Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3F5685381DCE11F19C29E898DAE4EC9C.roa
File: 3F5685381DCE11F19C29E898DAE4EC9C.roa (raw, json)
Hash identifier: IgDnlHjcs6H8xin+AUhh4NyxRFx4w1/O3AynMZRT7vM=
Subject key identifier: F4:4F:E7:66:D0:C9:33:D0:94:2C:F9:A5:AD:FD:AB:60:8D:66:67:37
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A446
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3F5685381DCE11F19C29E898DAE4EC9C.roa
Signing time: Thu 12 Mar 2026 04:45:09 +0000
ROA not before: Thu 12 Mar 2026 04:45:05 +0000
ROA not after: Fri 10 Apr 2026 04:45:05 +0000
asID: 213169
IP address blocks: 45.202.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107590 (0x1a446)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 12 04:45:05 2026 GMT
Not After : Apr 10 04:45:05 2026 GMT
Subject: CN=69b244d5-0f25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:02:77:80:d9:85:4a:a4:e2:f4:77:6c:7c:d8:
8e:a3:20:48:38:f6:d3:6b:e7:86:9a:8d:df:9d:ef:
56:83:75:13:81:69:62:64:b4:07:53:31:9f:42:bd:
49:6c:41:cd:53:6c:a1:e4:91:15:77:93:dd:a0:00:
9e:72:85:ac:b9:22:e7:9f:1a:dc:37:7a:63:7f:59:
73:a1:ca:2c:b3:77:e7:9e:58:35:b7:1b:f1:bd:87:
b4:1a:3a:19:73:30:67:56:91:eb:b7:2c:fa:7e:ff:
d2:dd:ba:ce:fc:6d:4b:10:9a:c7:61:91:2e:67:24:
b6:1f:f8:7e:b1:1f:8c:62:fa:f3:f4:5b:b9:0a:65:
73:ab:08:d6:bc:ea:ac:bd:a5:f1:a5:11:86:05:f4:
ed:5a:54:b9:49:56:e5:84:8a:25:35:c1:04:d2:d4:
89:85:43:84:e1:ee:50:16:84:7a:99:03:ad:ee:02:
e5:6c:f9:70:24:ba:0a:0b:0d:1a:65:95:e5:a3:48:
d8:cf:a0:67:0c:f7:f0:2a:77:ad:52:2b:8e:03:34:
f0:d0:24:c8:5d:8f:47:b2:49:55:75:ff:1b:34:73:
54:d7:88:13:63:75:a1:cd:30:30:0d:49:79:97:64:
ab:c3:76:84:9a:3a:85:16:54:34:53:68:e0:cd:78:
0e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:4F:E7:66:D0:C9:33:D0:94:2C:F9:A5:AD:FD:AB:60:8D:66:67:37
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3F5685381DCE11F19C29E898DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.252.0/24
Signature Algorithm: sha256WithRSAEncryption
27:c2:eb:62:f8:cf:b0:7f:a4:96:06:c7:64:7e:ba:1b:0a:60:
7f:b7:09:aa:00:7f:ec:22:e3:99:86:13:f9:6b:48:f5:71:96:
6b:4d:be:86:67:54:39:b3:e3:41:cf:eb:f0:0c:91:d5:99:0f:
5b:99:71:a3:78:23:71:c0:20:86:ee:60:8c:74:be:be:2d:ef:
03:a6:83:e8:ee:e1:79:95:49:eb:96:0c:5a:45:de:e0:7c:ce:
a5:15:f7:f4:5e:d2:7f:13:90:e0:73:d2:cc:09:52:eb:a9:fc:
c3:d6:db:1d:59:a6:c1:2b:d6:93:9c:9d:a2:00:69:f9:b2:c7:
ed:99:89:1f:a6:41:31:73:b2:ac:5b:48:fd:f0:65:cc:8a:99:
2f:f2:ee:47:67:de:cc:59:9f:c3:77:11:91:46:46:22:ad:7c:
8e:49:7f:f4:10:d9:ea:a6:b4:4d:28:06:5c:a1:6b:12:df:bd:
b3:27:47:e7:45:f7:ad:22:28:29:4b:77:bd:cd:51:6c:b2:6d:
fc:31:e6:18:74:3b:0f:42:87:73:0a:a8:df:b1:83:74:b7:6b:
99:fa:0b:71:3f:7e:6c:ee:18:a8:b6:24:4b:c0:93:16:11:2c:
64:c8:36:59:5b:a8:34:06:a0:a4:06:89:99:f6:90:3a:b4:fc:
33:85:1d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:10:30 2026 by rpki-client