Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B982B1B61E1D11F1B9D161DDDAE4EC9C.roa
File: B982B1B61E1D11F1B9D161DDDAE4EC9C.roa (raw, json)
Hash identifier: UgiOOfgYrNg51GVbS/SNdJQerhzymFDOWuH45PLiSVk=
Subject key identifier: CF:82:BE:D2:C5:56:A7:10:F0:A1:52:86:F0:A8:1B:FC:9A:B9:91:7E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A4AC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B982B1B61E1D11F1B9D161DDDAE4EC9C.roa
Signing time: Thu 12 Mar 2026 14:14:04 +0000
ROA not before: Thu 12 Mar 2026 14:13:59 +0000
ROA not after: Sat 04 Apr 2026 14:13:59 +0000
asID: 44509
IP address blocks: 45.207.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107692 (0x1a4ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 12 14:13:59 2026 GMT
Not After : Apr 4 14:13:59 2026 GMT
Subject: CN=69b2ca2c-b0a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cf:f3:f4:90:ea:28:42:f9:f7:44:2d:76:22:
65:6a:ff:2e:01:1c:d2:55:6c:f2:02:44:36:a6:ce:
da:10:54:34:15:26:20:15:34:d6:76:c3:ad:f9:78:
06:60:97:b4:18:0b:00:4f:47:37:3c:1a:1d:b0:33:
18:72:85:9f:d4:e7:10:4b:68:33:a6:e0:6f:ad:6f:
9d:46:f8:e6:bc:e0:7f:b9:4d:9e:a4:36:21:0b:56:
ab:87:9a:4a:a8:89:cf:b1:93:46:04:d6:4f:96:90:
16:b4:4a:ef:24:26:27:59:14:6d:7d:e6:8d:76:09:
2a:38:7f:94:61:b8:a3:04:8d:1d:12:f5:e9:73:d9:
38:35:e8:5c:8a:72:90:25:1b:69:d5:a5:7b:66:27:
4a:e6:5b:9b:95:4e:7d:d6:18:00:89:cb:5c:f6:47:
4b:84:b7:90:ec:9c:19:68:97:2c:db:80:13:99:53:
18:ac:04:62:76:ed:31:36:3a:10:23:ba:61:e8:7a:
16:fb:1e:71:e9:e4:42:36:6a:13:92:1c:0d:b6:0a:
b9:5c:7c:24:b7:17:8c:e9:d8:6f:74:27:10:df:29:
12:06:9a:f3:82:8b:5f:f0:f3:2e:d2:07:fc:cb:91:
b3:74:8a:db:1f:f1:ea:48:7b:ca:ec:f0:e2:00:4f:
10:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:82:BE:D2:C5:56:A7:10:F0:A1:52:86:F0:A8:1B:FC:9A:B9:91:7E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B982B1B61E1D11F1B9D161DDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.40.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:32:36:a6:d3:4e:ec:bb:74:a2:cb:3a:6b:04:13:fa:f1:98:
39:5f:cc:fb:15:88:9e:56:14:dc:e0:a8:c9:15:ca:3d:eb:c9:
0c:c8:e9:b2:89:9e:e6:5d:16:74:84:94:4c:a2:40:fb:01:bf:
47:cd:b4:d2:de:47:a4:ce:83:c5:0d:59:f7:5f:68:26:b8:dc:
e1:c2:53:f8:97:80:c3:b6:cb:de:fd:20:20:fd:94:00:b1:1c:
00:10:53:1f:72:5e:3d:e5:70:c6:27:07:77:af:ba:8a:05:b5:
71:d6:93:bb:2d:ac:17:a6:e8:1b:9f:e1:f9:1f:8c:42:16:aa:
a7:f2:2f:c6:2b:9a:67:bb:46:d7:e7:2d:a4:0e:8b:0e:80:8f:
7e:e9:10:ea:3d:0d:8f:51:88:78:9d:f1:c7:14:cf:e1:64:cf:
e8:a0:63:62:ab:bc:12:26:28:66:e1:80:cf:a5:25:eb:6d:5f:
13:7f:d7:2a:6b:16:47:be:66:38:52:5d:c1:e1:57:12:93:03:
2b:7a:8f:7b:8f:2a:af:96:3a:83:aa:08:f3:2c:a4:ea:00:d5:
f9:50:86:53:98:d6:ca:e6:3f:a6:c3:fa:63:dc:ac:c6:8e:3e:
e2:0f:a6:60:59:2f:6e:76:78:23:91:5a:c4:fc:2f:b3:31:08:
2b:6a:5f:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:15:26 2026 by rpki-client