Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C319A1F428F311F1968FD493DAE4EC9C.roa
File: C319A1F428F311F1968FD493DAE4EC9C.roa (raw, json)
Hash identifier: O3s4OBuztbBD49LvhrZgc8SydhEihLVsQuqqWnaR+/w=
Subject key identifier: 07:13:CC:7B:49:8D:E9:93:53:6D:4D:7D:B1:4B:F5:16:0F:C6:FF:E8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A77E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C319A1F428F311F1968FD493DAE4EC9C.roa
Signing time: Thu 26 Mar 2026 09:11:25 +0000
ROA not before: Thu 26 Mar 2026 09:11:19 +0000
ROA not after: Sat 02 May 2026 09:11:19 +0000
asID: 34984
IP address blocks: 45.194.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108414 (0x1a77e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 26 09:11:19 2026 GMT
Not After : May 2 09:11:19 2026 GMT
Subject: CN=69c4f83c-6e56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:41:72:5c:a7:7e:4c:f0:47:8f:09:83:7e:1f:
19:a4:74:e4:ec:35:72:53:2c:cb:bf:9f:b7:d5:20:
e3:0a:30:33:f6:f5:4c:25:dc:ee:6a:c8:f1:0a:c8:
8a:40:4c:1f:65:e8:26:88:7b:4d:39:05:08:49:87:
7c:09:12:1a:5e:02:a9:1d:20:ae:2a:a9:09:49:dd:
5e:9e:96:b6:45:c9:35:a0:c3:cd:cb:b5:46:26:2d:
e5:a7:bd:a2:db:4e:42:28:38:e1:ec:69:c6:f0:16:
e1:c3:62:67:4b:50:9a:69:fd:97:44:8c:87:3f:08:
66:8a:cb:60:64:48:89:30:95:ca:ea:ff:c7:47:6b:
0e:34:7f:ec:c3:cd:4d:2b:37:34:6b:b1:23:81:7f:
d3:3e:e4:55:45:cf:99:fd:31:38:68:86:d6:c8:1b:
d7:07:e9:c4:c9:e9:70:e9:8a:07:30:4a:fd:bc:6e:
7f:51:67:ac:4e:99:80:4b:3e:f9:84:f5:18:c8:e5:
09:11:77:f7:5e:bc:bb:48:9d:29:8a:63:d4:5b:b2:
55:91:a2:cb:9a:4f:ec:30:90:87:86:ec:22:24:dd:
a3:83:72:9a:6e:1b:ea:e5:3c:26:82:06:4a:95:f2:
d7:12:12:11:c1:cc:5e:5b:5d:96:da:05:25:36:05:
67:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:13:CC:7B:49:8D:E9:93:53:6D:4D:7D:B1:4B:F5:16:0F:C6:FF:E8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C319A1F428F311F1968FD493DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.120.0/24
Signature Algorithm: sha256WithRSAEncryption
07:35:14:fb:77:a4:ac:42:95:c2:4f:65:22:51:5b:eb:78:4a:
3c:bc:02:6f:f7:cf:1d:64:2f:6b:67:0a:70:e8:52:83:b1:0d:
ff:e1:1a:71:14:f7:a7:ae:d3:bf:41:3f:75:67:99:e6:33:ea:
0f:ba:e5:4f:00:01:2c:2a:f1:9a:a4:3f:1b:47:d1:4e:a7:99:
e6:6e:31:25:b6:e6:7c:ee:24:d6:ed:fc:24:78:d6:10:f5:83:
32:ed:5e:13:e2:56:0e:19:a7:07:bf:12:12:5b:02:12:2b:d8:
52:b5:db:16:d4:76:34:58:14:a9:f1:6d:6f:c3:f9:f4:a7:39:
56:8d:f0:ac:0e:e7:8c:59:44:f9:d7:ab:61:32:4c:b0:21:95:
a7:31:a9:8e:9d:e0:96:2b:4f:1c:17:37:a7:b8:fb:8e:f1:e9:
92:e0:d5:5a:9b:27:aa:5c:a2:9f:ef:a4:2e:73:33:37:0f:74:
93:ba:9f:aa:26:52:5a:9e:31:8a:fd:4b:12:0f:c4:c1:6f:8b:
e0:24:ba:e7:18:4f:02:33:95:a1:7a:b8:b0:d9:1b:6b:01:c7:
13:3a:13:0d:23:92:31:ed:04:5a:fd:17:94:51:0f:e7:55:ab:
5d:d8:27:66:71:72:c1:d5:db:c0:da:11:c7:20:50:8e:a4:79:
bb:9d:ef:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:12:24 2026 by rpki-client