Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/32B997A01EB611F191062AE1DAE4EC9C.roa
File: 32B997A01EB611F191062AE1DAE4EC9C.roa (raw, json)
Hash identifier: TnWviwSd4hGy53DGUL4ZBNP/5Kn2QUQ8HCXm66fVd+4=
Subject key identifier: 58:5D:FC:BC:C2:67:D5:F2:FC:5B:6F:8A:AD:B8:F0:B4:BA:C6:A4:6A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A4E7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/32B997A01EB611F191062AE1DAE4EC9C.roa
Signing time: Fri 13 Mar 2026 08:25:31 +0000
ROA not before: Fri 13 Mar 2026 08:25:26 +0000
ROA not after: Wed 29 Apr 2026 08:25:26 +0000
asID: 395793
IP address blocks: 45.195.148.0/23 maxlen: 24
45.195.202.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107751 (0x1a4e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 13 08:25:26 2026 GMT
Not After : Apr 29 08:25:26 2026 GMT
Subject: CN=69b3c9fb-d6a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5e:04:d4:5f:80:d5:1d:ce:24:3e:a8:7d:7a:
02:34:a7:43:45:c5:d6:7b:89:3f:94:2a:29:7d:c4:
f6:1c:af:5b:d2:b9:e2:1b:a0:c9:73:98:d3:ae:5f:
21:10:36:3a:21:7a:58:53:64:85:0b:c0:e1:57:69:
b3:a3:a8:bb:1e:a1:75:e9:82:0d:0b:e4:81:32:87:
cc:85:d8:f1:d0:96:c4:e0:c6:1c:c6:8a:c3:53:9c:
c6:d6:a6:1e:8d:ab:f7:b4:06:6e:e8:5f:88:41:1f:
c7:53:54:bd:ca:3e:bb:59:93:df:d0:6a:59:5a:ec:
b5:67:b0:29:ad:a2:df:00:bb:d1:af:5e:73:f8:e9:
23:10:80:bf:ed:fe:44:2a:d8:81:fd:f4:25:a6:84:
0f:7e:28:46:06:da:22:e8:fd:a4:89:87:44:28:93:
04:8f:5a:e5:77:e4:02:10:fe:9f:9e:aa:81:65:53:
b3:ff:92:67:a3:8a:a4:9d:30:39:50:72:a7:ce:94:
f5:da:ae:80:c6:f0:65:f1:4d:2c:fa:42:81:db:62:
a3:5f:3d:8b:a4:ee:dc:01:bb:aa:57:3a:31:0c:27:
33:4a:cf:e7:fa:08:8a:73:eb:53:20:2e:33:c7:eb:
ae:d3:41:4d:1e:ab:34:a0:5f:97:ed:63:ef:7f:e9:
d0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:5D:FC:BC:C2:67:D5:F2:FC:5B:6F:8A:AD:B8:F0:B4:BA:C6:A4:6A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/32B997A01EB611F191062AE1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.148.0/23
45.195.202.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:20:d8:c6:e8:5a:35:2c:51:12:33:49:32:6b:73:05:d7:3d:
48:63:14:de:1a:ec:b5:be:77:91:a5:c6:5d:d0:73:74:b1:c9:
5a:9f:98:a1:dd:83:d9:11:72:07:7b:57:92:af:96:03:15:6b:
76:b7:9f:63:a0:d9:c9:2e:e3:be:c8:59:d5:a9:30:28:8f:41:
4d:57:ad:e4:73:95:c1:29:78:2d:6c:30:10:bc:e0:cf:1b:92:
e2:54:58:35:79:8b:a6:3d:e9:8e:d4:4c:5a:40:de:d8:aa:49:
77:76:5e:e6:30:63:0e:79:6a:60:5c:71:21:db:dd:80:5d:b4:
cd:68:af:10:48:80:41:19:d9:92:4d:0e:48:44:47:0b:d0:e5:
3b:52:40:d3:cb:c4:a1:c8:e1:ed:d5:74:20:bc:6f:ae:cb:7b:
27:08:2e:f9:b8:1d:23:e6:3a:37:b8:03:b7:2f:0c:17:da:4a:
34:9e:17:6c:e5:60:ba:f8:88:1b:ab:e3:91:93:ff:96:3c:3d:
06:b7:db:a3:14:a8:38:11:89:ba:2e:c4:ff:7e:b6:26:36:a9:
40:c9:bc:1e:ec:f1:06:32:c9:33:8f:ad:a4:50:0f:6e:71:0e:
f9:1c:8f:a5:00:9a:c8:2b:70:31:73:4e:ca:eb:eb:d4:a5:61:
0f:b5:d2:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:10:21 2026 by rpki-client