Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E96005A8252C11F19317E886DAE4EC9C.roa
File: E96005A8252C11F19317E886DAE4EC9C.roa (raw, json)
Hash identifier: tw9LQn1YiUHRjtn+YHJzdZoDlCKAmHc9TBWdPS209Do=
Subject key identifier: 8C:A8:75:D9:65:1A:22:F1:92:B8:C5:35:2A:CC:02:0A:00:E8:48:E0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A666
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E96005A8252C11F19317E886DAE4EC9C.roa
Signing time: Sat 21 Mar 2026 13:50:25 +0000
ROA not before: Sat 21 Mar 2026 13:50:20 +0000
ROA not after: Tue 28 Apr 2026 13:50:20 +0000
asID: 214238
IP address blocks: 45.199.216.0/24 maxlen: 24
45.199.217.0/24 maxlen: 24
45.199.218.0/24 maxlen: 24
45.199.219.0/24 maxlen: 24
45.199.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108134 (0x1a666)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 21 13:50:20 2026 GMT
Not After : Apr 28 13:50:20 2026 GMT
Subject: CN=69bea221-0031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1c:58:a7:cf:99:4b:df:19:8b:49:20:f2:b4:
6b:61:64:93:c4:b9:50:a2:4e:0b:a0:0a:b2:63:5e:
8c:5c:fd:04:24:54:8d:f6:bf:b0:38:df:ee:56:e0:
e2:fd:1f:41:22:51:df:ff:c6:75:94:a4:c7:d4:f6:
18:73:51:0e:3b:12:bb:5b:d8:e7:39:1f:f3:bf:33:
e8:60:13:01:15:43:42:be:6b:37:ab:87:32:8f:29:
03:35:99:b3:af:0d:bf:2c:82:19:e7:a5:f7:d3:20:
e4:cc:54:74:5a:d3:1e:90:76:75:81:a9:f8:db:94:
76:f2:05:09:cc:a7:e0:b4:4b:da:06:bc:cf:9f:65:
38:00:fd:55:79:bc:66:da:ba:a0:6b:20:b4:8c:b3:
25:d3:35:64:da:8c:04:bb:e5:d7:85:a9:84:d8:9d:
a7:09:c1:b4:83:63:c3:ef:23:fb:d6:e9:c2:28:de:
45:23:17:f7:34:1a:86:6d:e5:04:2b:fc:79:49:c1:
80:21:b8:17:a4:0d:b0:a0:09:e1:dc:f2:b0:36:83:
35:32:53:fa:9b:06:61:be:54:f0:11:12:fc:cd:78:
94:75:4d:ba:0e:5b:ea:ee:9a:7c:19:d7:b2:4d:84:
60:1d:72:aa:57:d8:dc:43:0b:59:37:95:94:1f:fb:
be:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:A8:75:D9:65:1A:22:F1:92:B8:C5:35:2A:CC:02:0A:00:E8:48:E0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E96005A8252C11F19317E886DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.216.0-45.199.220.255
Signature Algorithm: sha256WithRSAEncryption
4a:64:9f:37:19:7f:17:6d:fb:07:30:82:69:e5:4b:6d:7d:b4:
89:08:39:59:59:e5:1e:8c:fd:d1:68:b8:6b:6b:3b:52:42:b3:
09:de:e7:05:30:1e:ab:4e:d9:ad:a8:d7:e9:1f:0a:d7:02:ef:
64:a2:b8:72:7c:50:20:eb:56:47:14:82:b6:ae:68:8c:c0:ff:
98:c1:9a:7a:f9:9e:d0:1f:0c:88:f4:a9:cd:19:86:4d:d1:a5:
c7:6d:14:87:5f:a7:1f:0e:21:a3:50:6f:7b:85:72:64:5e:99:
ba:42:fb:bc:af:d5:f7:df:67:7c:17:38:16:07:ee:69:31:7f:
ff:e1:d5:fa:5e:a8:f5:88:0b:37:f6:20:63:37:80:b9:61:4e:
95:d0:f2:8f:d3:23:e1:3f:0d:89:06:38:cb:34:f0:4e:60:ff:
48:75:c4:c0:3c:a3:d3:e8:b2:d8:8d:33:06:90:ef:98:04:66:
05:ce:b9:36:3e:6d:e6:41:1e:ad:60:e1:a5:1b:ee:0d:42:3e:
bc:7d:a6:b1:85:07:7c:58:49:8d:4e:fd:65:95:09:7f:3e:f4:
e3:d1:76:59:7b:5d:5b:46:1a:08:c7:40:b8:64:d8:8b:d7:30:
cd:9b:b4:6e:03:e7:8c:0f:2a:68:35:f6:cc:79:72:bf:8f:13:
63:9f:e0:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:15:48 2026 by rpki-client