Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C1EA9318268411F1936F88E3DAE4EC9C.roa
File: C1EA9318268411F1936F88E3DAE4EC9C.roa (raw, json)
Hash identifier: klG9UtTcvL3Jj+LJcAHfyE/zbFWzPJ9W05LAHP+GKlw=
Subject key identifier: 35:F4:26:3E:6E:D2:6C:0D:18:FB:BA:9A:47:5A:18:9D:BA:E0:4E:9E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A6B9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C1EA9318268411F1936F88E3DAE4EC9C.roa
Signing time: Mon 23 Mar 2026 06:51:46 +0000
ROA not before: Mon 23 Mar 2026 06:51:40 +0000
ROA not after: Sat 18 Apr 2026 06:51:40 +0000
asID: 132585
IP address blocks: 45.195.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108217 (0x1a6b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 23 06:51:40 2026 GMT
Not After : Apr 18 06:51:40 2026 GMT
Subject: CN=69c0e302-7568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:56:34:e6:12:7f:04:c7:4e:07:65:e6:5f:50:
38:f8:69:f6:8b:b8:d8:66:61:96:4f:62:57:46:eb:
de:f7:81:e3:d9:ab:a7:d6:55:80:54:87:27:4b:ff:
a4:be:cd:3e:16:b7:f5:46:28:ef:3b:a0:fb:2f:23:
b9:0a:6d:fa:fc:72:90:e1:02:38:22:32:8b:7d:31:
b4:2c:74:82:90:59:5e:a8:52:5e:8d:4f:2d:34:56:
0f:5d:a4:97:e7:6d:88:1a:c9:b4:cd:b8:c4:02:c6:
62:75:2c:46:77:49:6b:57:e9:73:13:dc:41:27:dd:
c7:cb:8a:a9:07:43:b3:92:83:32:4c:fa:f2:81:e7:
42:42:54:0e:19:81:8d:34:52:ce:ff:51:f6:a5:50:
c9:b1:ed:80:e0:d8:36:09:45:ee:4a:7f:c5:26:29:
d0:48:d2:30:97:e2:5b:6a:25:32:f3:ef:df:2d:16:
4b:d3:39:d5:0e:cb:7c:33:2a:ea:43:23:30:78:c9:
64:b8:38:1d:c2:37:bf:2b:25:20:c2:00:f5:6b:09:
76:31:4a:64:a7:17:bd:cf:8c:e2:1b:a6:70:a3:10:
05:22:cd:f0:5d:95:43:64:cb:0a:38:00:9c:1d:d6:
cc:63:2b:dc:76:34:6c:3d:ef:91:f3:ae:d1:98:88:
22:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:F4:26:3E:6E:D2:6C:0D:18:FB:BA:9A:47:5A:18:9D:BA:E0:4E:9E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C1EA9318268411F1936F88E3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.111.0/24
Signature Algorithm: sha256WithRSAEncryption
91:b5:99:b9:44:be:da:3c:c3:e1:30:6a:55:2a:a2:44:31:77:
06:f7:b3:8f:3c:b9:a8:14:c0:df:95:a7:4a:6e:06:ad:5c:23:
ec:11:df:f6:0e:ac:cf:81:ba:e6:db:c9:c5:62:15:b7:b3:16:
dd:f2:f8:44:f0:ba:10:ed:de:0a:a8:01:91:ea:21:9b:f4:bd:
b9:40:dd:e1:eb:38:32:eb:2d:f2:ff:0b:e6:44:9e:a5:a6:41:
7f:12:f4:00:cf:f2:c3:4e:36:c7:35:46:50:15:f1:57:cd:5e:
d3:11:7e:0c:4f:2c:ea:91:9a:d5:f1:b6:2f:a3:1f:ec:be:d2:
7d:59:4d:47:9c:ce:e1:ae:15:cd:98:6b:5f:7c:68:c0:89:ec:
f6:b2:34:0a:8d:19:68:bd:87:89:f2:23:11:ad:08:a7:e0:47:
cb:1e:36:ec:c0:12:40:d5:8c:bb:c5:61:f1:d2:3f:79:41:7f:
ae:38:9e:2e:cc:90:5e:37:87:36:50:1d:b8:fc:a7:15:ce:ea:
5b:f9:22:03:56:9a:5c:80:8c:7c:ed:93:29:c7:88:36:52:04:
af:70:88:a8:93:74:96:32:7a:58:d6:1e:90:fb:9a:bf:6f:be:
97:f3:f8:89:5e:0c:81:0c:c3:ab:9d:bc:42:cf:90:22:9f:07:
0d:80:8e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:15:24 2026 by rpki-client