Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D11DA850187611F1A393AFE7DAE4EC9C.roa
File: D11DA850187611F1A393AFE7DAE4EC9C.roa (raw, json)
Hash identifier: uskNmbrxYz1Q1eCtFDOq4L+ro28GIRLN7//2fpOtVgI=
Subject key identifier: 13:6A:18:E6:2E:71:87:F2:B9:EA:F3:59:11:CA:1C:5D:93:AB:D3:63
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A297
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D11DA850187611F1A393AFE7DAE4EC9C.roa
Signing time: Thu 05 Mar 2026 09:36:42 +0000
ROA not before: Thu 05 Mar 2026 09:36:38 +0000
ROA not after: Sun 12 Apr 2026 09:36:38 +0000
asID: 53808
IP address blocks: 45.207.216.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 30 Mar 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107159 (0x1a297)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 5 09:36:38 2026 GMT
Not After : Apr 12 09:36:38 2026 GMT
Subject: CN=69a94eaa-fd04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ca:8a:ed:a4:07:48:aa:fc:b3:7c:b1:50:b0:
e9:25:5e:da:a7:53:ae:e9:0b:59:d4:99:5f:a7:84:
17:7c:4a:85:bf:9d:8f:79:49:23:d0:23:0f:65:d0:
2f:09:0e:5b:6d:92:3d:af:f7:ae:cc:44:be:06:29:
93:4f:49:fa:76:4c:77:c9:85:16:3d:04:5c:c5:d3:
09:a3:38:a5:e9:20:a3:78:73:8d:93:5c:8b:db:67:
3d:d4:b7:a0:bc:0c:30:4d:6c:8f:65:04:8e:b2:07:
c4:23:38:3a:e5:0c:9c:34:7f:7d:8c:33:64:81:86:
ce:7f:e2:1b:b0:e9:53:07:98:03:db:d6:4f:2d:b7:
2e:44:6c:bb:ec:98:54:58:0a:67:6b:2b:4f:ff:7d:
f9:88:06:85:91:ee:e8:ae:1e:f0:8c:74:60:2b:1d:
28:e9:6f:8b:b5:fb:5d:99:28:60:14:29:74:99:f7:
35:c3:cf:2e:1b:7f:ca:9e:ca:f5:3b:c9:26:e4:3d:
bf:29:3b:9f:bb:f0:84:a8:77:df:84:7e:eb:64:2e:
87:ca:55:c2:05:67:ac:f6:cf:a3:d8:72:c7:f0:75:
8e:14:2d:4f:36:f2:21:8f:19:77:4e:84:44:6d:d9:
67:49:dd:e8:5a:4a:95:27:bf:03:67:9c:41:b9:dd:
88:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:6A:18:E6:2E:71:87:F2:B9:EA:F3:59:11:CA:1C:5D:93:AB:D3:63
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D11DA850187611F1A393AFE7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.216.0/21
Signature Algorithm: sha256WithRSAEncryption
8d:c8:16:58:39:66:24:21:39:0d:87:60:a9:8c:58:85:72:3f:
e0:ab:fa:d0:6e:70:5d:3b:2a:45:8a:6b:16:f5:f8:44:c0:2e:
3b:2f:5a:9f:41:00:58:95:44:46:b8:4a:af:f3:59:a4:62:d2:
bb:63:38:8a:d1:98:88:e1:b0:20:5f:85:aa:9d:8c:62:dd:0b:
ee:d7:de:69:a4:c1:9f:84:f4:ea:75:2a:ed:a5:0a:26:94:b9:
66:21:f0:1b:83:2e:22:ef:02:b1:67:73:3e:e1:9c:8f:b2:a6:
be:1d:6d:92:fe:70:89:ae:f6:69:77:cf:64:e4:79:eb:d4:15:
ec:78:69:d1:8a:fa:e9:3d:ab:6c:3b:3d:22:25:bd:0c:2d:42:
86:1e:02:60:04:df:0e:f0:4e:c3:a2:a8:2e:43:d9:97:d1:69:
05:49:10:42:76:1f:74:9c:a5:f7:3b:e7:ed:e0:bc:35:9f:3d:
a5:a4:c5:e3:81:6b:c8:9a:41:00:b8:13:4b:55:f3:33:ce:c7:
91:8b:56:f6:9d:9f:a3:8e:2c:0d:7c:c9:51:7e:31:04:fc:9a:
f7:28:b8:47:93:7d:79:17:f9:56:03:3e:f5:1d:83:bf:9a:78:
6f:28:d3:59:d8:f2:df:88:e8:69:8c:a7:5f:58:a0:97:0f:c9:
b5:eb:5f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:20:41 2026 by rpki-client