Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/873CF7E6253B11F1B5F681D9DAE4EC9C.roa
File: 873CF7E6253B11F1B5F681D9DAE4EC9C.roa (raw, json)
Hash identifier: NhNOTmEIV2kEFoBiCpRcvhd6MVkldp3jtSJTDnCm3dA=
Subject key identifier: FF:80:C9:FC:D9:3A:B9:62:75:91:17:13:45:58:C7:AF:30:EC:E5:48
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A67E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/873CF7E6253B11F1B5F681D9DAE4EC9C.roa
Signing time: Sat 21 Mar 2026 15:35:03 +0000
ROA not before: Sat 21 Mar 2026 15:34:57 +0000
ROA not after: Tue 28 Apr 2026 15:34:57 +0000
asID: 202656
IP address blocks: 45.192.49.0/24 maxlen: 24
45.199.192.0/24 maxlen: 24
45.199.193.0/24 maxlen: 24
45.199.194.0/24 maxlen: 24
45.199.195.0/24 maxlen: 24
45.199.196.0/24 maxlen: 24
45.199.197.0/24 maxlen: 24
45.199.198.0/24 maxlen: 24
45.199.199.0/24 maxlen: 24
45.199.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108158 (0x1a67e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 21 15:34:57 2026 GMT
Not After : Apr 28 15:34:57 2026 GMT
Subject: CN=69bebaa7-2739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:03:72:ee:35:53:02:6f:7c:b5:2d:b0:7a:d6:
ea:b0:1c:cf:03:ec:1e:61:22:a3:dd:65:71:c1:ac:
45:13:8d:7c:ba:69:6f:2a:ec:37:da:85:1d:c8:ad:
bc:22:38:fd:2f:82:f9:71:81:66:3c:af:d9:73:b7:
99:e5:a1:fd:1c:c2:04:f0:4a:b0:a1:13:cd:25:60:
62:5c:73:0a:62:b8:3b:31:bf:11:ed:dc:dd:82:f2:
ec:76:d7:8d:00:b7:73:04:eb:f0:48:2c:2d:67:d1:
b5:92:f4:20:86:6d:7d:aa:6b:48:d7:07:a0:c3:32:
13:c1:53:c1:c1:8d:f3:1e:8c:77:04:0a:9b:5c:b5:
06:cb:b6:1e:bf:2b:eb:b8:39:79:3f:c9:0e:1e:e4:
1a:9b:94:a3:c6:7e:17:8c:ea:49:43:fd:a3:cd:b5:
ab:dd:99:bc:79:93:97:45:45:1e:dc:1a:b3:75:c0:
f0:4c:3f:72:d0:4a:c2:ef:46:80:96:0c:d8:c4:70:
7f:c7:fc:ca:55:b6:44:06:b8:26:84:f2:de:9d:01:
72:83:70:1a:29:79:a1:e0:86:1a:cf:27:5e:91:12:
f7:dd:cb:51:43:4c:4a:ec:90:19:13:65:06:b9:04:
79:95:79:54:1a:34:05:3c:8c:5b:e0:88:aa:a0:76:
89:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:80:C9:FC:D9:3A:B9:62:75:91:17:13:45:58:C7:AF:30:EC:E5:48
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/873CF7E6253B11F1B5F681D9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.49.0/24
45.199.192.0-45.199.200.255
Signature Algorithm: sha256WithRSAEncryption
50:cd:bc:ca:ff:09:6c:a5:b0:47:40:79:c3:ae:28:ef:fb:f7:
e8:84:01:5c:29:ac:d6:22:ff:91:70:5e:ee:35:60:b9:b3:6b:
8f:59:16:a6:19:35:29:7c:55:8b:42:6b:41:d6:2a:9b:5a:06:
a4:37:5a:af:c5:4c:f3:b5:45:00:fc:d5:21:0e:3a:e5:3d:3d:
ed:94:67:2b:d5:a5:ef:9d:5c:72:59:48:e2:d1:32:2d:f1:bb:
89:f6:ef:7d:40:54:0c:29:cc:10:69:24:48:8e:31:41:b1:85:
b7:53:3d:0e:79:d2:bc:17:10:d3:83:76:5a:fb:f6:74:18:d9:
14:95:41:f8:50:11:c1:d2:c6:41:e0:cb:2a:32:46:b6:3c:07:
72:82:28:ac:59:39:53:c4:f2:ae:9a:60:4d:56:10:f7:28:84:
7e:de:86:34:0b:66:15:09:75:fe:c2:10:9b:b4:dd:c7:a8:32:
0b:f5:91:36:f8:e4:2f:92:7e:9d:58:28:20:a8:96:72:f3:e5:
e0:05:cb:75:24:ac:85:4b:44:40:78:7e:d7:77:44:5f:40:99:
3b:c4:6c:7a:f5:50:27:5c:d0:dc:02:5d:0d:96:53:02:c7:3e:
aa:ed:f4:2c:59:dd:39:52:ac:61:44:2f:8d:ea:0e:56:4d:a5:
e2:cb:56:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:11:15 2026 by rpki-client