80:51:78:b1:9b:c9:6e:ae:aa:
20:61:0c:ee:5a:f6:74:62:eb:92:9d:21:0b:96:3e:
5d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:BC:CD:52:F1:71:69:25:90:3B:1E:D6:CC:CA:FF:E8:03:E9:80:E9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D6F886BC0EFF11F1B70B7EC9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.160.0/24
45.195.166.0/24
45.195.169.0/24
45.195.171.0-45.195.173.255
45.195.178.0/24
45.195.180.0/24
45.195.182.0-45.195.185.255
45.195.187.0-45.195.188.255
45.195.191.0/24
45.199.201.0-45.199.205.255
Signature Algorithm: sha256WithRSAEncryption
2c:9f:40:a8:23:10:be:a1:3e:b5:34:d0:2d:c6:1b:4a:f1:d5:
30:d9:45:b1:5d:9e:b1:1f:19:43:d1:68:97:d5:30:49:ff:21:
d9:6d:cc:ca:cc:5d:f3:0a:00:46:08:03:50:fa:fd:8f:70:f3:
0e:bf:ae:d8:5e:ca:0d:55:5b:cb:89:85:2a:98:d0:c3:ba:7e:
ba:c7:8f:0c:77:80:88:d6:2c:aa:5f:5a:3b:af:20:e4:c7:69:
10:35:29:12:55:02:9f:46:c5:0f:51:fe:35:26:8e:84:37:38:
90:81:18:48:94:8e:a0:be:4a:b9:de:3f:f7:ac:b4:02:f1:10:
6c:08:84:bc:67:cb:64:15:f1:54:0d:66:bb:10:26:21:b7:44:
db:45:9b:c7:1c:2e:56:ca:a3:0b:5b:df:31:78:3e:c7:b9:66:
68:74:88:b4:cd:aa:f2:74:c2:a0:7d:69:10:a4:0a:e8:75:20:
58:34:5a:18:a4:2b:52:c6:6a:64:8f:22:9a:21:ca:a9:25:df:
76:d2:78:1a:1a:c4:5c:d6:fe:dd:68:2e:6a:ef:ee:24:48:d8:
37:e7:4d:88:7d:4d:59:4b:3a:ad:a3:1e:da:4c:a3:2b:28:09:
d4:3c:c8:2e:5d:ee:e4:e9:e3:76:1a:ee:50:19:c3:15:d3:93:
1d:0b:97:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:18:44 2026 by rpki-client