Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CDF39E9021DC11F1B40EE6BFDAE4EC9C.roa
File: CDF39E9021DC11F1B40EE6BFDAE4EC9C.roa (raw, json)
Hash identifier: RNNjCgvE2glMkA5R6LA+Lx4T26raQtEjBmiJgB6zhZA=
Subject key identifier: 96:BC:A0:15:E7:84:3D:79:73:D7:3D:79:20:2C:89:04:A7:E7:5C:95
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A5A4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CDF39E9021DC11F1B40EE6BFDAE4EC9C.roa
Signing time: Tue 17 Mar 2026 08:39:26 +0000
ROA not before: Tue 17 Mar 2026 08:39:21 +0000
ROA not after: Tue 14 Apr 2026 08:39:21 +0000
asID: 147176
IP address blocks: 45.201.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107940 (0x1a5a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 17 08:39:21 2026 GMT
Not After : Apr 14 08:39:21 2026 GMT
Subject: CN=69b9133e-4f59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0f:b2:62:e3:3a:64:10:92:f9:10:97:6b:9b:
0b:f6:18:70:06:10:64:98:87:60:fd:1d:e6:c3:f4:
8d:6a:29:66:f8:0d:a6:89:21:7e:26:e1:b0:78:29:
72:d7:4e:76:e9:7d:08:0b:ed:1b:d8:8c:bf:fa:82:
30:52:7f:ca:c0:f2:de:41:92:c0:74:84:67:8a:8f:
56:a6:cf:8a:df:f7:52:d3:83:a3:cd:11:3a:dc:3c:
4c:33:96:e1:cf:92:db:15:fc:ce:97:38:f0:fc:09:
c4:8d:4e:2b:1c:3a:68:5a:61:66:e8:82:90:c8:65:
91:25:3c:eb:ff:35:e6:3c:02:a4:ed:6a:de:76:24:
05:5d:2b:70:aa:80:34:63:cc:e9:f4:24:bc:d6:05:
e7:25:cf:28:7e:f9:fc:78:bb:11:b2:07:9a:cb:98:
2e:7d:9b:78:ca:6e:83:38:40:96:d9:10:80:94:a7:
7c:f8:1b:4e:d5:61:f4:bd:74:1c:98:de:0f:40:93:
b5:97:16:33:a3:86:a0:64:18:83:2b:be:27:d7:a8:
7e:b0:a3:6d:c9:f2:85:fa:f2:90:3e:5d:a1:ac:82:
fd:8e:e7:b6:20:36:c6:1a:b9:8f:a6:72:ed:2f:75:
66:f2:db:30:f6:d1:86:51:3f:10:e9:2c:c9:09:a0:
f1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:BC:A0:15:E7:84:3D:79:73:D7:3D:79:20:2C:89:04:A7:E7:5C:95
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CDF39E9021DC11F1B40EE6BFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.9.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:c0:22:f3:96:9d:d0:3f:79:a1:b9:6b:f4:fb:c5:1d:39:d1:
ef:a4:56:42:44:84:0e:43:0a:cd:1c:b8:93:74:38:d5:f2:2d:
94:d2:14:19:68:29:67:c3:0d:77:8c:cd:95:a9:3c:a1:3c:43:
a9:c2:fc:2b:68:e0:ed:3b:fd:09:c2:9c:b3:9e:b8:36:fc:6a:
f8:6e:d9:7b:29:6f:a0:a6:a3:98:b2:7e:e5:48:ee:3b:33:6e:
a7:e4:62:c9:e0:a3:41:ed:45:2f:9e:c4:1e:dd:a2:56:1c:f7:
93:7a:f4:50:83:fc:d7:77:1b:20:be:c6:6f:5f:19:dc:98:14:
17:b5:73:60:72:16:2a:00:8c:3e:3c:dd:36:01:bd:43:5a:e0:
dc:71:00:ed:71:8c:54:a0:65:9b:5e:62:03:1f:e4:26:95:90:
2c:56:3a:f8:c9:45:c6:d1:36:b1:83:a9:05:a3:5f:32:23:22:
0b:59:9e:ec:6b:5d:d0:d0:26:b4:eb:19:86:a4:32:38:19:af:
46:56:b5:2e:39:40:0c:b8:f8:0e:6a:95:63:ff:f4:03:e1:77:
58:20:da:70:94:27:d3:bf:29:fd:10:73:cc:ae:31:ca:c9:14:
ef:cc:16:02:1b:78:89:9f:4e:33:33:48:c0:70:62:e6:8d:4a:
77:1e:fa:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:11:13 2026 by rpki-client