Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2EC12D7418BD11F19B008D90DAE4EC9C.roa
File: 2EC12D7418BD11F19B008D90DAE4EC9C.roa (raw, json)
Hash identifier: XtB4YY5DDn4U7tCUa6TnABtBvzlhzUTcuprajctpLeM=
Subject key identifier: 93:B6:64:C3:DF:84:5A:EC:6F:81:FE:BE:8B:80:2A:31:F6:5A:41:F1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A2C3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2EC12D7418BD11F19B008D90DAE4EC9C.roa
Signing time: Thu 05 Mar 2026 18:00:24 +0000
ROA not before: Thu 05 Mar 2026 18:00:19 +0000
ROA not after: Wed 22 Apr 2026 18:00:19 +0000
asID: 141159
IP address blocks: 45.205.16.0/21 maxlen: 24
45.205.16.0/24 maxlen: 24
45.205.17.0/24 maxlen: 24
45.205.18.0/24 maxlen: 24
45.205.19.0/24 maxlen: 24
45.205.20.0/24 maxlen: 24
45.205.21.0/24 maxlen: 24
45.205.22.0/24 maxlen: 24
45.205.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107203 (0x1a2c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 5 18:00:19 2026 GMT
Not After : Apr 22 18:00:19 2026 GMT
Subject: CN=69a9c4b8-ae08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:80:8a:61:48:1b:2c:bb:e5:cb:ca:b7:84:8e:
96:e2:63:d1:1e:75:49:65:98:af:4d:ec:ef:79:27:
51:d8:fe:52:f9:02:c8:df:94:c2:2f:36:6e:87:bd:
bd:f2:c1:ac:67:64:2f:1e:d0:46:4f:f3:46:ff:08:
fb:cf:68:06:28:9e:56:c9:a1:4f:c3:d3:79:93:65:
55:46:8f:6a:1d:0c:3d:98:26:43:fa:25:da:d0:40:
e9:e8:5e:c4:5e:e9:c9:e4:d4:b9:c8:5f:18:52:7f:
41:51:e0:9a:48:24:2d:9f:fd:fd:76:f9:a8:12:fa:
1d:2e:90:0b:39:b7:f1:27:5c:32:ee:29:15:bf:62:
40:cc:75:44:05:df:af:e3:37:d7:0c:ae:6a:0e:ca:
61:25:47:f2:9d:c6:8f:aa:92:d9:04:6f:4f:02:4d:
0d:ea:53:4b:bf:c0:2d:63:b8:61:1a:81:5e:e4:05:
cf:1e:6c:6c:47:14:ea:63:37:d6:bf:e0:29:c2:94:
b7:8b:7d:24:12:8c:7d:b7:12:82:50:85:4e:ce:0d:
97:ef:23:b2:f4:ec:85:f0:b7:da:27:31:e5:70:77:
27:6b:f1:c8:5c:90:30:af:42:07:96:7c:f8:84:f0:
2a:52:e8:f6:84:8e:be:79:85:84:3b:a7:54:49:c7:
63:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:B6:64:C3:DF:84:5A:EC:6F:81:FE:BE:8B:80:2A:31:F6:5A:41:F1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2EC12D7418BD11F19B008D90DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.16.0/21
Signature Algorithm: sha256WithRSAEncryption
af:8c:68:a5:ae:42:2e:1f:c4:cb:f0:69:62:37:d1:a3:7f:21:
c9:95:0a:e6:6a:83:76:4e:96:d1:53:1c:2d:d9:25:67:ce:a6:
9a:4f:56:2c:89:1a:14:8a:31:52:39:b9:ec:be:ca:70:da:81:
e4:58:2e:44:e6:c1:53:f0:ce:7f:09:dd:3f:31:74:c7:a2:43:
5d:b6:d5:c6:c0:14:eb:06:4b:41:79:06:d3:88:f0:9d:e6:03:
5c:09:9e:14:06:a1:2d:9c:c2:e3:59:c0:99:eb:cb:0e:ca:58:
b6:ed:bc:25:1d:db:0c:58:86:95:16:36:7c:c9:0a:c3:de:64:
81:a6:1a:dc:45:63:00:f9:ac:4c:78:d1:29:62:5a:af:18:44:
05:ea:df:7b:43:27:d1:2d:f5:78:a0:9e:50:65:3a:bd:b0:3f:
c2:69:92:f0:2d:2b:87:42:a9:ad:ae:17:c0:2c:22:41:f1:ab:
af:9e:34:69:05:4a:61:67:67:5e:bf:77:49:91:6a:18:e7:bd:
5b:af:5b:bd:5d:0e:a4:f0:b9:e9:7c:62:26:a9:c9:83:fe:03:
9c:51:c4:6c:11:64:26:2b:d7:0f:ec:61:00:ea:00:bd:3c:84:
18:dc:60:01:7b:37:7a:f1:cf:13:a4:d7:49:c6:cd:75:cd:30:
c6:ea:f1:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:15:48 2026 by rpki-client