Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0B19CFBE033411F18E96ABC7DAE4EC9C.roa
File: 0B19CFBE033411F18E96ABC7DAE4EC9C.roa (raw, json)
Hash identifier: dG8FHKOsE1syNdKJ6Z5ES42qB6Fu93WGDtB1c9uMYDY=
Subject key identifier: 51:70:11:F5:81:CE:4E:CD:96:80:DE:3B:75:CE:AE:A5:46:C5:97:8D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019C00
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0B19CFBE033411F18E96ABC7DAE4EC9C.roa
Signing time: Fri 06 Feb 2026 08:15:49 +0000
ROA not before: Fri 06 Feb 2026 08:15:44 +0000
ROA not after: Tue 10 Mar 2026 08:15:44 +0000
asID: 274273
IP address blocks: 45.194.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105472 (0x19c00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 6 08:15:44 2026 GMT
Not After : Mar 10 08:15:44 2026 GMT
Subject: CN=6985a335-e038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ea:f4:94:38:f0:52:06:48:20:10:b3:96:9b:
89:cb:53:4d:37:97:0b:65:3c:ae:4f:ab:77:af:98:
e4:91:35:a4:12:39:1c:ad:d0:04:9a:5f:88:56:1f:
6a:e8:32:8e:dc:e3:61:00:73:ea:f4:53:88:6e:b0:
35:14:77:03:25:b3:f8:70:c9:80:50:cf:9d:d8:36:
39:d6:38:d9:eb:5d:0c:af:e7:4d:ca:e4:3c:93:30:
41:f2:16:f5:f1:99:53:8a:3e:96:f7:70:99:2e:a5:
cf:e6:da:c4:a8:40:9a:27:1b:b1:fc:b7:95:02:f7:
02:24:ff:b2:0a:79:06:ee:af:3f:9d:80:a6:54:d5:
58:04:90:b5:57:fe:33:94:b5:58:9e:e3:e9:d5:96:
a8:85:da:d9:8d:8d:0a:ee:28:0d:e4:f2:20:13:ce:
05:6f:8b:62:8e:b4:60:00:f6:a8:ad:9e:a5:03:88:
c0:02:2b:e1:2e:93:2c:62:a2:2a:de:28:84:36:47:
0f:54:2b:ec:a5:f2:b8:53:b6:9d:79:47:81:91:71:
a9:2f:b1:25:d7:af:19:b2:65:1b:6e:36:9d:79:62:
8a:d9:01:6e:23:a7:51:a2:7f:23:9f:27:57:b2:5d:
07:5f:a4:2b:e4:98:b2:14:02:e7:c3:f5:b1:e7:80:
a1:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:70:11:F5:81:CE:4E:CD:96:80:DE:3B:75:CE:AE:A5:46:C5:97:8D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0B19CFBE033411F18E96ABC7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.52.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:22:5e:c1:47:ad:18:dc:3b:50:7b:6e:01:80:5e:99:a0:3a:
19:5c:e0:35:95:d2:53:40:44:71:4c:52:98:e0:bc:83:10:73:
a4:30:90:6e:5b:86:0b:d5:36:f6:33:d6:a6:40:12:d3:8d:3d:
9f:66:a5:2e:f5:02:b7:a8:0a:5f:58:b3:9e:14:5a:7c:61:a6:
7e:41:9a:b7:63:57:ab:71:56:f0:54:fc:b2:3d:b2:6d:1b:27:
15:f1:02:4b:09:d2:ed:bb:00:53:3b:26:45:82:72:4c:f1:f5:
e6:ce:de:a0:2f:08:b9:28:2b:bc:a2:38:e2:bb:e9:56:64:32:
80:d6:a7:cf:5f:b6:0c:6f:22:9e:3e:f5:07:2b:b5:31:9c:83:
5a:a2:89:c7:65:62:38:f6:14:f0:36:33:ad:cf:8f:1b:ee:54:
3b:5e:e7:b6:96:93:ad:9c:f9:eb:79:c4:a0:8a:13:a9:7d:a3:
17:76:0b:7f:64:db:f0:48:cd:bc:5b:d6:ba:12:6f:bb:e4:b6:
f9:93:64:c7:be:8e:11:ef:49:e1:77:32:00:20:45:ed:46:27:
6e:57:2b:4c:bf:82:13:07:a1:3a:7e:b7:c4:d6:39:db:31:36:
0c:a8:1c:3a:4c:f0:b4:2a:61:0f:52:48:06:db:9a:c2:22:42:
d8:63:98:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:17:53 2026 by rpki-client