Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/756D4E5C18C111F1916C3EA9DAE4EC9C.roa
File: 756D4E5C18C111F1916C3EA9DAE4EC9C.roa (raw, json)
Hash identifier: FhkKv2YuJ2fg6LOCpthWpa/mRWbxhk8MgpIzyqytAOo=
Subject key identifier: 93:F2:C2:53:39:E5:4A:0F:EE:05:AB:0B:A7:7F:85:B8:B4:69:95:C0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A2CD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/756D4E5C18C111F1916C3EA9DAE4EC9C.roa
Signing time: Thu 05 Mar 2026 18:31:01 +0000
ROA not before: Thu 05 Mar 2026 18:30:56 +0000
ROA not after: Thu 23 Apr 2026 18:30:56 +0000
asID: 214025
IP address blocks: 45.202.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107213 (0x1a2cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 5 18:30:56 2026 GMT
Not After : Apr 23 18:30:56 2026 GMT
Subject: CN=69a9cbe5-5370
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:45:5a:fb:4c:3e:ff:25:17:37:b6:10:18:8e:
e8:2b:31:6b:72:4c:5e:71:38:73:d2:48:d6:6e:87:
8e:49:7a:25:65:94:91:fc:90:6e:c2:32:ca:e4:7a:
ec:ed:10:9a:26:1e:33:85:88:f4:d5:63:6c:83:b4:
85:9a:1b:f3:0b:cf:7f:2d:21:e3:eb:34:4d:eb:c1:
03:9e:19:08:b1:4a:1c:e6:44:3a:98:06:ce:5b:cd:
e3:e0:9d:58:d1:68:10:53:68:1c:17:50:88:32:7a:
97:b2:df:93:97:a7:66:bc:d3:6e:e5:9e:04:0e:4b:
90:9e:a2:80:bc:7c:e8:84:93:f0:3e:e3:d7:c4:0b:
78:07:9f:73:47:58:03:b0:f0:ee:0a:9e:7b:0f:bb:
b5:68:0a:b5:bf:27:e1:ee:22:5c:dd:36:77:18:e5:
0b:b1:04:e0:9c:e7:eb:9e:64:b0:75:f9:b3:df:4f:
fc:55:d4:55:37:ee:fb:6c:68:1f:7e:a4:5a:ec:89:
54:9e:73:ca:9c:a5:97:72:fd:9c:0a:da:44:6e:cc:
2d:10:30:3c:8a:74:f1:4e:58:de:58:6a:f6:25:ac:
90:0e:27:24:7b:53:d1:da:63:b0:7c:66:9d:7c:fc:
f1:78:9f:2f:46:1c:d2:3b:47:57:85:0d:3f:35:ef:
ee:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:F2:C2:53:39:E5:4A:0F:EE:05:AB:0B:A7:7F:85:B8:B4:69:95:C0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/756D4E5C18C111F1916C3EA9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.108.0/24
Signature Algorithm: sha256WithRSAEncryption
24:4b:3e:f4:4c:10:5b:fd:03:a0:75:31:9d:b4:55:94:ae:6b:
ba:e9:16:94:e2:2b:67:a1:bd:e5:2d:63:1a:5d:fc:06:d2:55:
44:de:69:28:99:e5:47:b0:8f:0b:88:88:f7:64:bb:45:85:9f:
19:9f:1e:65:bc:0c:27:4e:21:ee:b3:84:36:9b:f1:5f:b8:da:
42:35:93:cf:a0:31:d0:55:ce:6b:6d:79:f3:d6:d4:6e:7e:b8:
2a:48:f6:68:76:0a:36:3b:5d:cf:62:96:6f:cb:a2:6e:b6:62:
68:49:8d:ba:c7:01:8b:fa:d9:a2:20:3b:8d:a4:7f:3b:e4:f4:
73:63:2a:34:32:f8:a3:67:9d:d7:50:9f:55:b0:1b:9c:76:fe:
f0:39:dc:03:69:81:2c:1b:d9:61:c9:76:c1:36:c5:bd:78:c0:
3c:89:15:26:d8:f3:76:69:35:7b:a1:42:6f:d9:89:b8:8b:91:
81:cb:80:c7:9a:e1:81:e4:0c:39:e6:f9:c1:cf:45:25:5d:8d:
44:e7:0a:bf:0a:14:24:3d:9d:a2:3f:3c:b6:e1:73:62:53:35:
8f:8c:b1:e5:03:64:24:b6:ed:a2:fb:b0:84:fc:d7:24:5d:92:
50:b9:ab:a6:d7:bd:e8:4c:87:39:6c:ca:21:78:a3:e0:fb:3d:
6d:72:b7:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:10:46 2026 by rpki-client