Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E5A833FA0F0011F1B72A49D2DAE4EC9C.roa
File: E5A833FA0F0011F1B72A49D2DAE4EC9C.roa (raw, json)
Hash identifier: FlyQfhvBFwfmn5/FRqG7HICfKBQe8+aYFqOf0LCYPAI=
Subject key identifier: 3B:C8:32:CF:40:1D:04:82:95:67:A0:02:2D:DC:C7:71:5C:EC:F0:C3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019F32
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E5A833FA0F0011F1B72A49D2DAE4EC9C.roa
Signing time: Sat 21 Feb 2026 08:39:55 +0000
ROA not before: Sat 21 Feb 2026 08:39:51 +0000
ROA not after: Sat 28 Mar 2026 08:39:51 +0000
asID: 202656
IP address blocks: 45.199.206.0/24 maxlen: 24
45.199.221.0/24 maxlen: 24
45.199.222.0/24 maxlen: 24
45.199.223.0/24 maxlen: 24
45.199.224.0/24 maxlen: 24
45.199.225.0/24 maxlen: 24
45.199.226.0/24 maxlen: 24
45.199.227.0/24 maxlen: 24
45.199.228.0/24 maxlen: 24
45.199.229.0/24 maxlen: 24
45.199.230.0/24 maxlen: 24
45.199.241.0/24 maxlen: 24
45.199.242.0/24 maxlen: 24
45.199.243.0/24 maxlen: 24
45.199.244.0/24 maxlen: 24
45.199.245.0/24 maxlen: 24
45.199.249.0/24 maxlen: 24
45.199.250.0/24 maxlen: 24
45.199.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106290 (0x19f32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 21 08:39:51 2026 GMT
Not After : Mar 28 08:39:51 2026 GMT
Subject: CN=69996f5b-dc0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3b:99:79:40:0c:ce:36:0a:30:87:f4:c4:df:
94:51:57:c2:a2:99:a7:8e:8b:a0:93:90:3d:f3:d0:
f9:9b:f4:b2:7f:f0:99:2e:73:28:07:63:ca:6e:73:
2b:e6:33:a0:37:0c:5d:4b:65:0d:16:43:64:b3:00:
34:f5:58:b1:07:3f:98:a6:60:43:ca:69:17:3d:3f:
3f:a7:41:9c:72:f6:1b:8a:13:ae:50:df:0b:a7:b7:
4f:ac:dc:52:07:1e:cb:ac:69:a2:28:50:29:d8:ac:
67:0c:1b:59:74:ca:9a:37:28:a0:16:ed:bd:4d:55:
6e:6d:86:14:f9:c0:31:22:f0:70:02:30:78:d5:71:
d8:45:ab:3a:2a:fc:9b:43:15:a6:1a:24:14:ed:6c:
ea:67:69:12:b1:18:97:85:54:9a:2e:61:ce:07:4d:
3a:96:00:f2:f7:c0:2a:ca:da:70:13:41:e8:e3:21:
81:e2:26:43:95:b7:65:3b:56:83:7b:64:50:0d:4a:
9e:e5:f7:3b:77:ca:98:9e:e0:4c:c5:dc:18:50:9b:
2a:2e:0f:20:41:53:3d:bf:67:39:9b:1e:32:92:8a:
40:93:0a:09:c7:28:95:b3:55:b6:de:c7:aa:af:97:
d6:9f:dd:ad:d2:36:6a:7e:0e:4c:c3:59:3f:4a:85:
d0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:C8:32:CF:40:1D:04:82:95:67:A0:02:2D:DC:C7:71:5C:EC:F0:C3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E5A833FA0F0011F1B72A49D2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.206.0/24
45.199.221.0-45.199.230.255
45.199.241.0-45.199.245.255
45.199.249.0-45.199.250.255
45.199.252.0/24
Signature Algorithm: sha256WithRSAEncryption
68:d2:5c:c9:5d:b1:33:ce:17:3f:f3:81:30:fb:32:0d:a5:fe:
4e:09:ea:28:eb:86:8f:cb:e5:c4:66:40:60:32:c1:31:29:9f:
fa:56:f1:cd:2e:77:1a:29:89:28:73:84:dd:43:9f:88:33:a5:
9d:96:4c:f4:52:52:b3:f8:9f:33:8c:97:f2:7a:b1:29:f4:64:
7f:c4:d1:43:4c:dc:68:45:05:35:be:d2:f3:39:c1:4f:42:db:
34:c8:79:df:31:58:5f:42:38:a0:30:d6:d3:90:b0:42:c0:13:
70:cf:4b:2e:24:45:59:91:e8:af:b6:0e:64:15:9b:46:35:5d:
d6:6a:5b:b2:32:a5:2a:57:1b:29:6a:e4:2c:b6:0d:d0:4b:93:
fc:3a:d9:a7:f0:31:56:26:8f:fb:3e:92:45:6f:9c:cb:74:be:
80:1b:e5:2c:d2:1f:57:58:00:84:93:a9:83:f4:06:7b:1c:b9:
3e:cc:ad:37:0b:fe:39:ec:87:3b:5c:01:20:75:b8:41:47:90:
89:03:26:f8:b7:f8:1f:a3:f0:c4:ea:ee:3f:42:94:02:49:15:
40:cc:3c:4a:ba:a9:29:b0:42:4e:a5:f3:d2:6e:6d:43:94:72:
bf:34:30:f4:88:4a:8b:6a:b6:74:5d:26:ff:54:78:ee:41:c5:
93:53:7d:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:19:34 2026 by rpki-client