Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0F9BAB56269E11F18D3655F6DAE4EC9C.roa
File: 0F9BAB56269E11F18D3655F6DAE4EC9C.roa (raw, json)
Hash identifier: vW4C508vgQHeWOT5VvpDamEY7ewMr57+eRMYzQqLiYY=
Subject key identifier: 85:E6:DD:DA:DC:5F:07:0F:FE:FB:AB:15:07:C9:25:03:AF:0E:61:34
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A6E8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0F9BAB56269E11F18D3655F6DAE4EC9C.roa
Signing time: Mon 23 Mar 2026 09:52:55 +0000
ROA not before: Mon 23 Mar 2026 09:52:45 +0000
ROA not after: Sun 03 May 2026 09:52:45 +0000
asID: 214769
IP address blocks: 45.202.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108264 (0x1a6e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 23 09:52:45 2026 GMT
Not After : May 3 09:52:45 2026 GMT
Subject: CN=69c10d77-0b92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:59:08:e9:79:9a:e8:5a:7c:8b:bf:f5:35:37:
3e:60:af:ef:15:b5:25:4a:ce:9e:32:8d:0e:c7:16:
ac:a0:fa:3a:a8:48:7e:42:d9:d7:a1:75:68:f3:3a:
2b:e6:fc:73:46:c3:81:e2:6e:61:20:8d:b9:7e:51:
46:9f:51:08:81:22:b7:0c:72:82:3a:f9:d3:f5:26:
e7:be:df:3e:7c:f7:1a:66:9b:a2:e8:33:44:4e:44:
7a:35:bd:3b:23:6b:26:4d:60:82:24:2b:e0:68:a1:
b2:46:92:89:2d:2f:40:73:aa:04:c8:c1:ec:9d:e2:
3f:de:8a:cb:15:be:be:5e:a4:71:a4:7d:e4:af:5e:
e9:8b:2d:0e:fd:d7:d0:ae:5b:ac:98:ad:8c:21:62:
2b:bc:ef:16:54:08:6a:2e:8e:94:1e:04:3d:a4:66:
c5:29:bf:ab:e2:08:35:94:45:f1:70:ab:25:e9:3b:
ef:d6:60:50:0c:9b:6a:0c:6b:be:ba:5e:cd:88:42:
45:57:62:52:5f:6e:b0:dd:51:15:2a:e9:82:09:a0:
d9:eb:57:fd:36:74:17:a2:91:56:2c:26:bf:9e:6f:
11:3b:74:9c:ea:6a:4b:d0:6d:77:f8:e5:96:55:d0:
74:f1:aa:89:e3:76:4c:76:fb:04:1a:78:8a:2b:2e:
34:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:E6:DD:DA:DC:5F:07:0F:FE:FB:AB:15:07:C9:25:03:AF:0E:61:34
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0F9BAB56269E11F18D3655F6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.69.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:9d:13:90:dc:a5:13:9c:bf:01:4b:05:b2:5e:b5:51:a6:04:
ad:cf:a2:66:1d:13:d4:5d:ba:2b:a2:06:cb:7d:e7:4e:97:91:
df:30:48:87:1e:83:25:f4:b0:93:27:25:20:bb:67:c4:53:09:
3f:62:f2:28:ed:c6:40:7e:10:c3:73:a8:8b:d1:09:0e:a3:97:
3b:f5:49:b5:3f:eb:27:93:82:20:fa:b4:33:4d:8b:1b:bb:75:
49:26:42:5a:40:b8:8f:1c:3a:4f:3e:04:70:f0:bb:b1:8b:e8:
3e:f2:39:df:72:64:21:87:1e:0c:d0:12:f7:62:33:ba:94:a8:
ac:d6:ea:3a:7d:23:0d:ca:6f:e5:34:78:03:c5:d8:e6:50:33:
fe:0d:2d:d3:ef:ba:7e:dc:28:c3:55:ca:66:4d:d1:ac:38:58:
70:04:e0:bb:f0:82:53:81:74:63:25:9c:92:e0:4c:0d:61:ca:
ea:0e:f9:8f:b4:6b:e0:22:3d:ae:2b:dc:33:ff:90:4f:97:86:
2c:d6:18:2a:54:4f:75:a4:40:d8:9a:52:57:e6:a8:ff:aa:2c:
2f:8c:7e:09:b9:cd:fb:32:3b:82:32:8a:a3:4d:79:b7:fc:44:
40:f6:71:96:fb:85:76:d9:08:ad:f0:2f:e0:ed:4f:80:e8:f9:
81:65:ec:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:10:44 2026 by rpki-client