Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DA572C04186511F1BAEB0384DAE4EC9C.roa
File: DA572C04186511F1BAEB0384DAE4EC9C.roa (raw, json)
Hash identifier: Avbj5fwuXRLXg6Ydww1JiKc+y3xX9ywKPlvHXMVqGuM=
Subject key identifier: E8:50:B2:1D:02:45:9B:9E:87:8A:0B:43:1C:B1:64:27:16:D6:C3:9D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A283
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DA572C04186511F1BAEB0384DAE4EC9C.roa
Signing time: Thu 05 Mar 2026 07:35:16 +0000
ROA not before: Thu 05 Mar 2026 07:35:12 +0000
ROA not after: Thu 09 Apr 2026 07:35:12 +0000
asID: 3257
IP address blocks: 45.199.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107139 (0x1a283)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 5 07:35:12 2026 GMT
Not After : Apr 9 07:35:12 2026 GMT
Subject: CN=69a93234-397b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a5:70:d7:38:37:c5:51:99:7f:51:90:d6:9f:
39:e1:dd:94:d5:a1:2b:e5:75:c5:10:5d:ab:fe:2b:
2b:e1:e8:2c:aa:0c:a8:4f:4d:77:06:c8:4e:1d:06:
64:d4:2a:06:7c:47:8f:be:ac:f3:e8:f4:15:21:8e:
37:55:ba:80:75:ae:fb:53:82:48:ef:98:48:58:5f:
ab:68:63:95:e1:bb:4e:57:14:4a:2b:2b:c4:43:14:
db:11:d7:59:20:9e:99:fb:02:30:ec:d4:2f:be:0d:
85:e6:a9:2a:95:71:d3:54:10:57:3b:da:b2:19:49:
24:61:f0:84:af:f3:0a:10:6d:70:c4:f8:e2:4f:b1:
57:3c:b2:1f:89:10:f9:70:fc:52:dd:b7:56:ca:d1:
f4:4b:2a:2f:d5:88:0d:35:99:13:7d:f3:6d:d7:cb:
e5:82:11:58:9e:26:f4:ce:09:29:91:5f:5e:5d:f3:
07:f7:4c:6b:65:a1:eb:a5:0b:aa:bb:aa:5d:61:3d:
55:9d:6b:6b:bb:1a:01:e9:1c:b6:f1:d1:37:03:39:
af:03:86:d6:5b:a9:01:79:d7:2a:96:02:5e:63:fd:
fc:64:51:1c:c5:6d:f3:00:b5:0e:e3:c3:ac:0c:37:
a6:89:11:8e:55:cc:f4:2c:e8:4c:85:46:27:4a:0e:
42:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:50:B2:1D:02:45:9B:9E:87:8A:0B:43:1C:B1:64:27:16:D6:C3:9D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DA572C04186511F1BAEB0384DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.149.0/24
Signature Algorithm: sha256WithRSAEncryption
02:e5:15:f5:c1:80:63:84:fc:17:d3:7a:93:94:83:e7:7c:9f:
87:24:fa:fe:a7:a3:f9:e3:59:54:06:c1:6b:fd:12:e3:03:ee:
e3:27:f0:4b:f1:67:52:bc:74:8d:25:52:6f:69:ef:fc:1a:46:
94:2d:1c:79:ab:c1:a1:89:d6:9c:ca:d3:a6:9f:a4:8e:e7:9c:
69:ca:d1:7e:b6:34:91:fe:9a:fd:d9:8f:a2:32:70:d9:74:d6:
4e:10:d2:1f:cf:20:c1:82:ea:3d:30:53:5e:d1:83:ae:73:a0:
e9:dc:83:7d:9e:e7:9a:86:df:66:e3:65:ce:ab:53:7d:97:75:
dd:84:6a:09:aa:bc:19:09:75:2b:68:f6:66:31:88:0f:d1:d7:
c2:88:81:18:35:33:af:60:c4:aa:4a:78:c8:c6:17:b7:0d:20:
1c:ae:c4:df:93:82:93:ed:15:01:c0:35:23:eb:e5:32:be:56:
83:a3:b4:5e:67:c2:92:75:08:b5:5c:8c:c4:5b:bc:28:cf:e7:
52:b0:25:90:84:4b:63:4d:36:0f:99:bf:e4:87:e3:cb:79:ba:
8b:fb:1d:6b:8f:1a:ec:c4:f1:96:2f:a0:cf:c9:e3:36:2b:a5:
b9:fa:31:64:0a:99:50:68:0b:1c:56:d0:45:b2:5a:d8:0e:2f:
23:17:5a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:09:49 2026 by rpki-client