Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0DB668D8187C11F1BA0A6688DAE4EC9C.roa
File: 0DB668D8187C11F1BA0A6688DAE4EC9C.roa (raw, json)
Hash identifier: 3FoYSwFABZhFoYh/mJKgB9RGEO8J3n8LYualAqZMaqI=
Subject key identifier: 36:95:C0:47:52:B7:5D:C3:B5:A3:3F:3E:53:BF:65:5B:83:C3:50:03
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A2A3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0DB668D8187C11F1BA0A6688DAE4EC9C.roa
Signing time: Thu 05 Mar 2026 10:14:11 +0000
ROA not before: Thu 05 Mar 2026 10:14:06 +0000
ROA not after: Wed 22 Apr 2026 10:14:06 +0000
asID: 137899
IP address blocks: 45.192.96.0/20 maxlen: 24
45.192.96.0/21 maxlen: 24
45.192.96.0/22 maxlen: 24
45.192.100.0/22 maxlen: 24
45.192.104.0/21 maxlen: 24
45.192.104.0/22 maxlen: 24
45.192.108.0/22 maxlen: 24
45.205.16.0/20 maxlen: 24
45.207.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107171 (0x1a2a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 5 10:14:06 2026 GMT
Not After : Apr 22 10:14:06 2026 GMT
Subject: CN=69a95773-67f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:74:cd:82:9d:95:2f:5a:53:a3:41:6d:d8:ce:
7e:00:b1:ba:d3:4e:ac:4e:1b:75:1c:68:ad:64:07:
a3:ca:30:5f:2b:43:70:d0:38:e7:2e:73:c4:e7:c1:
96:9d:0b:31:79:a9:b3:55:2b:cb:4b:11:e1:74:72:
0b:f5:d4:88:f1:62:d9:4e:af:b5:d6:2d:de:ea:d1:
5f:95:4a:0c:f3:9e:c0:91:81:1f:7e:96:d0:58:c4:
56:c9:fa:2c:5c:95:53:45:b0:30:08:b5:d2:02:7a:
2d:8f:80:01:38:4b:d8:48:c4:f0:56:35:ff:20:c4:
a2:d0:df:16:d3:e4:8e:6b:42:aa:d5:10:0b:74:5e:
7f:2f:33:c1:2d:58:8b:c1:5a:9d:d3:a2:17:ab:b6:
8d:55:5e:32:48:44:74:cb:bc:fd:b3:18:54:d3:4c:
43:d9:9a:16:4d:7e:f7:02:e6:0f:e9:dc:af:f5:2d:
2b:17:23:a0:14:de:62:93:01:d3:0d:fb:11:16:d3:
52:42:b3:e7:4a:d2:cb:f1:72:70:70:93:86:93:e4:
29:6d:ac:0b:4a:ac:e6:97:3c:a3:78:39:48:6a:99:
28:69:1a:b6:18:33:f2:0c:10:cb:72:5a:89:97:cd:
79:3f:cc:b6:0e:08:6b:00:1f:51:dd:61:82:2b:f0:
51:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:95:C0:47:52:B7:5D:C3:B5:A3:3F:3E:53:BF:65:5B:83:C3:50:03
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0DB668D8187C11F1BA0A6688DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.96.0/20
45.205.16.0/20
45.207.192.0/19
Signature Algorithm: sha256WithRSAEncryption
1b:d2:b5:93:16:91:49:7b:01:9e:a1:24:fc:cc:71:22:da:60:
12:ad:9f:6f:00:e9:d0:03:f5:c6:5c:a3:67:d8:2e:95:cd:5f:
f3:d2:f2:71:28:28:df:0a:14:46:74:e0:d2:60:56:c7:5f:1b:
f5:af:de:96:4d:00:12:5e:2c:5f:09:fd:e8:6d:b8:ee:85:03:
30:62:c5:78:c2:2d:fa:61:92:c1:ca:42:de:63:17:93:fb:dc:
91:30:9c:45:1d:a6:b6:c9:6c:87:9b:01:c2:50:d2:7e:56:dc:
76:3e:7f:82:52:11:46:56:c0:28:25:f7:ec:c7:f4:1f:cb:6e:
9a:3f:a5:99:6b:40:64:1a:1e:6e:04:5a:9f:6d:17:bb:05:d9:
ee:52:33:c2:99:ee:93:e6:59:68:d4:98:6a:e7:a3:e8:7c:16:
36:55:91:3f:f7:17:fd:38:cc:08:f0:77:c6:24:e2:92:2b:11:
45:38:26:42:42:77:b5:5d:2f:01:38:0d:79:59:a4:24:73:36:
4b:2f:3d:b7:1e:bd:36:ed:f0:5b:45:a5:58:27:04:29:9c:d2:
db:20:8c:d9:f1:27:a2:1f:68:5f:1a:6c:36:34:c8:a4:66:c8:
49:8f:44:18:55:f8:8f:cb:01:80:89:39:e1:76:fa:aa:88:dd:
89:7b:2a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:10:49 2026 by rpki-client