Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DDA4E6881A2911F1B511CFDADAE4EC9C.roa
File: DDA4E6881A2911F1B511CFDADAE4EC9C.roa (raw, json)
Hash identifier: mNXePrng123hpEbcoVk3hMIaKw/XFuVnMEeB71Cm2hU=
Subject key identifier: C8:28:4A:C3:92:AD:C2:8D:10:F8:24:02:52:A8:E1:E7:B1:6B:3E:30
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A340
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DDA4E6881A2911F1B511CFDADAE4EC9C.roa
Signing time: Sat 07 Mar 2026 13:30:54 +0000
ROA not before: Sat 07 Mar 2026 13:30:49 +0000
ROA not after: Mon 30 Mar 2026 13:30:49 +0000
asID: 266811
IP address blocks: 45.196.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107328 (0x1a340)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 7 13:30:49 2026 GMT
Not After : Mar 30 13:30:49 2026 GMT
Subject: CN=69ac288e-a459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:29:93:6e:e8:ed:6f:d7:c5:4a:73:7d:4d:09:
d0:53:d2:09:bc:57:5c:00:e4:ab:a6:a3:fc:3d:ee:
82:32:7c:a9:d0:37:14:87:8c:ec:ff:a8:5d:75:6d:
ca:4a:4a:50:45:04:41:b7:e0:65:cd:ff:86:b2:31:
e4:d9:ce:7f:22:19:b1:c1:54:71:94:ca:06:c6:13:
5c:4a:b5:4a:af:5e:b7:9d:a7:74:8c:b2:e2:dc:54:
1d:8b:61:2a:3f:3c:2e:2a:90:0e:d1:d9:0f:99:19:
7d:3c:b5:7a:7c:23:29:68:cd:1c:7e:16:86:8d:79:
98:2b:d5:e9:41:d0:95:7b:d8:83:fc:cd:87:2a:75:
65:53:21:11:bd:94:31:6f:0d:b0:59:e8:dc:69:59:
62:98:c6:ad:3c:60:d3:36:f9:91:61:e2:6d:42:b6:
d5:4e:73:2d:59:01:74:fc:25:31:e3:a8:74:78:a5:
b7:41:59:58:0b:5d:e1:54:eb:33:e5:3b:ca:4a:ae:
fd:14:9a:d9:9c:04:37:5c:79:70:cb:1c:b6:db:b3:
cf:1e:42:f4:1d:5e:4a:c9:ec:16:b3:74:8f:18:1a:
a6:2c:b3:a5:da:a2:44:35:82:13:98:a9:94:53:88:
de:fa:27:75:da:d1:5c:80:5d:43:bd:39:46:c8:52:
db:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:28:4A:C3:92:AD:C2:8D:10:F8:24:02:52:A8:E1:E7:B1:6B:3E:30
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DDA4E6881A2911F1B511CFDADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.28.0/24
Signature Algorithm: sha256WithRSAEncryption
83:01:bd:a7:11:ea:60:b9:ef:f0:42:e6:68:dd:52:ae:d3:c5:
5f:7b:62:12:bb:9a:88:0e:2a:aa:68:78:9a:1b:6c:70:a4:e4:
c4:9c:2a:23:aa:6c:ad:56:3e:89:c2:ba:5e:cf:c3:01:9c:f9:
df:c4:36:1c:a0:dd:66:0c:cb:03:6c:3a:11:ec:93:dd:44:56:
bb:ac:02:9b:a5:af:11:5d:cf:98:fb:83:1d:8b:56:27:19:02:
52:09:f7:01:1e:d4:4e:a2:34:1d:79:e3:e0:24:f6:ef:01:df:
f4:ef:86:5a:0e:14:fb:3a:a3:ce:09:91:ae:0e:46:58:0d:c9:
ba:96:39:94:e2:80:a2:8e:7e:57:21:52:4f:60:df:0e:3f:37:
ed:ec:27:b3:7e:dc:2e:5c:57:60:ad:94:38:23:8d:cc:bd:65:
5d:3a:81:24:c3:6b:5a:ac:c4:dd:84:ea:cf:80:89:84:8e:75:
af:df:75:bc:bb:2d:38:52:46:93:ab:b8:50:34:4c:ff:0d:77:
a9:a2:e5:8b:a1:94:cd:c7:c0:0f:f8:ce:ad:2a:0e:34:3b:b5:
72:66:d9:39:56:88:c3:36:19:8f:d3:23:7a:85:d0:f0:8e:1c:
f6:00:2e:1a:24:c5:f9:6d:ac:01:fd:c9:e1:3b:36:2d:3e:1e:
75:bf:2e:ba
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAaNAMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMzA3MTMzMDQ5WhcNMjYwMzMwMTMzMDQ5WjAYMRYw
FAYDVQQDEw02OWFjMjg4ZS1hNDU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA8imTbujtb9fFSnN9TQnQU9IJvFdcAOSrpqP8Pe6CMnyp0DcUh4zs/6hd
dW3KSkpQRQRBt+Blzf+GsjHk2c5/IhmxwVRxlMoGxhNcSrVKr163nad0jLLi3FQd
i2EqPzwuKpAO0dkPmRl9PLV6fCMpaM0cfhaGjXmYK9XpQdCVe9iD/M2HKnVlUyER
vZQxbw2wWejcaVlimMatPGDTNvmRYeJtQrbVTnMtWQF0/CUx46h0eKW3QVlYC13h
VOsz5TvKSq79FJrZnAQ3XHlwyxy227PPHkL0HV5KyewWs3SPGBqmLLOl2qJENYIT
mKmUU4je+id12tFcgF1DvTlGyFLbmwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFMgo
SsOSrcKNEPgkAlKo4eexaz4wMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9EREE0RTY4ODFBMjkxMUYxQjUxMUNGREFEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcQcMA0GCSqGSIb3DQEBCwUA
A4IBAQCDAb2nEepgue/wQuZo3VKu08Vfe2ISu5qIDiqqaHiaG2xwpOTEnCojqmyt
Vj6Jwrpez8MBnPnfxDYcoN1mDMsDbDoR7JPdRFa7rAKbpa8RXc+Y+4Mdi1YnGQJS
CfcBHtROojQdeePgJPbvAd/074ZaDhT7OqPOCZGuDkZYDcm6ljmU4oCijn5XIVJP
YN8OPzft7CezftwuXFdgrZQ4I43MvWVdOoEkw2tarMTdhOrPgImEjnWv33W8uy04
UkaTq7hQNEz/DXepouWLoZTNx8AP+M6tKg40O7VyZtk5VojDNhmP0yN6hdDwjhz2
AC4aJMX5bawB/cnhOzYtPh51vy66
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:09:41 2026 by rpki-client