Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/34D30812253E11F1843713E9DAE4EC9C.roa
File: 34D30812253E11F1843713E9DAE4EC9C.roa (raw, json)
Hash identifier: AFy3gOAT3v/Fbx0MFq6LJwEUsHcWIetO3v1BiYESnYE=
Subject key identifier: F0:CA:00:96:0E:E6:55:4B:6E:0F:FB:C9:52:DC:78:1C:A3:00:D6:95
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A684
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/34D30812253E11F1843713E9DAE4EC9C.roa
Signing time: Sat 21 Mar 2026 15:54:13 +0000
ROA not before: Sat 21 Mar 2026 15:54:08 +0000
ROA not after: Tue 28 Apr 2026 15:54:08 +0000
asID: 202656
IP address blocks: 45.200.170.0/24 maxlen: 24
45.200.171.0/24 maxlen: 24
45.200.172.0/24 maxlen: 24
45.200.173.0/24 maxlen: 24
45.200.174.0/24 maxlen: 24
45.200.175.0/24 maxlen: 24
45.200.176.0/24 maxlen: 24
45.200.177.0/24 maxlen: 24
45.200.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108164 (0x1a684)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 21 15:54:08 2026 GMT
Not After : Apr 28 15:54:08 2026 GMT
Subject: CN=69bebf25-f701
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:74:2d:1a:62:58:e2:3e:bf:72:7b:7c:63:a1:
70:47:4b:f9:c8:b3:27:99:98:47:44:6b:32:0e:62:
42:aa:07:fa:27:75:93:79:32:15:47:7e:8d:6c:2c:
d0:a7:7d:2a:68:9a:1f:1b:88:e6:b1:96:8c:87:85:
7e:95:65:a1:1e:62:b5:18:d6:1f:20:a1:76:93:86:
19:56:8e:39:b7:cf:a3:03:bd:0f:30:5c:70:6c:3e:
20:6e:01:68:10:ca:99:6b:c9:b9:f3:4c:39:82:02:
b3:1a:f6:6f:0c:01:be:d6:0d:ed:5d:35:c2:e8:97:
74:05:c5:da:c4:a6:b3:13:0a:c5:22:c3:b3:a5:79:
6d:1d:de:c4:17:83:e2:b5:60:1d:46:d8:a0:f9:11:
e5:51:64:65:6f:e3:17:60:ee:73:33:85:9f:00:5c:
ae:f3:7c:7c:7d:ec:96:3d:99:d3:c9:c4:e4:54:24:
df:a6:c7:74:e5:5e:c8:04:ad:e3:d7:90:78:4f:86:
42:55:0f:47:2f:f1:53:bd:20:ca:64:d6:21:08:1a:
df:79:20:27:1d:2b:cf:54:03:c1:46:84:71:30:b2:
04:65:8b:88:11:a6:88:1a:30:19:51:cd:d6:8d:dc:
b1:d8:19:1e:ef:62:5b:ff:29:af:e2:49:29:69:fd:
4f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:CA:00:96:0E:E6:55:4B:6E:0F:FB:C9:52:DC:78:1C:A3:00:D6:95
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/34D30812253E11F1843713E9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.170.0-45.200.178.255
Signature Algorithm: sha256WithRSAEncryption
01:c2:b0:1c:ee:d9:1f:b1:87:80:59:cb:48:37:f0:10:c1:d3:
35:30:4e:d7:84:bb:aa:d2:f0:cd:fc:ab:c8:d1:ea:8a:a1:3b:
79:ce:59:a7:20:7a:ea:c5:ad:7f:6c:45:4a:12:cc:cf:06:c3:
66:28:e7:5a:e4:54:62:84:15:51:bb:cb:f4:08:b8:2a:4c:64:
bb:4a:67:72:16:9b:f8:70:b2:d5:91:bb:dd:ce:0f:33:4b:01:
a3:58:37:e1:48:bd:2c:a1:9c:61:25:9a:ad:4d:b3:b5:20:10:
06:43:a8:42:b5:27:c8:02:d3:34:fd:a5:69:72:d5:90:6c:43:
09:cf:c0:a8:fe:7a:9b:bb:6f:6e:88:11:f5:4b:74:47:06:97:
b0:78:56:81:79:87:c8:4c:bc:5d:25:31:fe:1e:e5:df:e0:15:
a3:1e:65:7c:89:e0:92:6d:5b:fa:a8:ab:fb:ac:1c:34:c9:69:
bf:25:7c:42:70:d8:77:c2:23:93:f8:1f:ab:e1:ae:bd:94:8f:
f2:53:5b:b8:2c:08:dc:5b:42:bc:b3:d8:73:64:07:8d:8a:10:
8b:24:46:4a:10:7c:64:e4:a1:68:4d:e2:9c:35:d1:d4:5a:52:
58:40:39:29:32:3c:bd:b4:37:3e:f8:19:bd:49:c9:a8:66:8f:
79:9a:7b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:10:32 2026 by rpki-client