Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D0B2C5CA187C11F19B86858CDAE4EC9C.roa
File: D0B2C5CA187C11F19B86858CDAE4EC9C.roa (raw, json)
Hash identifier: rBkpo+vvY3bpHHKwqM2VwbJV3Oi7/Z6tFiVQLzhtCK0=
Subject key identifier: B3:33:89:97:5C:91:67:BC:50:0E:74:E0:0D:EE:4B:A6:CB:45:15:39
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A2A5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D0B2C5CA187C11F19B86858CDAE4EC9C.roa
Signing time: Thu 05 Mar 2026 10:19:38 +0000
ROA not before: Thu 05 Mar 2026 10:19:12 +0000
ROA not after: Wed 22 Apr 2026 10:19:12 +0000
asID: 401696
IP address blocks: 45.192.96.0/20 maxlen: 24
45.205.16.0/20 maxlen: 24
45.207.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107173 (0x1a2a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 5 10:19:12 2026 GMT
Not After : Apr 22 10:19:12 2026 GMT
Subject: CN=69a958ba-93d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8c:2a:e8:13:b1:d2:b9:17:78:1c:81:ab:59:
dc:ee:48:7e:5c:7c:d5:ff:d9:b4:ae:3b:c0:12:6c:
c8:86:5f:d6:75:c5:37:89:02:e7:b7:ff:ed:f9:3f:
2f:90:5b:44:19:0e:fc:18:a0:56:b7:cd:7a:44:ef:
fa:46:54:cc:3a:2f:6f:5a:b3:ae:d1:7e:58:b6:c2:
22:a7:24:d1:e9:13:9e:9a:d9:66:df:63:ba:2c:64:
37:cc:d9:df:cb:43:1e:c9:6e:b1:d9:b5:55:d6:8d:
8e:a0:f7:41:95:bc:e9:fd:43:63:3f:fa:bb:d7:0c:
e3:0f:60:ab:79:3c:5c:1d:cf:b1:fc:c5:21:2b:f0:
e8:92:e0:bf:15:40:a2:e9:81:72:b7:be:f6:2e:b2:
82:92:ef:1a:34:07:91:8b:f4:b6:19:3d:5e:59:01:
85:b6:70:ba:08:39:19:01:2b:45:f3:12:f6:a5:69:
4d:60:bb:71:2a:1c:5c:24:ad:f7:b2:ef:23:bd:08:
d4:7b:20:c2:bd:05:b1:2b:0c:19:87:66:f3:48:88:
92:a2:fb:98:81:95:5c:6d:97:76:2f:08:7f:2c:fd:
b7:66:a2:c5:9d:f4:45:9f:c9:64:a1:9a:ce:17:7a:
3b:cb:49:58:0d:dd:02:51:43:a4:a7:a5:2e:50:2e:
c6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:33:89:97:5C:91:67:BC:50:0E:74:E0:0D:EE:4B:A6:CB:45:15:39
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D0B2C5CA187C11F19B86858CDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.96.0/20
45.205.16.0/20
45.207.192.0/19
Signature Algorithm: sha256WithRSAEncryption
05:4f:ac:9b:db:fb:b6:d4:9d:b9:a6:79:6a:1b:82:30:32:21:
35:4d:ed:e6:61:f4:bf:76:e9:6c:7f:ab:4b:8c:ed:e3:f6:d1:
fe:57:af:73:d2:55:db:eb:28:69:7a:e3:31:5e:c8:0d:32:c7:
8a:03:f5:00:8e:9f:75:d4:d7:72:04:ff:2d:62:4f:be:c9:f8:
c0:af:68:89:6e:26:0c:89:21:04:9e:ad:fb:15:58:42:96:3a:
ff:14:7c:ac:b2:31:1a:93:f9:6c:10:fd:b7:bf:cc:d6:10:f4:
6f:70:ce:76:1f:25:ad:7b:83:f0:50:47:af:7e:db:b3:f7:38:
4d:3b:44:05:1b:0f:c8:57:ef:a9:7d:54:c2:70:63:5e:ea:51:
69:27:5a:2b:bd:88:b3:ea:a4:74:1c:d8:4f:c9:ed:bb:65:81:
61:ed:cd:71:f0:c1:fb:24:50:c0:f8:9f:3d:bd:2e:c6:6b:96:
bc:02:20:f8:31:cf:41:c0:94:34:8c:53:eb:96:2a:56:d5:29:
3a:6d:c3:6b:26:3a:5a:f3:e4:1a:4d:2f:00:e7:a5:d3:5b:b0:
97:ce:40:36:86:f9:20:9d:8d:37:c0:1e:31:6c:f3:b7:f2:80:
80:1d:62:6d:2b:7f:87:05:fd:49:03:56:19:52:3d:93:1b:cd:
19:4d:f6:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:10:16 2026 by rpki-client