Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/49E75FA4268E11F19839999BDAE4EC9C.roa
File: 49E75FA4268E11F19839999BDAE4EC9C.roa (raw, json)
Hash identifier: X1vsTFx6kkCakSeY74O2tXsqWLrbbgqcWstSJOBMAjs=
Subject key identifier: C0:F1:70:B2:18:31:B4:AC:E5:E7:BD:06:1F:E2:CC:82:BA:1C:F2:F9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A6C5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/49E75FA4268E11F19839999BDAE4EC9C.roa
Signing time: Mon 23 Mar 2026 08:00:00 +0000
ROA not before: Mon 23 Mar 2026 07:59:54 +0000
ROA not after: Wed 29 Apr 2026 07:59:54 +0000
asID: 273034
IP address blocks: 45.195.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108229 (0x1a6c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 23 07:59:54 2026 GMT
Not After : Apr 29 07:59:54 2026 GMT
Subject: CN=69c0f300-4578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:10:dc:c1:8b:3c:0b:fd:ec:ff:1a:ab:1a:9c:
eb:04:3a:c0:41:df:83:a6:4c:18:5f:ba:b3:1c:80:
a9:a5:34:db:63:e5:5a:24:ef:62:03:d6:23:e9:e9:
19:3c:1a:be:ec:4d:e7:64:ee:97:ea:af:dc:01:0d:
5a:91:7e:27:2f:ea:2d:af:c2:0f:fd:4b:fe:86:d7:
25:12:30:3b:6d:e3:07:52:98:b8:ee:8e:2c:2c:9d:
2d:ec:ee:d8:b1:3f:05:7f:06:58:1f:70:6a:e4:6c:
1d:76:ba:81:4f:6f:38:e4:1b:93:7a:f3:a2:41:e4:
51:62:78:8d:93:a9:47:1d:19:36:c7:74:82:2c:aa:
72:50:2e:96:9f:01:95:04:5a:89:ed:69:6f:3d:cb:
95:c4:d8:8b:dd:ac:69:aa:50:37:60:0e:fb:55:65:
00:6c:fb:cf:85:42:63:66:30:21:6c:49:7d:9a:4c:
2e:7b:1b:2c:20:ce:be:8d:58:b2:2a:a4:c9:5a:05:
ad:a8:26:d2:03:03:d5:ca:27:5f:eb:5a:da:6b:d0:
14:fd:15:69:e8:3d:dd:ea:82:16:9c:2a:d9:24:b7:
04:61:0a:e4:0b:19:68:43:51:e0:8e:52:64:b9:74:
6d:96:d3:cc:4f:f3:c1:6d:9c:e6:eb:9f:f1:35:ee:
4d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:F1:70:B2:18:31:B4:AC:E5:E7:BD:06:1F:E2:CC:82:BA:1C:F2:F9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/49E75FA4268E11F19839999BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.201.0/24
Signature Algorithm: sha256WithRSAEncryption
12:87:fb:71:2e:e1:ed:af:68:37:d9:98:c8:c7:01:4f:d2:2f:
00:2e:38:de:e1:d7:e2:99:54:8e:c7:37:eb:0d:b3:42:2a:ec:
98:b7:5e:b1:23:98:12:ab:5f:41:8b:05:34:ce:48:ce:6d:dc:
bf:57:a4:45:2b:b5:80:2d:40:1f:29:00:88:bd:dc:3c:f6:55:
81:fb:64:fc:ff:f7:d9:98:1f:92:74:69:6c:5d:d6:1c:36:6b:
a3:4b:77:1e:f8:d4:3b:ac:30:40:44:26:52:2a:67:92:95:cd:
a2:85:c1:ab:9d:9d:f5:4a:7f:d5:ec:e0:5d:f1:74:d1:1b:51:
b8:7b:87:bd:01:58:9d:e9:eb:4e:23:94:e1:3e:ee:97:9c:8e:
17:0f:d5:79:0e:5b:26:0d:af:d8:4b:83:ef:e0:63:a9:c4:5c:
4b:d9:5f:b9:38:ad:67:61:ab:0d:72:b0:be:53:de:07:bb:68:
5c:71:29:9f:12:f5:7a:e8:b6:26:78:0c:34:e4:14:a8:b9:9c:
d6:43:76:ec:bc:f3:52:c5:be:6f:42:26:92:bb:3b:12:bd:ff:
cd:cd:9b:0d:df:9e:1b:15:4c:c7:2a:c8:41:c8:2c:e1:74:bc:
b4:08:56:cc:7f:af:e7:8c:e6:7b:47:22:82:03:a1:f4:df:8b:
ef:fb:ef:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:15:42 2026 by rpki-client