Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F1AD9D6A1E1F11F1BA76C8EADAE4EC9C.roa
File: F1AD9D6A1E1F11F1BA76C8EADAE4EC9C.roa (raw, json)
Hash identifier: gR9+e/RIzSHtjGzdQHL+yJL3uxiBCsDLKvbj2itUbrY=
Subject key identifier: FE:EA:4F:CF:B9:2E:C2:EB:71:DE:8B:9A:79:DF:54:D6:AC:BB:B0:E3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A4B0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F1AD9D6A1E1F11F1BA76C8EADAE4EC9C.roa
Signing time: Thu 12 Mar 2026 14:29:58 +0000
ROA not before: Thu 12 Mar 2026 14:29:52 +0000
ROA not after: Sun 19 Apr 2026 14:29:52 +0000
asID: 11427
IP address blocks: 45.203.192.0/22 maxlen: 24
45.205.76.0/22 maxlen: 24
45.205.88.0/21 maxlen: 24
45.205.156.0/22 maxlen: 24
45.205.160.0/23 maxlen: 24
45.205.170.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107696 (0x1a4b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 12 14:29:52 2026 GMT
Not After : Apr 19 14:29:52 2026 GMT
Subject: CN=69b2cde6-1d0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f5:9b:6d:b6:c4:a1:6d:6c:e8:5e:2b:6b:64:
5a:00:f3:11:d5:ac:33:9f:e5:e3:be:dc:db:4b:b4:
a9:74:66:19:59:ff:46:c1:e0:ea:07:09:16:26:ce:
7a:9d:7a:49:8b:04:02:91:23:2c:40:58:a4:dc:26:
59:2e:ad:3a:d4:1e:4c:2d:64:1f:8e:70:e7:d5:0f:
8b:d9:a4:19:57:74:2c:4f:b2:08:6b:5a:a0:6a:0b:
f2:bb:f0:81:52:bf:75:79:17:67:61:42:24:24:bd:
34:e4:51:6e:1c:f3:6f:ff:29:91:0f:7e:76:cd:0e:
9f:55:60:b6:b3:59:19:45:d1:af:56:11:a2:f6:9d:
4d:fa:da:71:0c:f5:c4:25:65:f5:9a:31:6a:fc:50:
73:1d:5a:82:ee:79:c8:13:4b:1b:f6:53:10:47:64:
d3:b3:6d:0b:dd:7a:75:d0:68:40:04:ca:5f:f1:5c:
5a:b7:33:57:da:cd:b0:5f:a6:1f:db:f5:9f:15:97:
b0:9c:6d:42:29:9c:3b:f2:86:db:ed:66:d1:f3:30:
5b:37:f3:0b:0b:30:86:b0:02:d3:59:2b:97:38:7b:
4a:d3:86:4e:79:84:6e:2e:9d:91:1a:34:4d:6d:93:
2b:9c:58:b6:a8:b7:84:de:33:4b:33:86:5d:3e:e5:
ff:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:EA:4F:CF:B9:2E:C2:EB:71:DE:8B:9A:79:DF:54:D6:AC:BB:B0:E3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F1AD9D6A1E1F11F1BA76C8EADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.192.0/22
45.205.76.0/22
45.205.88.0/21
45.205.156.0-45.205.161.255
45.205.170.0/23
Signature Algorithm: sha256WithRSAEncryption
61:d8:fe:2d:5c:f5:64:d6:be:ce:18:ac:24:00:64:80:cf:24:
be:ad:62:e8:78:fb:ca:d5:28:d5:bf:37:0a:eb:98:6e:16:5f:
9c:28:51:40:d5:ff:5d:07:b9:12:10:d6:2b:0c:80:5f:b4:c2:
80:4d:c5:d8:0c:0c:08:b5:2b:fe:ad:55:ea:92:e8:33:f1:33:
52:c9:22:7b:99:e9:0d:01:d3:88:0a:69:25:d7:0f:bb:8a:59:
58:c3:56:a2:d3:c3:5d:0d:88:14:bb:5e:f3:f5:e1:8c:71:6e:
13:6d:04:ab:f5:89:07:a1:13:c1:cb:ad:a3:7c:49:90:26:e8:
2d:b3:c6:7e:3f:17:d5:ee:e6:80:0b:cf:fb:11:3e:4f:29:75:
31:df:89:bc:cf:4b:4f:86:35:b9:75:89:d9:78:c3:45:ec:1f:
e7:87:5a:fe:1c:a8:9b:b5:2b:5d:4a:8c:ad:34:95:6c:60:cf:
25:9a:f5:49:74:d0:ec:bd:6f:34:4c:7b:68:0d:d6:c0:f1:92:
f3:79:37:24:f0:ed:59:09:be:d7:93:c5:58:5f:5a:92:b4:1c:
f8:1f:71:ac:67:f7:ce:f1:a7:c4:3b:6a:f4:42:b3:d2:52:20:
d3:4e:cd:98:b5:d7:6b:72:a2:58:17:25:0c:ed:5a:a3:3a:0d:
48:e3:22:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:11:07 2026 by rpki-client