Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8AD69F2C252E11F18C9AA091DAE4EC9C.roa
File: 8AD69F2C252E11F18C9AA091DAE4EC9C.roa (raw, json)
Hash identifier: t1vR+HDQXlIr0XlzGz/BqIk2xL0jaxRvjx26h4SbrrQ=
Subject key identifier: 06:A4:5D:B1:9E:3E:75:8B:7D:11:48:79:A4:BF:59:F6:40:61:5F:C0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A66A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8AD69F2C252E11F18C9AA091DAE4EC9C.roa
Signing time: Sat 21 Mar 2026 14:02:06 +0000
ROA not before: Sat 21 Mar 2026 14:02:01 +0000
ROA not after: Tue 28 Apr 2026 14:02:01 +0000
asID: 202656
IP address blocks: 45.192.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108138 (0x1a66a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 21 14:02:01 2026 GMT
Not After : Apr 28 14:02:01 2026 GMT
Subject: CN=69bea4de-ba66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3e:55:8e:04:3e:ea:8e:b7:1f:42:34:fb:83:
92:ea:a1:cf:5f:00:b8:5e:7b:f8:ab:b2:ea:ed:4e:
bb:aa:e9:f6:ce:4c:1e:20:92:4d:91:d8:2f:05:10:
3d:84:c1:6c:7a:b6:61:d8:63:2c:d7:e8:ec:44:fb:
1f:83:c6:da:9b:74:3f:c1:74:f4:f9:6f:9e:5f:b6:
fd:4d:b1:f1:74:cf:a6:8f:31:ca:6f:fa:be:45:c7:
60:2a:ed:88:c9:31:8a:e6:6f:cf:c2:24:e2:b4:bf:
be:b2:cd:9d:4d:ce:23:5f:6f:be:b5:3e:e6:31:ed:
45:87:bb:65:a6:2d:ba:7e:a4:eb:a5:9d:0a:bc:79:
ab:64:7d:07:d2:24:b1:5a:1d:8b:2d:36:62:0d:bf:
25:19:9c:b9:1d:ab:a5:7f:0f:9e:74:73:88:85:07:
65:dd:41:f8:e4:98:8a:6d:d1:bf:5b:7c:dd:4c:ca:
a2:44:e9:3c:9a:fb:09:35:fa:d5:d1:dc:0d:a2:5e:
43:ed:6f:ab:76:2b:8c:13:43:b0:05:31:e6:44:01:
ff:9f:e3:25:e5:2a:85:ce:aa:42:0e:b2:65:33:18:
00:ab:32:ec:d1:59:a4:00:34:42:94:39:39:3d:73:
4d:f9:55:bb:f0:0d:35:67:b0:30:47:23:10:8c:f1:
49:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:A4:5D:B1:9E:3E:75:8B:7D:11:48:79:A4:BF:59:F6:40:61:5F:C0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8AD69F2C252E11F18C9AA091DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.62.0/24
Signature Algorithm: sha256WithRSAEncryption
23:af:20:06:12:89:6a:1b:c3:6d:ab:ed:33:5c:06:30:85:11:
eb:5f:a9:db:8d:03:db:51:96:be:14:1b:79:5d:74:47:3b:cb:
3a:b1:79:97:a4:e9:a7:39:73:90:02:d5:12:af:14:42:1e:e4:
26:16:c8:4f:65:04:e1:4e:bb:fd:e5:38:c5:8d:25:98:d8:87:
c1:ff:6c:66:46:e1:f6:52:82:14:fd:3c:f9:e6:46:fa:65:79:
a6:40:57:b8:70:1d:58:97:c4:fc:cd:af:d7:23:f5:34:c4:ab:
dd:61:0b:38:aa:21:31:b8:da:26:92:84:2a:84:e8:0b:3f:14:
0b:11:3e:39:ca:24:20:c7:3c:1c:24:39:9c:0b:35:89:82:39:
e6:90:ec:f9:f1:8d:69:2c:4d:02:2e:90:b0:ad:a9:a0:e4:f9:
c5:4b:f1:db:c1:d6:1a:86:44:a3:59:95:5a:ca:aa:3f:4d:e3:
6e:3e:03:61:0e:8b:1c:b6:53:a4:ef:53:7e:2e:1f:f5:30:ff:
51:57:00:7e:a2:b3:14:16:11:10:a1:1d:5e:19:38:7e:a6:20:
45:d5:e8:a6:d8:51:0d:18:73:29:aa:11:b7:79:82:25:7e:20:
bf:61:c8:cd:5c:2d:a0:1b:1e:fd:c3:36:2c:29:ec:5c:d8:9a:
b2:7e:6b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:10:52 2026 by rpki-client