Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B5D86D481D1511F19F1E2FDFDAE4EC9C.roa
File: B5D86D481D1511F19F1E2FDFDAE4EC9C.roa (raw, json)
Hash identifier: oo8V9oy861yLX24OKkitFf8L+JQtmeExRnUA54M2sMo=
Subject key identifier: 49:85:43:E9:43:63:CF:E7:71:1C:C4:90:20:70:86:F3:73:7D:8B:E9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A3F2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B5D86D481D1511F19F1E2FDFDAE4EC9C.roa
Signing time: Wed 11 Mar 2026 06:44:11 +0000
ROA not before: Wed 11 Mar 2026 06:44:07 +0000
ROA not after: Wed 13 May 2026 06:44:07 +0000
asID: 142286
IP address blocks: 45.207.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 14:20:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107506 (0x1a3f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 11 06:44:07 2026 GMT
Not After : May 13 06:44:07 2026 GMT
Subject: CN=69b10f3b-a662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:95:ab:41:d7:23:ad:ab:8f:2b:d5:4a:ce:b7:
d1:2e:91:3a:32:3f:8c:59:32:e4:59:df:0f:ea:c2:
41:37:a0:0c:09:0e:e2:22:7a:ee:59:fa:42:a7:31:
14:6b:b6:38:78:b8:1e:aa:7f:46:a8:c9:3e:92:c8:
26:af:cb:a6:55:1c:ae:2b:40:4c:ce:af:d0:19:f3:
eb:de:30:a4:8a:d9:b2:53:dc:90:3f:17:e8:0f:e9:
67:4c:27:94:d0:bb:8b:e3:9d:70:24:c2:40:df:7a:
e9:b4:93:d0:33:08:21:f7:74:96:3d:2a:6f:c1:fe:
7b:0d:d4:2c:95:59:2f:a2:91:92:a3:b8:52:77:48:
06:30:39:9c:86:87:38:4f:9d:9f:e4:32:2a:3c:c2:
f0:4b:45:98:7e:47:43:b3:b8:3a:e2:94:98:2c:2a:
1f:f9:20:72:78:84:26:c7:cc:64:3b:61:1f:ae:e6:
0b:74:21:3f:ec:b0:1d:e9:92:aa:26:c4:6c:ff:54:
d0:0e:d4:e5:af:b2:4e:d8:6e:f3:d9:77:99:b0:37:
44:39:8f:39:cc:a6:d4:0b:01:b0:b9:f9:40:84:81:
50:b5:2c:51:81:a1:a8:a9:8d:3d:18:ce:f3:8f:d1:
54:17:5e:2f:73:7d:1e:da:75:56:fc:c5:b6:a0:a7:
a9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:85:43:E9:43:63:CF:E7:71:1C:C4:90:20:70:86:F3:73:7D:8B:E9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B5D86D481D1511F19F1E2FDFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.64.0/18
Signature Algorithm: sha256WithRSAEncryption
21:12:1b:bd:61:00:ad:c3:51:09:bd:f5:38:31:48:cf:97:65:
cd:fd:74:36:87:cd:73:e0:46:e3:de:d3:f3:dd:65:ec:d8:6d:
69:17:36:6c:6a:82:34:a9:62:6b:24:98:7c:3c:81:c3:ba:c7:
04:cb:f5:79:45:82:fb:1f:89:bb:a4:12:c2:2c:be:ba:49:f8:
ca:e3:a8:a5:ab:96:df:fc:aa:95:c2:a3:e8:c4:2d:cc:4f:93:
7e:8f:e9:99:25:ae:84:5c:15:71:ef:f9:d0:bf:fd:e9:f5:3c:
00:35:24:d5:23:cd:e5:4a:14:d0:a2:b0:8d:c0:67:00:c5:01:
ab:b6:e0:96:91:c9:65:e0:08:71:fc:ad:55:72:2f:e2:fc:65:
9d:df:a1:3f:81:9e:0b:41:ea:e5:4f:c2:d4:d8:20:a5:92:39:
1b:c8:2f:f1:81:3f:80:2e:66:cd:ce:ad:5c:43:ed:c0:06:72:
b7:45:ad:4c:b9:47:b0:dc:38:e8:69:81:76:26:69:f2:ae:08:
a4:46:72:a2:fe:8d:c1:2c:78:3e:7e:bd:fc:d1:e1:95:69:08:
8b:48:02:50:75:c9:6f:ff:0c:5f:32:20:b6:73:58:97:5c:77:
01:7b:79:88:e7:c2:01:3d:bf:31:bb:ad:3f:78:86:e4:56:bc:
d4:70:e8:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:23:05 2026 by rpki-client