Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/05BB1088119311F1832B1A91DAE4EC9C.roa
File: 05BB1088119311F1832B1A91DAE4EC9C.roa (raw, json)
Hash identifier: sLNzx5V/nDYFoLF6VowL7NSp4o44XXhdVwPbr9WCxvY=
Subject key identifier: 6A:41:D8:EC:D5:9F:A2:1E:5B:3D:9B:81:8D:2E:52:87:5B:BD:F3:12
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A043
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/05BB1088119311F1832B1A91DAE4EC9C.roa
Signing time: Tue 24 Feb 2026 15:10:58 +0000
ROA not before: Tue 24 Feb 2026 15:10:54 +0000
ROA not after: Sat 04 Apr 2026 15:10:54 +0000
asID: 20326
IP address blocks: 45.202.89.0/24 maxlen: 24
45.202.115.0/24 maxlen: 24
45.202.118.0/24 maxlen: 24
45.202.126.0/24 maxlen: 24
45.207.25.0/24 maxlen: 24
45.207.28.0/24 maxlen: 24
45.207.30.0/24 maxlen: 24
45.207.44.0/24 maxlen: 24
45.207.47.0/24 maxlen: 24
45.207.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106563 (0x1a043)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 24 15:10:54 2026 GMT
Not After : Apr 4 15:10:54 2026 GMT
Subject: CN=699dbf82-f602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:63:10:e6:b9:70:55:f2:10:7e:13:c1:c4:10:
35:48:31:da:93:da:ec:ea:47:18:0e:9a:20:52:36:
e4:85:22:af:6a:04:ab:e0:4c:2f:94:c8:60:05:44:
a4:70:6b:63:34:bf:23:bc:71:35:0d:01:aa:d3:af:
9a:0b:56:43:f1:e9:33:fb:f2:6d:90:74:0a:2e:a4:
53:4e:cd:79:a7:a2:61:db:37:09:cd:c4:b0:e0:60:
24:3f:bf:17:a5:fd:04:70:80:38:19:fa:f6:96:69:
97:5c:09:1b:7c:3a:67:b6:80:d0:c9:36:81:7a:e3:
56:d1:a4:09:c1:13:62:16:e9:ba:50:93:9a:1f:85:
9d:f4:30:7e:9c:92:b6:b8:9b:09:0b:a5:37:21:35:
93:1e:60:45:99:b5:be:d6:42:75:db:70:30:08:71:
23:31:a5:63:54:fc:da:c0:00:fb:09:cc:79:8a:2d:
94:11:a5:6b:5d:26:c0:47:eb:e3:b1:18:fe:7e:cc:
ed:7f:b8:9f:5c:61:57:5c:c2:a5:69:d8:3b:f9:43:
eb:97:71:f2:9a:4c:06:00:d1:25:9d:24:ea:11:86:
e5:83:21:3e:b3:de:9b:e7:03:b7:7f:46:fa:44:76:
cb:15:b2:56:99:02:ef:14:d5:cd:b5:f5:d1:41:42:
bc:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:41:D8:EC:D5:9F:A2:1E:5B:3D:9B:81:8D:2E:52:87:5B:BD:F3:12
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/05BB1088119311F1832B1A91DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.89.0/24
45.202.115.0/24
45.202.118.0/24
45.202.126.0/24
45.207.25.0/24
45.207.28.0/24
45.207.30.0/24
45.207.44.0/24
45.207.47.0/24
45.207.56.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:cb:25:cd:d7:98:bd:c4:2b:aa:f0:cf:91:03:30:cd:cc:ce:
2e:1a:db:c3:43:bd:25:7c:8b:4f:58:89:73:9f:79:20:92:43:
50:16:9a:5b:a5:e0:53:ef:aa:bc:64:50:e0:6d:8d:51:e1:6b:
da:b3:5b:20:59:44:42:62:c9:87:c8:73:b8:61:98:9e:25:df:
3e:bc:44:24:a2:0b:0b:74:06:0e:19:c9:56:2e:b9:9e:f6:eb:
6d:00:fd:48:22:fd:a4:96:ff:bd:65:49:fe:28:3f:a4:18:40:
f8:c0:48:e6:6d:02:33:22:87:62:d9:1f:e9:05:41:c8:83:86:
09:70:20:93:ff:42:a5:7d:df:d5:21:35:cd:a7:e5:01:50:8a:
8a:a8:b5:2f:4d:a7:ee:fe:dd:69:f1:a6:31:47:c3:19:5f:96:
81:f8:15:a6:fa:b7:e5:db:19:65:41:e6:50:b4:2d:0d:4f:54:
4a:64:c5:87:80:bd:4d:4c:86:e8:d5:b9:e8:12:e5:b8:74:d5:
b5:66:77:04:2b:57:1a:53:42:07:d5:5c:4c:f9:10:b1:0e:c0:
de:eb:7e:7f:1c:06:fd:62:37:60:c4:b5:32:e6:9d:dc:15:bb:
5d:58:7a:3f:e1:3d:50:a0:16:05:ac:d1:2c:ba:93:b4:96:18:
10:c7:0c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:25:33 2026 by rpki-client