Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B24A17E21D1C11F18C861D88DAE4EC9C.roa
File: B24A17E21D1C11F18C861D88DAE4EC9C.roa (raw, json)
Hash identifier: A4/kYFPEV8CwG5UjwpVr9yaO9Bbhd/107Qx2hzLFo3k=
Subject key identifier: 0C:8F:5A:B9:F3:DC:14:6D:44:2B:12:92:51:9A:3E:6F:61:EA:BA:DD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A406
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B24A17E21D1C11F18C861D88DAE4EC9C.roa
Signing time: Wed 11 Mar 2026 07:34:11 +0000
ROA not before: Wed 11 Mar 2026 07:34:07 +0000
ROA not after: Thu 16 Apr 2026 07:34:07 +0000
asID: 211577
IP address blocks: 45.194.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107526 (0x1a406)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 11 07:34:07 2026 GMT
Not After : Apr 16 07:34:07 2026 GMT
Subject: CN=69b11af3-cb97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f8:71:d8:e7:92:4f:47:d8:ec:02:e6:1e:03:
87:10:2d:d5:28:47:45:b7:80:08:d2:06:a4:7d:51:
86:aa:b1:7d:cd:da:51:a7:5b:6b:b3:28:1d:03:29:
64:f9:24:a6:c9:d9:b3:c4:9c:88:7b:8b:d4:93:f1:
ac:a0:34:0d:cb:78:c0:42:31:6d:b9:8d:ca:c4:c2:
c8:73:df:9f:6a:84:7a:52:a2:f9:20:c0:fd:99:33:
43:ad:56:bd:40:4a:9d:96:36:28:6a:57:8f:47:7b:
7b:f0:f2:11:cf:0f:3a:f7:20:35:95:5a:a5:49:8b:
7d:cb:e8:a9:fe:4a:57:7a:8d:31:e9:17:6b:17:4c:
20:93:f1:1c:cc:15:20:d2:f0:5b:10:a3:91:97:80:
53:5c:6a:04:db:02:6f:f1:9a:9f:b6:99:25:9b:ac:
45:a7:59:7f:ac:7d:d1:02:76:9e:89:b6:bc:f3:f9:
fa:88:c6:5a:85:52:37:8f:a9:ce:68:4a:ca:44:3d:
1e:09:11:9e:87:03:fe:39:2f:d9:30:b5:1f:4e:2d:
cd:20:45:57:bd:db:48:89:26:07:61:57:ed:4d:9f:
20:18:c2:35:75:09:f5:9b:f3:10:9f:85:70:48:62:
80:4c:6d:f6:c3:c3:0e:3e:af:96:7c:1a:2d:2f:84:
f4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:8F:5A:B9:F3:DC:14:6D:44:2B:12:92:51:9A:3E:6F:61:EA:BA:DD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B24A17E21D1C11F18C861D88DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.83.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:11:aa:88:a3:14:34:1a:99:6d:0c:9b:17:79:4e:fd:bb:13:
bd:0d:c5:35:2a:8f:9e:cf:30:6a:e8:5f:e6:96:62:ab:d8:71:
07:d5:f6:91:8b:f0:e2:af:c5:35:a9:5e:f7:ca:3d:4a:75:bf:
57:95:fe:62:a1:b7:9f:13:ee:ae:bc:b6:43:3d:37:fc:7c:13:
83:64:24:00:55:c8:c4:38:ca:94:84:ac:c7:15:78:b9:09:94:
27:8f:99:93:1d:af:56:fa:5b:8e:f5:04:e6:b8:a9:76:ba:09:
5a:b3:74:cc:7e:34:b3:da:71:7c:21:50:ec:4c:ce:e8:1f:e6:
0e:f6:ee:35:d6:f6:aa:ab:6d:c1:54:f5:09:c7:24:fe:67:96:
c8:8e:e8:4b:cc:38:5b:b4:55:4e:90:ae:9a:e8:8f:62:d9:05:
99:22:8a:b7:84:00:9f:89:25:6c:c6:88:43:5f:d2:35:71:98:
fe:87:9d:82:93:4b:25:13:fb:2d:c0:a6:c2:b3:a3:7a:39:d0:
1c:66:c3:31:ea:f3:c4:06:e7:51:74:1c:13:c6:a4:7a:41:2c:
bd:01:ab:fd:e4:3a:98:22:25:33:51:eb:74:91:a6:b7:4b:2d:
d8:74:15:59:4f:09:4b:55:b9:aa:52:40:4d:a9:cc:fc:d1:48:
b5:e9:a4:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:15:18 2026 by rpki-client