Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B2C9A6C6210711F1A4521CE6DAE4EC9C.roa
File: B2C9A6C6210711F1A4521CE6DAE4EC9C.roa (raw, json)
Hash identifier: at1hhA3CUjnioadbIXZVTMRqMMK03tVLauzqtOl6N+k=
Subject key identifier: 3B:8C:EC:3F:D5:E8:A3:71:0E:02:3B:63:5D:EB:9D:B8:12:24:AE:ED
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A55E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B2C9A6C6210711F1A4521CE6DAE4EC9C.roa
Signing time: Mon 16 Mar 2026 07:13:58 +0000
ROA not before: Mon 16 Mar 2026 07:13:52 +0000
ROA not after: Mon 20 Apr 2026 07:13:52 +0000
asID: 397423
IP address blocks: 45.194.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107870 (0x1a55e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 16 07:13:52 2026 GMT
Not After : Apr 20 07:13:52 2026 GMT
Subject: CN=69b7adb6-1d72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:bf:07:90:14:4b:2d:46:92:51:03:b3:cd:94:
4e:d2:64:c2:7a:b9:48:38:5f:ab:97:10:50:91:5f:
fd:89:1c:bf:65:1b:28:03:ab:e9:c2:44:6a:35:09:
13:f2:6f:80:32:56:98:81:c6:c7:5a:0a:b3:61:4d:
ea:b7:c1:6b:6f:5a:7e:00:d8:b6:38:1d:f6:d6:db:
15:86:a9:1b:b1:34:7c:91:73:60:d6:6b:92:47:e4:
93:e1:99:75:5a:18:d3:83:a4:c2:df:08:77:85:65:
34:ff:52:68:48:a8:82:9b:59:59:14:fb:0b:46:87:
f4:0c:f3:1c:8b:c0:19:93:74:c5:ab:ef:13:5e:56:
ee:b1:71:72:dd:07:aa:45:79:55:22:2a:52:80:4e:
b1:95:b3:29:a8:a8:bf:aa:be:69:96:af:db:e1:45:
96:b4:cd:e7:ff:8e:c4:1e:0d:be:1b:33:18:66:31:
b9:cf:a5:fc:d8:94:4e:f6:34:23:e0:f2:5e:47:4b:
28:76:74:6b:37:13:fa:aa:d7:6a:0e:2d:0b:01:a2:
5d:e8:dd:63:70:b2:d7:a7:ac:26:88:c8:83:c2:b9:
c3:76:5c:4a:41:b9:2b:35:14:f5:f1:ca:d9:3f:c6:
71:cc:f2:a9:b8:64:49:04:52:06:92:b9:4d:e4:54:
02:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:8C:EC:3F:D5:E8:A3:71:0E:02:3B:63:5D:EB:9D:B8:12:24:AE:ED
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B2C9A6C6210711F1A4521CE6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.54.0/24
Signature Algorithm: sha256WithRSAEncryption
08:98:5b:f3:49:1b:f4:28:85:ec:f4:7b:4a:79:1d:a1:32:3c:
b5:1f:c4:7c:3e:43:90:3b:10:38:e2:43:8c:9a:86:aa:eb:08:
8f:73:e8:b8:a3:98:d3:83:bb:52:dd:c0:08:9f:7d:6a:94:42:
42:36:fe:cf:72:28:0d:e2:e4:b5:b3:00:87:80:7a:42:b6:7c:
fe:b1:7c:95:23:3b:65:9b:ca:c3:7f:04:25:24:98:1b:98:33:
77:dd:d9:7e:60:67:f0:0b:1e:27:85:b4:97:54:6b:e6:1e:b5:
cb:60:47:3d:ed:47:f6:af:e5:9b:c3:c4:48:8b:6f:46:59:99:
73:57:1f:28:b9:7c:48:95:76:3d:d9:9c:1b:7b:f4:3c:fe:c4:
08:29:4e:a7:f9:5a:b3:8d:a6:f8:bc:a2:b4:e6:f0:f0:ff:2d:
33:da:00:f6:93:d4:cd:79:1f:68:85:97:e2:ec:54:aa:b9:5c:
aa:fe:59:0e:e4:4c:e9:ef:f2:0b:13:7a:29:c4:02:72:cf:2e:
1b:31:37:52:b1:9b:a6:81:ca:80:04:52:c9:39:83:0c:3c:f7:
35:28:f8:7e:d5:bf:54:44:79:4b:b4:d3:0f:54:78:3d:62:ba:
8a:15:76:6b:64:07:82:cf:48:92:50:3d:56:ea:40:0e:70:8d:
f6:c4:ac:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:15:46 2026 by rpki-client