Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A92EB190205011F1BC3084BADAE4EC9C.roa
File: A92EB190205011F1BC3084BADAE4EC9C.roa (raw, json)
Hash identifier: pgcra2oq9bq20TAHl6xgY+uco4eGj1vCom8znEH8ioA=
Subject key identifier: FE:C0:15:86:E3:56:DE:B2:16:53:B7:74:02:77:CF:5D:B1:EA:24:C9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A543
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A92EB190205011F1BC3084BADAE4EC9C.roa
Signing time: Sun 15 Mar 2026 09:23:44 +0000
ROA not before: Sun 15 Mar 2026 09:23:38 +0000
ROA not after: Wed 22 Apr 2026 09:23:38 +0000
asID: 273986
IP address blocks: 45.194.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107843 (0x1a543)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 15 09:23:38 2026 GMT
Not After : Apr 22 09:23:38 2026 GMT
Subject: CN=69b67aa0-5eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cd:f7:11:f5:4e:e5:dd:c8:46:80:2f:5f:cd:
5e:50:e6:9e:a1:3d:77:52:1c:b4:c6:ce:34:c7:55:
8f:0d:13:f7:c6:87:8e:59:bd:aa:56:e9:6a:cc:a3:
94:5f:cc:b3:24:da:ba:fa:36:20:08:c5:4f:85:7b:
6f:32:86:43:72:8e:ab:02:27:bc:48:34:73:85:cf:
03:71:f4:f8:e3:cd:72:cb:ea:fd:d3:dc:bf:b6:9d:
fb:03:08:2e:36:67:c5:45:eb:e5:c5:44:e3:99:cd:
6a:e3:e0:5f:21:23:9f:82:c8:55:74:3f:ca:7e:39:
07:1c:ab:11:43:6f:45:b9:1e:00:1c:28:7f:52:78:
8c:50:7a:bd:92:8b:85:1d:19:8c:63:ea:b3:6e:1b:
2c:69:d6:49:77:9c:a9:04:26:9d:79:1f:ca:a6:ff:
fd:71:09:56:e3:89:24:63:03:fb:ce:92:83:0b:dc:
65:79:83:dc:f4:49:dc:30:0b:b2:6e:78:82:d9:c2:
18:19:13:93:db:f8:f6:81:38:e3:33:f1:e2:34:f2:
37:d1:e3:7b:89:49:9b:f8:04:30:46:e0:f4:4e:31:
31:35:02:2c:27:e6:7d:d8:47:d0:04:7c:aa:79:25:
6b:c3:22:ba:85:df:d4:bd:f4:f0:a4:3d:69:9a:3a:
42:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:C0:15:86:E3:56:DE:B2:16:53:B7:74:02:77:CF:5D:B1:EA:24:C9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A92EB190205011F1BC3084BADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.119.0/24
Signature Algorithm: sha256WithRSAEncryption
71:b6:ad:0f:c2:df:ff:cd:ab:4b:c5:da:93:3d:65:17:75:a6:
af:29:4c:07:36:ac:c4:67:b9:8e:6b:a9:f8:3e:16:12:86:83:
a2:0a:d8:09:34:d7:98:d6:4f:58:4a:9e:9b:1a:b4:bc:41:82:
e2:10:7a:8c:ac:60:fa:c6:a1:90:e1:96:c1:0d:e4:7d:54:8c:
9e:97:cf:3e:09:50:94:54:0d:73:dd:23:2b:e0:da:03:31:ea:
21:75:42:b7:09:a0:81:fe:3c:67:55:b3:30:85:ba:95:85:e3:
91:28:64:f9:0f:7d:73:ae:f4:ee:55:98:b1:e4:ae:e0:1d:5f:
e2:73:10:11:90:77:71:43:85:89:b3:15:e5:b9:f7:82:6e:35:
50:39:75:f1:34:d6:39:26:cd:86:88:f1:7a:09:63:03:01:d7:
ee:09:5f:fa:ed:5b:b8:9e:23:c6:62:e6:96:06:4c:63:a6:e1:
de:a4:54:3b:db:e2:02:cc:8e:e1:79:7b:b6:b6:a4:af:40:e1:
ae:a6:69:db:d5:f8:24:a3:2c:cf:c2:cc:c5:6e:37:3c:b8:9d:
74:73:ed:26:09:f7:b7:96:8c:fd:22:56:b4:7f:8b:83:a6:b8:
9a:ec:66:65:5a:3b:ed:b9:c0:0e:bd:fe:f6:6f:fc:3c:3d:e5:
5e:71:cb:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:10:15 2026 by rpki-client