Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7D071E88204E11F1A045D6AEDAE4EC9C.roa
File: 7D071E88204E11F1A045D6AEDAE4EC9C.roa (raw, json)
Hash identifier: wlJnnTgTfnTprOdkQ4Lwax7H+mxNm4++Tv+n67Xsmrc=
Subject key identifier: EF:96:97:3D:95:56:44:51:2B:8B:C3:81:CE:1B:21:69:55:01:96:E4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A53D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7D071E88204E11F1A045D6AEDAE4EC9C.roa
Signing time: Sun 15 Mar 2026 09:08:11 +0000
ROA not before: Sun 15 Mar 2026 09:08:06 +0000
ROA not after: Tue 21 Apr 2026 09:08:06 +0000
asID: 271875
IP address blocks: 45.195.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107837 (0x1a53d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 15 09:08:06 2026 GMT
Not After : Apr 21 09:08:06 2026 GMT
Subject: CN=69b676fb-56c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:4e:3b:0a:ff:5d:09:84:ba:b4:8d:e3:83:bc:
98:0b:5a:56:a8:53:63:9d:c0:10:ac:ab:41:81:9a:
fb:d3:c0:d8:d1:d5:9e:31:c3:f6:86:21:95:bb:42:
b1:60:e6:ed:ef:98:13:e7:66:d3:e2:83:fa:83:52:
9a:5c:75:c8:10:b7:8f:c7:9b:00:30:e2:72:be:55:
04:54:06:9d:28:e8:0b:b2:d8:99:90:e0:5c:d4:64:
0b:bb:cb:b8:27:86:3c:2d:df:ac:78:3a:de:49:e2:
c7:a0:03:61:0e:83:64:c0:e6:f3:20:05:89:7e:6a:
ff:eb:78:30:35:04:23:61:82:f0:fa:66:85:1a:ea:
2e:69:7a:f3:87:03:4e:d2:32:c4:e5:28:82:bd:69:
28:cd:b1:6f:94:71:25:98:07:37:01:ef:a3:18:b0:
e9:54:40:21:87:93:64:fa:32:97:1d:60:23:5d:a4:
58:24:66:8c:df:71:11:1d:f0:35:03:5b:93:69:b4:
f2:01:fc:a8:6c:a8:0a:c6:8d:b9:0b:cf:c4:aa:71:
aa:14:70:bd:9e:d0:45:18:e2:55:96:20:40:d8:24:
f1:34:03:e5:82:41:d4:20:e4:d5:15:a7:ad:d3:cc:
05:03:76:4d:53:b9:a5:cd:10:a9:1c:a1:fc:24:17:
12:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:96:97:3D:95:56:44:51:2B:8B:C3:81:CE:1B:21:69:55:01:96:E4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7D071E88204E11F1A045D6AEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.25.0/24
Signature Algorithm: sha256WithRSAEncryption
74:11:c3:fb:07:47:9f:88:32:03:07:1b:0d:c3:e7:23:6c:7d:
71:73:7f:00:74:02:43:3c:70:fc:5d:d4:f8:c1:50:88:e8:55:
07:a1:58:7e:77:0d:2b:f5:a7:3c:bf:5a:7e:f4:4b:4f:dc:e1:
cd:a8:e5:0b:7a:1e:33:6f:82:2c:02:62:60:9d:d4:d4:68:01:
cb:00:8e:e5:c5:9a:bb:e0:64:02:e6:9e:a1:85:44:6c:6e:05:
87:b7:9c:40:74:30:5a:f0:3d:92:ea:02:5a:8a:4c:1c:c5:09:
62:a6:80:50:31:2c:9d:cb:68:91:9a:90:67:0d:29:b0:3c:ca:
25:5b:c7:e9:c7:dc:c9:38:c4:ad:ed:81:73:b4:82:24:a2:6f:
ab:cc:34:55:18:01:bd:0c:79:bc:3f:14:a4:fb:fc:b3:b2:77:
1c:21:78:97:d1:2c:96:74:dd:9f:71:d9:1d:ef:a0:cc:6b:2e:
10:ce:29:dc:63:57:a8:f7:c4:c5:26:39:29:67:f4:b3:e3:fd:
8a:6d:59:8a:24:51:f0:66:f0:d2:e7:a5:5b:64:07:99:f8:33:
08:f4:d1:d3:15:7a:87:2a:cd:db:09:49:5e:5d:93:54:a8:cc:
fe:13:23:ac:48:04:88:d5:14:98:a6:7c:ad:e6:74:3c:81:20:
cc:f4:43:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:15:31 2026 by rpki-client