Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7BCE53CE17AC11F1B557AE8ADAE4EC9C.roa
File: 7BCE53CE17AC11F1B557AE8ADAE4EC9C.roa (raw, json)
Hash identifier: iVOEzFPUu3S5SThIL98T/BAmNt26t30k1Lmn21hPZgM=
Subject key identifier: 08:D0:05:79:53:26:C3:22:7C:4F:D8:B2:AC:79:95:5C:E5:64:9B:B0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A226
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7BCE53CE17AC11F1B557AE8ADAE4EC9C.roa
Signing time: Wed 04 Mar 2026 09:28:20 +0000
ROA not before: Wed 04 Mar 2026 09:28:15 +0000
ROA not after: Wed 19 Aug 2026 09:28:15 +0000
asID: 35107
IP address blocks: 45.196.144.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107046 (0x1a226)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 4 09:28:15 2026 GMT
Not After : Aug 19 09:28:15 2026 GMT
Subject: CN=69a7fb34-a0cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:94:73:43:07:7d:55:e9:9a:de:a8:30:20:c9:
8e:10:41:cf:f8:95:e0:b1:42:95:40:d9:7c:cd:8a:
e3:f6:ac:39:29:09:23:80:3b:0c:27:fd:f3:0f:32:
2e:6f:c4:be:9c:c6:c8:5a:ef:2b:37:f1:5f:1f:50:
92:2d:32:61:0e:fe:d0:db:51:37:e8:d6:05:03:11:
01:7d:5a:1c:a6:6c:8f:0f:7a:4a:43:d2:0a:08:ab:
a6:36:bd:a9:0b:8b:7a:2f:3d:a5:8d:b4:c2:56:8a:
ec:1b:ea:2e:49:1a:f1:fe:87:44:96:97:a8:c6:14:
05:6b:f9:d4:be:8a:1e:25:ee:e1:dc:ee:75:7f:22:
7f:30:13:b8:c8:e1:31:8f:96:30:62:c2:6c:4b:23:
f5:1c:9a:50:58:ec:65:ac:ef:b1:ec:c8:85:20:6e:
db:2c:f0:c6:cf:c0:80:e5:dd:a4:ca:35:f6:86:3c:
16:6d:e2:89:23:e4:bd:52:77:fc:07:31:85:4a:30:
8f:3f:08:66:2c:e5:03:e2:12:4b:28:0c:83:e2:19:
39:f2:39:24:2c:56:5f:24:d0:43:45:34:19:6a:30:
32:b4:66:54:42:9c:93:23:e1:6d:0e:5b:51:29:5f:
9f:e4:fa:db:11:30:cc:f2:7a:6a:ff:e8:de:b5:12:
1e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:D0:05:79:53:26:C3:22:7C:4F:D8:B2:AC:79:95:5C:E5:64:9B:B0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7BCE53CE17AC11F1B557AE8ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.144.0/21
Signature Algorithm: sha256WithRSAEncryption
6b:1a:fa:d4:cc:1a:dc:fc:91:a6:f2:d1:24:da:d0:30:a3:11:
49:e0:4c:75:31:e0:76:1d:fa:3d:48:6c:71:ab:8c:3f:f6:e9:
07:f0:65:f2:01:fb:70:0b:ed:3b:51:bd:7e:ce:45:16:8e:ee:
98:88:a4:cf:94:d5:17:04:3a:61:64:e0:28:a3:67:63:9b:89:
5e:c5:e8:8d:02:86:85:c9:3a:db:d7:d6:24:b9:77:45:dc:5a:
2b:ad:6d:9a:6c:8b:cd:b1:3c:ae:f8:a0:be:d6:61:db:f3:1c:
1b:cf:4f:7a:b8:ff:33:6f:6e:1c:87:27:d0:55:be:26:5e:2f:
07:14:be:22:14:2e:2c:44:2d:09:99:3c:89:61:a4:33:0d:b1:
49:24:bc:c9:94:1c:f6:ac:ff:ab:fc:02:60:80:92:c6:2d:f7:
04:9e:41:2b:ee:e2:7c:e0:cf:8c:ca:b4:94:55:70:f5:60:2f:
2c:55:18:ce:8f:b1:70:44:c0:57:c1:a7:74:ae:d2:dc:ef:c4:
f7:eb:d9:c7:12:c5:7d:ac:9d:2b:1f:b5:ef:ba:aa:67:26:9a:
43:2c:72:a4:bd:d4:23:52:64:a9:66:36:e8:6e:17:d4:1c:d2:
f8:7e:bc:b8:0e:d8:a8:c1:e4:b5:1d:60:16:36:6c:60:10:d1:
00:4e:42:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:10:17 2026 by rpki-client