Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F0C0BB9C239411F1B65887C4DAE4EC9C.roa
File: F0C0BB9C239411F1B65887C4DAE4EC9C.roa (raw, json)
Hash identifier: WzxrSQb1U5Cn7kI2RI5SDLKHROnvqxCuix9uaro72Ek=
Subject key identifier: 6F:64:1A:73:94:93:08:F9:B3:D2:D0:AF:E7:5A:F0:52:D7:7C:AF:20
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A604
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F0C0BB9C239411F1B65887C4DAE4EC9C.roa
Signing time: Thu 19 Mar 2026 13:10:03 +0000
ROA not before: Thu 19 Mar 2026 13:08:52 +0000
ROA not after: Tue 31 Mar 2026 13:08:52 +0000
asID: 214143
IP address blocks: 45.207.128.0/21 maxlen: 24
45.207.136.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108036 (0x1a604)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 19 13:08:52 2026 GMT
Not After : Mar 31 13:08:52 2026 GMT
Subject: CN=69bbf5ab-bad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:eb:d2:ae:57:dd:a4:e9:2f:3a:d8:38:43:c7:
5c:34:92:9e:83:c9:e8:f4:7e:0d:a7:38:fa:47:ca:
5a:75:5b:55:f3:43:16:64:08:1f:0e:d6:43:9f:71:
c4:2c:6c:4b:5a:3f:e4:15:c3:e4:41:f7:c4:e0:03:
bb:3a:d6:a6:0e:e1:dc:6a:b3:fc:bf:a6:be:06:0e:
41:76:5b:4c:fd:3c:04:e6:51:48:2b:11:6f:07:12:
c8:80:dd:d8:12:b6:89:1b:e3:e5:44:8e:b0:f5:dc:
ba:17:86:a4:30:84:0c:df:85:e9:f1:64:0c:4e:28:
2b:d4:b0:27:28:8f:0c:aa:b7:43:14:ce:81:33:54:
d1:fe:0d:02:22:d4:cb:99:32:41:19:fa:a6:ad:85:
63:85:cd:64:30:ec:3f:61:1c:8f:4f:21:43:03:d5:
cc:4d:d2:88:82:8b:9c:6a:7f:03:97:02:2f:d4:37:
06:d8:ff:f2:1a:2d:6b:7f:2f:de:47:5c:a0:42:fe:
12:eb:04:1f:dd:c2:98:ff:3d:f2:7c:1f:49:2f:6e:
c0:0f:8e:d9:ee:d6:b1:c0:d5:12:99:96:eb:34:8a:
3e:5c:c4:24:69:45:70:c8:5b:c7:de:be:a9:ae:17:
7b:fb:9a:0f:9d:d7:c3:77:c1:24:89:ef:eb:e8:ae:
a9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:64:1A:73:94:93:08:F9:B3:D2:D0:AF:E7:5A:F0:52:D7:7C:AF:20
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F0C0BB9C239411F1B65887C4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.128.0-45.207.137.255
Signature Algorithm: sha256WithRSAEncryption
9c:51:75:a7:04:e2:7d:1b:e6:ca:cb:b5:4e:bb:d0:4c:7c:d1:
33:89:3d:ba:a3:41:d1:82:19:8d:ca:7c:be:30:dd:08:0f:e3:
b3:c7:d0:3d:bb:20:9c:32:a4:0d:2e:47:e7:4c:fd:ee:80:70:
10:63:a0:96:8f:81:be:50:7c:28:88:3c:cc:22:bd:19:ec:e9:
94:bc:f7:ef:d4:72:df:e2:ec:46:c6:3a:32:d1:ee:6f:02:aa:
17:cc:70:11:4b:77:bf:ff:45:4a:98:ac:a3:b2:61:c0:96:74:
be:42:04:3c:52:c9:44:b1:3b:e2:88:33:67:69:bb:e4:0b:86:
50:b0:4f:93:ba:69:24:ad:cb:f2:8d:0c:0b:c2:b8:66:80:b4:
36:fc:bf:31:5a:71:82:8b:6a:4d:df:7f:7a:d7:70:ea:e2:25:
56:14:e8:1c:ff:7c:a1:c2:e7:19:06:a4:b3:6a:9e:6f:dd:7e:
a1:d0:e5:90:cd:88:c6:ce:32:7a:83:b0:fe:f4:13:c6:95:6e:
d9:81:fe:51:d9:c5:fe:96:c2:f0:0d:6f:95:ab:20:18:25:d3:
e0:07:9a:5b:60:31:95:66:44:2f:4b:09:e0:72:52:83:20:f0:
bd:3a:a8:0f:e6:f5:1f:14:50:97:19:b0:83:32:fe:d7:93:ed:
ea:90:27:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:15:35 2026 by rpki-client