Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/05B74B962ADA11F1B2395D9FDAE4EC9C.roa
File: 05B74B962ADA11F1B2395D9FDAE4EC9C.roa (raw, json)
Hash identifier: ENZ1dWVxA/I8/d1coIOZBwhcdxoJqkkZWevsuIr5Jq8=
Subject key identifier: 79:BD:9E:A9:CA:0A:B5:99:62:3D:27:32:79:B6:5E:33:CE:D9:CD:C9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A84A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/05B74B962ADA11F1B2395D9FDAE4EC9C.roa
Signing time: Sat 28 Mar 2026 19:12:12 +0000
ROA not before: Sat 28 Mar 2026 19:12:07 +0000
ROA not after: Tue 12 May 2026 19:12:07 +0000
asID: 48266
IP address blocks: 45.207.218.0/23 maxlen: 24
45.207.220.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:26:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108618 (0x1a84a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 28 19:12:07 2026 GMT
Not After : May 12 19:12:07 2026 GMT
Subject: CN=69c8280c-636a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:be:85:c2:5e:42:8e:22:10:72:4f:a9:3a:eb:
6b:6b:f6:67:ce:1d:8f:8b:b7:50:8c:59:2d:eb:2e:
c6:33:34:c0:c0:62:df:81:f7:f0:6f:67:1a:69:c4:
08:a8:6a:1c:5a:81:a4:7e:5c:23:06:ac:e3:1e:b0:
45:9a:e7:5d:17:7d:e3:58:98:74:8a:d9:e2:1c:33:
9e:d8:da:6a:aa:cb:e3:63:b0:1a:82:57:e5:b6:8d:
d9:4b:20:97:16:7c:ba:ae:ff:f1:18:45:57:df:cc:
b1:d2:ad:fd:e0:d1:6b:88:b0:19:61:71:8b:33:2d:
26:b4:5a:ae:ca:00:4f:57:7e:87:f4:a9:8d:d0:75:
77:17:6c:e3:31:0f:bf:c1:82:87:91:53:a5:8e:cb:
93:60:ce:ec:20:42:cb:5b:d5:77:7d:a4:9b:2d:1f:
02:95:f8:71:3b:c8:75:49:d3:83:83:22:ec:23:3d:
48:f0:ce:7d:fd:a0:18:0b:d5:f7:5f:42:a8:56:d6:
8e:88:6a:e4:62:14:97:f9:3c:08:df:e6:e6:05:fb:
af:b2:82:fd:0d:bf:10:66:2e:03:38:ef:fa:24:07:
1a:80:cb:57:18:f6:6e:98:53:fd:94:2d:d1:e1:d0:
fa:3e:2e:56:66:e1:14:02:90:71:17:94:2f:5e:d3:
26:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:BD:9E:A9:CA:0A:B5:99:62:3D:27:32:79:B6:5E:33:CE:D9:CD:C9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/05B74B962ADA11F1B2395D9FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.218.0-45.207.223.255
Signature Algorithm: sha256WithRSAEncryption
29:ff:81:c8:3f:93:d9:ba:76:a8:e3:40:b4:d0:1d:d0:ae:41:
95:a5:5d:ab:fa:3e:dc:79:56:58:6b:77:16:c2:44:23:83:c7:
ca:83:f9:c9:ef:6a:dc:a1:0f:59:42:ac:15:a7:58:52:88:5b:
40:90:d0:d6:43:0e:c9:b0:ef:57:27:b8:0d:0d:b9:19:84:50:
e5:35:d3:9e:0c:ff:52:cb:c7:ea:ca:a9:22:9a:53:92:c6:1d:
29:2b:5f:da:d2:83:a9:f5:e6:13:ff:8a:01:55:a4:a2:8d:8b:
33:0e:57:c2:c6:fd:f9:8c:a3:f3:57:e3:10:85:6d:7a:47:77:
7a:41:5b:58:64:b3:9e:ef:cf:d7:48:f4:59:fd:52:e0:b0:8f:
60:91:51:dc:ea:c1:c6:45:dd:39:53:26:1b:c1:da:06:a4:14:
c9:01:f8:1a:6a:de:56:13:68:12:5f:a5:b3:45:da:56:1f:9b:
09:7e:ee:09:ae:dd:43:23:cb:04:64:00:ca:ef:6c:54:17:0e:
b9:1a:9b:96:3b:aa:81:2d:35:c9:67:57:12:46:8c:49:dc:2b:
1f:ca:ae:a8:4c:d3:45:52:50:20:bd:7a:8f:3f:3a:7b:5f:b4:
00:9c:19:36:7c:17:b5:47:7c:23:36:d5:f9:61:8d:7c:7b:e9:
f6:bb:d3:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:38:50 2026 by rpki-client