Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FDB91392112B11F19CDAE099DAE4EC9C.roa
File: FDB91392112B11F19CDAE099DAE4EC9C.roa (raw, json)
Hash identifier: kSzoCxkMgbJr95aFcYRTzj2qNeegR4x7c5S/qIib16A=
Subject key identifier: 3A:E4:B7:31:57:15:56:ED:47:FB:E8:14:EE:7F:EC:C2:B5:C8:34:A1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019FFB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FDB91392112B11F19CDAE099DAE4EC9C.roa
Signing time: Tue 24 Feb 2026 02:53:26 +0000
ROA not before: Tue 24 Feb 2026 02:53:22 +0000
ROA not after: Tue 03 Mar 2026 02:53:22 +0000
asID: 150706
IP address blocks: 45.192.160.0/24 maxlen: 24
45.192.161.0/24 maxlen: 24
45.192.162.0/24 maxlen: 24
45.192.163.0/24 maxlen: 24
45.192.172.0/24 maxlen: 24
45.192.173.0/24 maxlen: 24
45.192.174.0/24 maxlen: 24
45.192.175.0/24 maxlen: 24
45.192.180.0/24 maxlen: 24
45.192.181.0/24 maxlen: 24
45.192.182.0/24 maxlen: 24
45.192.183.0/24 maxlen: 24
45.192.184.0/24 maxlen: 24
45.192.185.0/24 maxlen: 24
45.192.186.0/24 maxlen: 24
45.192.187.0/24 maxlen: 24
45.192.188.0/24 maxlen: 24
45.192.189.0/24 maxlen: 24
45.192.190.0/24 maxlen: 24
45.192.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 02:53:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106491 (0x19ffb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 24 02:53:22 2026 GMT
Not After : Mar 3 02:53:22 2026 GMT
Subject: CN=699d12a6-0c11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:15:36:9f:0d:2d:72:52:1e:23:5d:3c:78:c3:
91:95:e5:67:46:ae:d0:03:6d:54:91:ab:da:fb:c1:
2d:96:f4:82:2f:35:5f:4f:22:cd:91:bb:e8:33:57:
a5:ca:c7:f9:87:4e:d5:8b:1a:8b:30:35:96:f4:9b:
d4:cd:d1:d3:bc:1d:7a:de:fd:42:f1:df:a6:cd:25:
a3:35:b8:83:80:f9:9b:0b:e1:f4:b7:7f:a9:a3:0d:
39:8b:fa:09:7d:b2:ba:b9:d5:98:7a:3e:cd:4c:a9:
b4:a8:cc:62:83:b6:c6:1a:fa:84:11:7a:e4:bd:d0:
7c:3b:92:f6:50:5b:91:ac:fe:7c:a2:2c:d8:52:77:
5c:17:c0:53:97:80:8a:0d:d6:18:ae:55:10:d3:09:
cc:2d:28:bd:17:58:78:b7:d1:65:e5:ea:72:a0:06:
66:fd:77:d6:7d:f2:37:38:d2:01:8c:96:83:45:28:
33:ef:fe:94:55:64:7c:b6:2a:7f:ee:ae:ca:db:be:
be:91:68:25:7c:44:3c:de:62:49:a7:a7:a6:66:0a:
72:41:85:4f:b4:2d:76:cd:5f:99:35:a6:da:15:48:
44:80:1f:4a:57:4f:ec:67:d6:1a:9d:ae:d7:3c:b3:
fc:dd:36:32:a4:5b:62:1f:e8:f5:0d:d8:30:20:f0:
86:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:E4:B7:31:57:15:56:ED:47:FB:E8:14:EE:7F:EC:C2:B5:C8:34:A1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FDB91392112B11F19CDAE099DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.160.0/22
45.192.172.0/22
45.192.180.0-45.192.191.255
Signature Algorithm: sha256WithRSAEncryption
7a:c3:6b:eb:10:3c:09:3c:29:26:65:d2:16:96:50:55:d2:53:
d7:8b:72:9d:16:d5:ad:38:31:76:23:71:e4:90:5c:48:0f:69:
7e:a2:00:11:be:ab:52:81:d3:71:00:8b:0f:a5:6c:f0:25:0f:
73:c0:33:73:6c:bd:4e:59:fa:aa:1f:44:82:63:cf:a2:7e:a2:
dc:7c:de:72:47:1b:cc:5a:97:87:e5:37:51:17:95:5c:7b:5f:
d0:0c:b6:cb:c6:e4:e1:ef:bd:24:67:e1:1c:b8:45:f4:d2:ea:
5d:fb:80:fc:15:79:f8:05:c3:cb:ef:a6:bc:ce:11:e9:ba:7f:
9a:97:4d:71:93:4e:da:e3:12:e9:6d:9e:5d:c1:44:39:35:d7:
51:c2:35:50:c9:c3:49:66:ab:21:d8:d5:63:70:bd:3a:82:03:
f5:8c:60:c4:ef:c4:65:63:35:13:15:25:52:01:7b:f4:b2:8c:
8c:ec:42:a0:a5:25:a7:97:81:8e:ce:77:80:70:20:22:bd:8b:
8a:f4:d3:3d:17:52:c3:8e:63:72:a8:e7:14:b3:ee:45:8b:28:
a5:f1:be:1f:8d:51:25:19:1e:c7:93:11:b9:05:a8:cd:6e:32:
30:9f:37:46:28:9c:5b:a9:bf:5b:e0:0f:53:a2:96:8e:03:60:
12:85:31:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:38:27 2026 by rpki-client