Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/267D320619DB11F197994BF5DAE4EC9C.roa
File: 267D320619DB11F197994BF5DAE4EC9C.roa (raw, json)
Hash identifier: eixo7IX8JGppiTrlS3gh3ILNQWe0pv68cjLaLlh3x7E=
Subject key identifier: 69:A7:47:77:E4:32:35:3D:D8:40:77:5C:CE:97:7E:6C:87:3B:95:F8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A31C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/267D320619DB11F197994BF5DAE4EC9C.roa
Signing time: Sat 07 Mar 2026 04:07:26 +0000
ROA not before: Sat 07 Mar 2026 04:07:21 +0000
ROA not after: Tue 14 Apr 2026 04:07:21 +0000
asID: 137643
IP address blocks: 45.196.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107292 (0x1a31c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 7 04:07:21 2026 GMT
Not After : Apr 14 04:07:21 2026 GMT
Subject: CN=69aba47e-d0f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0d:f6:fa:8e:eb:be:be:ce:b2:e6:a8:f2:7d:
9e:eb:96:a4:8d:d6:79:94:67:b8:5e:8c:d2:d5:57:
68:75:f0:84:3f:03:8a:92:1e:d8:50:9e:1b:6c:82:
3e:a1:85:99:11:fd:75:6c:41:e8:06:1b:98:ee:48:
75:cd:42:e8:84:15:2a:44:88:18:44:29:8d:86:b0:
51:c5:51:20:e0:fd:c3:19:da:3e:a2:97:13:ca:7b:
49:e5:2c:39:7c:97:36:04:3f:3f:31:21:9a:d1:b2:
44:5f:39:eb:0e:42:6c:fb:ca:48:e7:23:54:05:12:
9e:d5:c3:d5:64:b1:15:14:da:04:4a:3b:2e:c2:ae:
1b:76:0f:f9:ef:c2:28:d1:e8:15:26:73:da:1f:b4:
5e:4a:b9:b0:80:78:b8:56:b7:df:e5:62:99:52:a0:
86:22:5f:b8:d8:97:5d:a1:9d:4e:14:0f:f9:cd:81:
93:5e:c9:d9:db:fc:39:a0:f0:38:37:6d:d8:fb:96:
3a:1d:29:33:e3:52:07:e1:76:ea:d9:5c:2f:9d:19:
57:24:3f:d8:34:64:9b:08:95:30:45:18:53:fc:c1:
91:21:a6:05:af:b6:f3:b6:58:18:77:b8:de:1d:f7:
dc:04:b8:23:c8:c6:7a:83:bb:01:7b:a6:90:1d:5b:
64:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:A7:47:77:E4:32:35:3D:D8:40:77:5C:CE:97:7E:6C:87:3B:95:F8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/267D320619DB11F197994BF5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.196.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:c5:d1:86:36:7e:f9:d4:c4:4a:2e:7e:2a:4e:9c:22:78:53:
fc:8b:19:df:00:3a:2a:c8:e2:7e:81:80:c1:5c:84:96:aa:3d:
e1:75:9e:4a:05:6b:ab:de:32:ec:ef:77:8a:a2:9a:22:ba:78:
d9:f7:ac:6d:64:82:b7:f5:cc:48:d3:61:be:89:3c:35:31:77:
24:cf:9e:83:08:41:7a:3c:68:c4:e6:9f:8b:80:4f:4f:af:3e:
16:8f:b5:9a:34:cf:f5:0b:22:fc:74:7c:98:a6:cf:dd:56:c3:
24:ec:79:6b:01:74:54:43:9b:a7:78:cb:b6:fd:49:06:bc:68:
f5:5f:50:3b:d3:b9:3c:88:a7:b9:e8:98:79:15:7e:7e:1c:66:
9c:ce:66:ad:71:51:9d:4e:af:09:b5:6a:96:31:33:c3:6e:c6:
ed:08:4e:85:77:3f:0f:bb:aa:11:72:97:8a:80:61:d0:d1:c6:
7d:87:59:fd:de:fe:8f:a2:31:70:94:d3:b4:be:7f:f9:65:b4:
eb:ac:1a:1e:6d:ee:32:14:54:e9:08:31:e2:43:ea:e2:53:1d:
39:ee:14:df:77:83:bc:5e:73:f3:dd:ee:f9:16:94:80:9e:a2:
03:81:68:50:e7:b9:b3:a3:38:63:1e:d4:9e:5d:2e:ed:ee:e2:
8e:a9:25:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:10:36 2026 by rpki-client