Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5DD930A41C9911F195E1727FDAE4EC9C.roa
File: 5DD930A41C9911F195E1727FDAE4EC9C.roa (raw, json)
Hash identifier: +EB8RamWr1kmuyU+RTN/cBqhA4unimD/rxOCk0/eX4g=
Subject key identifier: 1D:4C:2A:EC:76:66:44:E9:4F:25:5B:55:9D:EA:A1:AA:A1:23:B1:38
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A3E0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5DD930A41C9911F195E1727FDAE4EC9C.roa
Signing time: Tue 10 Mar 2026 15:54:06 +0000
ROA not before: Tue 10 Mar 2026 15:54:00 +0000
ROA not after: Fri 10 Apr 2026 15:54:00 +0000
asID: 274250
IP address blocks: 45.200.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107488 (0x1a3e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 10 15:54:00 2026 GMT
Not After : Apr 10 15:54:00 2026 GMT
Subject: CN=69b03e9e-fe4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8e:f6:6f:e6:bd:fa:de:ee:aa:00:ca:e3:ef:
ab:f5:1b:45:c5:ff:2b:e5:c9:1b:31:59:cb:f2:ae:
7a:77:69:0e:fa:00:eb:74:0f:0f:52:33:36:ee:ff:
44:81:91:6c:47:81:22:9e:73:07:80:b1:d6:7d:a8:
38:57:96:e9:30:c4:12:9e:1e:a7:75:10:3c:ef:31:
f0:0a:6d:a1:ef:3d:5a:40:96:5a:5d:88:dc:e8:22:
67:50:54:48:1d:af:79:34:80:57:03:a4:92:5f:36:
47:80:bf:48:53:f5:61:15:5a:ae:34:f4:5a:51:7b:
49:40:30:d4:65:2b:6f:01:43:af:3b:81:61:78:1a:
01:1d:d8:60:fe:b8:cf:a8:fd:59:6a:d1:67:cf:af:
1a:3b:ab:1f:94:af:f1:b7:d9:94:d3:3c:7d:fa:37:
0d:2c:9f:99:1d:77:f5:30:9c:6f:0f:b6:d9:6d:77:
4a:d2:22:7b:b6:a2:83:20:4b:a2:9d:cf:a7:ca:2a:
97:ee:13:8a:91:23:2f:75:82:ea:0f:e9:f9:2b:1d:
69:2b:a7:3b:82:ab:5b:be:56:75:bb:ea:1d:7b:45:
71:b7:24:7d:f7:93:49:01:89:e0:67:06:f5:c9:00:
26:0a:e4:da:a5:75:c1:49:40:47:2e:1d:94:1d:0f:
b5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:4C:2A:EC:76:66:44:E9:4F:25:5B:55:9D:EA:A1:AA:A1:23:B1:38
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5DD930A41C9911F195E1727FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.124.0/24
Signature Algorithm: sha256WithRSAEncryption
77:3c:c8:dd:71:0f:94:35:58:ea:4c:e1:37:30:98:f8:15:65:
e6:dd:0f:16:3e:f3:20:a0:b4:a4:f2:d4:a6:3d:e9:d8:4f:1e:
68:a3:dc:a8:e2:31:b8:e0:a6:7e:3a:c4:d5:2f:db:49:5c:1d:
17:d9:3a:94:27:25:7e:4c:5f:f7:c1:b7:6b:70:0a:1a:da:80:
b7:3a:99:78:20:b0:06:4f:1c:bd:07:4c:7d:e3:88:6a:9d:d3:
12:82:31:06:e4:4a:7e:e8:f0:fe:49:e5:e3:b0:94:b1:c7:71:
e1:63:5b:95:2b:df:30:01:d4:49:78:7a:4e:2f:6a:4a:20:f8:
13:33:81:bf:c3:a5:a0:b3:3a:59:81:99:94:43:d6:50:c3:98:
8e:0c:03:75:c2:b7:57:22:d0:ff:64:8b:b6:95:8b:62:e3:0f:
4c:0a:1f:8b:d0:df:c3:dd:85:df:a7:6e:50:8f:36:89:c1:07:
e4:2b:03:b2:0d:35:52:26:52:1f:6b:ec:ce:37:bd:7c:44:55:
89:b8:ca:7f:2d:75:49:c5:51:e2:a9:96:c6:47:90:fb:6b:3a:
95:1c:d8:65:7b:24:72:80:0d:ab:55:5f:70:66:03:b5:36:4f:
e4:83:78:b8:c7:d1:1b:01:88:71:cc:fe:51:1f:a8:0e:0f:14:
35:9d:c7:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:10:16 2026 by rpki-client