Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2E3DCBF41BA711F191B8CD7CDAE4EC9C.roa
File: 2E3DCBF41BA711F191B8CD7CDAE4EC9C.roa (raw, json)
Hash identifier: HoHvDvLEtVxJR6XIg8UxIvx1A6+8E790xfVc4FTSkcI=
Subject key identifier: 60:AD:6E:ED:6D:9A:83:3B:7A:E6:96:29:CF:12:D8:9D:DD:AF:D6:BB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A389
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2E3DCBF41BA711F191B8CD7CDAE4EC9C.roa
Signing time: Mon 09 Mar 2026 11:00:28 +0000
ROA not before: Mon 09 Mar 2026 11:00:23 +0000
ROA not after: Thu 16 Apr 2026 11:00:23 +0000
asID: 43260
IP address blocks: 45.195.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107401 (0x1a389)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 9 11:00:23 2026 GMT
Not After : Apr 16 11:00:23 2026 GMT
Subject: CN=69aea84c-5ed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9e:9f:cc:47:3f:6a:97:ca:c7:57:0a:8d:ff:
61:19:76:e2:47:c3:e6:d9:1a:ee:d1:e8:89:97:80:
b9:ca:64:9d:90:a2:9d:51:33:39:1d:f2:12:39:89:
08:ac:c9:1b:8e:00:d7:db:06:c6:8d:aa:7d:16:79:
27:30:ad:d0:2b:40:c0:95:e9:64:61:15:b5:ef:ab:
c0:49:84:0d:39:7e:1f:62:db:cc:fc:cc:c0:0e:c0:
30:05:5e:7a:76:dc:3e:ca:76:a9:19:d5:d0:a2:f0:
60:92:f9:5c:35:05:87:b2:31:aa:7f:cc:0e:25:e8:
e4:b8:ce:41:50:fb:5f:52:5d:de:43:b6:fc:9b:d4:
1c:38:91:3b:b1:e6:bc:ce:5d:21:21:24:32:1b:34:
4f:7e:03:1e:53:c3:2c:c7:04:e8:81:bc:9f:70:58:
c8:76:55:6a:90:a6:36:3d:90:a8:74:a9:51:93:cf:
31:d8:30:9b:8c:e3:84:5b:57:75:eb:d7:9f:ed:dd:
08:4c:60:bc:85:f7:c6:b1:79:dc:56:f2:93:7d:df:
72:71:59:cc:e0:e6:a7:d0:6d:3f:f9:cf:6b:38:33:
1f:49:65:3c:cd:27:31:f4:94:20:db:30:84:b4:7c:
04:01:84:a0:ab:06:2a:01:47:de:8a:d9:25:d0:ef:
50:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:AD:6E:ED:6D:9A:83:3B:7A:E6:96:29:CF:12:D8:9D:DD:AF:D6:BB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2E3DCBF41BA711F191B8CD7CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.75.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:68:33:af:be:95:45:4d:2b:c9:90:04:cb:aa:46:3d:66:2d:
b4:3f:f1:5c:bc:0e:91:cd:2b:3e:76:e2:c4:d1:b4:cc:12:5c:
77:c9:64:76:1e:51:e7:ef:bb:c0:4d:f8:a3:5c:9c:52:66:c0:
91:a9:07:58:a3:5d:ea:be:b6:0a:6e:e3:67:df:94:c2:0d:59:
30:82:8b:d6:40:ed:8d:36:e6:4f:f6:61:a6:e8:19:ab:b1:f9:
3f:8a:46:5e:02:8c:ce:b4:e0:5b:22:22:a8:73:09:81:6c:6f:
03:33:d0:46:00:b8:21:af:1c:1c:a8:f1:da:16:20:99:c6:7d:
bd:33:3c:ae:89:75:2d:c0:b9:c6:55:ad:de:2f:51:87:a8:7b:
c3:e0:bf:11:48:88:23:b6:3f:86:1b:35:e4:1c:65:82:36:4c:
62:a3:df:f9:ce:93:1c:b4:5b:1f:f9:cd:22:b7:9b:3e:08:15:
21:0c:b0:b5:a2:99:d7:fa:c2:7f:29:4f:aa:51:2b:66:79:69:
01:78:57:3d:14:7b:7c:19:c5:99:7b:67:bb:32:40:eb:fc:9b:
cf:60:98:c7:69:e7:3d:3b:fb:1d:64:0f:1e:d2:af:9d:73:23:
2f:4d:64:8b:53:5e:de:1b:01:f2:cc:82:67:bb:fe:8a:99:9c:
ea:4f:70:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:47:52 2026 by rpki-client