Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0EB13458034F11F1953EBDE8DAE4EC9C.roa
File: 0EB13458034F11F1953EBDE8DAE4EC9C.roa (raw, json)
Hash identifier: G/115kBTdPGJ5fMNKWEeZmcDlmUSRXAcHCdeK2nBpE8=
Subject key identifier: A7:9E:97:F7:19:8D:E9:7D:AD:68:BC:DB:5E:BC:49:85:19:71:B1:9B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019C0C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0EB13458034F11F1953EBDE8DAE4EC9C.roa
Signing time: Fri 06 Feb 2026 11:29:11 +0000
ROA not before: Fri 06 Feb 2026 11:29:06 +0000
ROA not after: Tue 10 Mar 2026 11:29:06 +0000
asID: 201765
IP address blocks: 45.202.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105484 (0x19c0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 6 11:29:06 2026 GMT
Not After : Mar 10 11:29:06 2026 GMT
Subject: CN=6985d087-6926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2b:03:c1:cb:ee:ce:49:0c:59:31:b7:56:82:
d1:ea:0c:dd:c8:22:c7:8e:20:c4:0b:db:94:4c:7c:
db:03:1e:de:db:f8:ec:6a:53:f1:ce:a4:04:8f:09:
32:89:2c:81:e4:5b:4a:74:3d:7e:1c:eb:a5:e1:49:
ae:be:ae:f5:18:25:b3:42:8e:16:57:21:6d:54:10:
66:2b:ae:ec:3a:4e:61:cd:aa:b5:51:8d:96:cc:8c:
a3:e0:30:a7:f7:d1:0e:bb:de:ac:74:ac:e5:ee:26:
74:bc:28:a1:f5:d1:8c:e8:a6:41:74:d3:01:e2:fb:
76:79:3d:86:24:27:27:53:d3:e3:52:32:5f:4c:30:
2d:ad:f2:31:6f:dc:1b:51:6b:6e:74:24:4e:57:6a:
0e:3d:77:5a:6f:f7:7f:38:eb:51:84:7f:ac:fa:7a:
28:f4:f9:03:5a:c2:72:75:37:b4:d3:23:58:0a:bf:
f4:1b:e6:4a:18:2f:49:1c:2f:41:80:65:28:46:d2:
5a:52:51:5c:e0:10:ca:a9:20:a2:34:b6:02:16:24:
83:3b:b3:45:90:1e:a5:3b:b4:5e:c8:a7:8b:84:f9:
bc:a7:88:06:b9:f1:7d:89:4a:bf:6d:aa:70:89:b3:
af:75:ec:de:0b:08:da:4e:c0:1e:98:c0:49:0f:c4:
0a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:9E:97:F7:19:8D:E9:7D:AD:68:BC:DB:5E:BC:49:85:19:71:B1:9B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0EB13458034F11F1953EBDE8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.245.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:56:ce:95:d9:ac:8e:18:67:95:bb:76:23:ff:01:e9:6d:7e:
12:22:d6:6f:3b:f1:aa:a7:db:53:01:59:2c:27:2b:8a:b0:01:
38:b1:d6:8e:9c:bd:b2:6c:99:05:a9:7a:f4:c0:5e:c3:ac:6e:
cf:82:2d:52:1f:73:3f:de:a5:b7:32:5e:fe:46:89:bc:f9:98:
0a:42:87:80:a7:2f:e2:db:91:4e:90:b9:a0:31:fd:0f:f2:55:
b8:e3:8e:02:b4:fa:e0:bd:1c:14:27:f8:5a:b9:97:52:88:11:
02:3b:0b:58:93:f6:d9:1c:c6:43:7b:a2:d1:85:09:9e:76:28:
cb:8a:9c:41:26:11:7f:f8:d9:17:65:f7:65:b0:02:44:54:fc:
4f:70:2d:59:dc:d2:ee:f6:d6:ab:cd:25:c1:1d:c6:c7:97:57:
e4:2f:aa:c3:32:aa:4a:25:3c:48:b6:f6:ad:71:9e:b5:ff:d1:
be:7a:e3:88:22:2c:ad:15:23:2c:9a:b6:7e:0f:44:df:13:fa:
06:09:9f:70:7e:9a:d7:50:4b:b8:02:64:e5:4d:8f:83:59:d0:
c9:eb:bc:11:ea:85:13:2a:8d:bf:f1:b3:51:89:65:d1:ee:b6:
7d:59:2b:cf:91:70:65:2d:62:2c:68:79:65:1d:2e:17:62:01:
1d:dd:2e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:28:20 2026 by rpki-client