Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8BF77C8E1EB011F1BE8FA3C1DAE4EC9C.roa
File: 8BF77C8E1EB011F1BE8FA3C1DAE4EC9C.roa (raw, json)
Hash identifier: B/gh6JmomIlwYAmOF9WLkEjIfmHvdGSiGMXT4CfD4wc=
Subject key identifier: AE:12:21:55:DD:35:EC:44:68:01:89:93:CD:F5:BE:44:D0:21:08:24
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A4D9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8BF77C8E1EB011F1BE8FA3C1DAE4EC9C.roa
Signing time: Fri 13 Mar 2026 07:45:04 +0000
ROA not before: Fri 13 Mar 2026 07:45:00 +0000
ROA not after: Tue 16 Jun 2026 07:45:00 +0000
asID: 142002
IP address blocks: 45.197.12.0/24 maxlen: 24
45.197.13.0/24 maxlen: 24
45.197.14.0/24 maxlen: 24
45.197.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107737 (0x1a4d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 13 07:45:00 2026 GMT
Not After : Jun 16 07:45:00 2026 GMT
Subject: CN=69b3c07f-84a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e8:43:40:3c:82:5a:9c:7f:c3:a4:3a:12:23:
c0:f4:2d:93:5a:65:b8:83:d4:af:a4:4c:88:e8:59:
bd:3d:99:01:46:17:65:75:85:91:a1:63:ac:6a:33:
cf:72:16:14:01:15:9e:3c:9d:48:94:b5:06:a3:80:
3a:d3:1a:7d:db:36:5d:c8:b2:89:cd:a9:49:b2:89:
8f:12:1d:d5:28:5e:8e:d0:12:e8:85:4a:7c:8e:48:
5e:ed:0b:d6:9e:07:c5:a3:83:de:ec:c0:b4:53:ec:
68:83:50:83:ec:65:8d:23:83:80:08:ff:2f:0c:4e:
f3:5f:c5:31:8f:18:86:63:ac:c5:85:7a:64:6c:ee:
4e:d4:7b:d8:e8:88:e5:60:cf:dc:00:4d:de:b2:6c:
ad:2a:35:24:b9:29:db:1a:2b:a3:4d:60:15:e6:23:
3e:60:ac:02:11:31:82:57:e1:40:a2:83:51:15:f1:
e1:ad:7c:dd:e2:63:c8:4d:45:71:b2:88:67:ff:c1:
18:64:cc:00:85:d3:7e:72:f7:d3:90:aa:70:f4:b3:
c5:18:5c:a5:6b:5b:6c:a0:55:32:bd:f9:65:48:e9:
5a:bd:ac:fb:39:b4:b7:71:4b:e6:e4:b0:33:1c:44:
2a:dc:21:eb:95:c8:6f:df:0b:ae:34:0e:1a:f8:84:
59:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:12:21:55:DD:35:EC:44:68:01:89:93:CD:F5:BE:44:D0:21:08:24
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8BF77C8E1EB011F1BE8FA3C1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.12.0/22
Signature Algorithm: sha256WithRSAEncryption
98:66:7e:b4:6c:0c:15:a4:98:d2:8f:4f:74:66:51:af:4f:e9:
88:e3:18:92:1c:eb:11:6a:2b:38:78:0a:8c:2b:5c:cd:5f:d7:
77:de:49:2e:a5:c0:91:c0:07:18:84:8a:8f:86:ac:1a:5e:d1:
b5:fd:01:9f:f1:f4:22:15:ac:48:2a:8c:75:58:72:d6:53:ec:
39:f8:08:79:c5:76:7f:e4:b8:0f:b1:e2:2e:11:36:95:bd:9f:
64:26:fe:ce:dd:a8:bb:ca:a6:3f:39:d4:3a:79:7d:52:dd:a0:
da:86:28:19:c7:30:69:d5:c6:6c:8f:21:c3:b9:4a:ac:7c:7d:
e3:d5:6c:61:6e:79:d8:7a:b6:13:2d:cc:c8:b4:3d:1f:f6:fc:
84:09:96:eb:48:1b:50:89:aa:ed:0d:dd:74:32:d7:39:8b:ff:
0a:9e:7a:51:70:6c:cf:d8:ca:22:5d:6c:0c:c4:97:3d:49:47:
e9:f9:6f:90:c9:91:ed:a5:31:f2:82:5d:38:a5:bc:72:e8:32:
b2:18:5f:a8:86:80:59:17:c5:ca:d4:4f:46:8c:2a:11:64:a4:
8c:39:64:1f:48:0a:4c:03:38:c9:4c:5d:58:83:f9:34:f3:08:
4e:83:b3:53:03:68:15:cb:66:34:fe:35:c9:71:ae:ad:50:05:
2b:2e:52:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:10:25 2026 by rpki-client