Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/75D9D8961E2611F1AB3D1A90DAE4EC9C.roa
File: 75D9D8961E2611F1AB3D1A90DAE4EC9C.roa (raw, json)
Hash identifier: QecmZpnfcIotVd6t7vQZO7CrlaA6hRMas3uPf/ZgIjU=
Subject key identifier: D3:34:F6:09:4C:3D:94:69:3E:1D:6A:68:53:8F:10:3C:DB:CD:67:30
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A4BC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/75D9D8961E2611F1AB3D1A90DAE4EC9C.roa
Signing time: Thu 12 Mar 2026 15:16:36 +0000
ROA not before: Thu 12 Mar 2026 15:16:30 +0000
ROA not after: Sat 13 Jun 2026 15:16:30 +0000
asID: 142286
IP address blocks: 45.207.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107708 (0x1a4bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 12 15:16:30 2026 GMT
Not After : Jun 13 15:16:30 2026 GMT
Subject: CN=69b2d8d4-0331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:db:24:ad:fa:f7:0b:a4:c1:54:b8:a0:d3:32:
7b:03:44:2a:ec:2d:0c:63:6a:02:97:46:8a:e0:f7:
2e:7c:c3:52:61:29:d8:ae:2d:ce:37:04:65:69:47:
8c:52:b1:3b:a9:de:be:74:0b:b4:24:7a:03:34:e0:
4b:98:20:55:6d:21:22:0c:92:f9:98:7c:7a:98:bf:
bb:3e:30:19:4a:c1:7e:e3:2e:6c:c4:22:73:41:14:
fa:6c:74:72:a4:c5:94:f8:c2:95:e3:ea:93:f9:00:
df:88:44:3c:60:25:70:e0:a6:53:38:81:c4:d7:26:
91:3f:6d:b4:f6:2c:1b:71:60:93:ed:4c:a1:58:8e:
1a:0b:4d:bf:d6:9a:3a:55:75:38:43:c3:fd:84:88:
4e:43:9f:a5:0d:19:cf:d4:5a:6f:21:b0:0e:f9:6c:
72:9b:c9:a3:e4:72:fc:b7:42:03:72:0f:21:3d:ef:
3f:0f:b8:7d:ca:9f:c1:78:d6:39:a7:b8:3a:9e:32:
f7:9e:0f:4d:0c:5a:08:e5:4b:ce:a4:5c:ca:5f:62:
fc:82:20:cf:22:bd:1c:2f:55:81:b1:25:2b:2e:a6:
09:77:75:f2:75:12:d2:75:3b:a3:20:c1:19:75:e5:
24:ec:23:25:80:e3:bd:0f:ff:a5:9f:16:50:52:9c:
89:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:34:F6:09:4C:3D:94:69:3E:1D:6A:68:53:8F:10:3C:DB:CD:67:30
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/75D9D8961E2611F1AB3D1A90DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.64.0/18
Signature Algorithm: sha256WithRSAEncryption
22:df:15:0c:96:7b:20:db:9b:39:c9:d0:69:77:87:9e:ba:4a:
e7:52:de:5c:ef:94:4b:d6:4e:f9:91:78:5f:60:27:3c:a9:cc:
e3:80:68:f6:4e:3e:00:07:14:16:32:d0:3d:37:dd:c1:08:ea:
43:1a:f2:d3:1c:8f:9b:00:9e:16:ef:6d:4b:dd:5c:43:fb:14:
78:f7:b2:6e:a5:18:6e:e0:ef:fb:3d:d6:7a:7f:2c:2f:d5:e6:
8e:66:42:ef:c4:a6:17:13:54:c9:47:d1:98:9a:78:72:1c:5d:
14:cb:ea:86:43:bf:cb:8d:6a:d6:bf:0c:dc:01:f0:93:ad:55:
e0:5d:71:16:66:9d:5e:c9:cd:3f:14:ac:8e:15:df:04:87:b3:
41:a7:cc:2a:5f:97:73:f2:bc:1f:e7:b0:f2:ae:8f:88:83:27:
c2:36:f5:0a:47:20:0a:f4:0a:ab:da:cd:db:43:d5:d2:f2:9c:
63:08:12:7c:7b:53:33:19:02:3a:77:06:04:ae:06:0a:61:e5:
74:f2:41:d3:2a:b2:30:29:d4:ab:5a:88:89:ce:0b:88:6c:ea:
9f:fe:60:6c:22:12:ec:3e:ba:85:e3:c0:08:f3:38:c7:01:9a:
11:62:aa:f5:af:e1:54:cb:7e:34:5d:96:c4:81:ce:23:05:fb:
a5:db:96:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:15:39 2026 by rpki-client