Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1407FABE13B111F1A7350D98DAE4EC9C.roa
File: 1407FABE13B111F1A7350D98DAE4EC9C.roa (raw, json)
Hash identifier: pAegPwWdA89rwXTGsUixfptwdf9ThnYoNnowBOiclmE=
Subject key identifier: A4:18:E8:EB:30:05:5D:79:41:FA:41:FE:5F:36:52:5A:86:22:8F:61
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A0FA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1407FABE13B111F1A7350D98DAE4EC9C.roa
Signing time: Fri 27 Feb 2026 07:51:09 +0000
ROA not before: Fri 27 Feb 2026 07:51:04 +0000
ROA not after: Sun 29 Mar 2026 07:51:04 +0000
asID: 214143
IP address blocks: 45.195.3.0/24 maxlen: 24
45.198.97.0/24 maxlen: 24
45.198.109.0/24 maxlen: 24
45.198.112.0/24 maxlen: 24
45.198.138.0/24 maxlen: 24
45.198.163.0/24 maxlen: 24
45.198.168.0/24 maxlen: 24
45.198.176.0/24 maxlen: 24
45.198.181.0/24 maxlen: 24
45.206.44.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106746 (0x1a0fa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 27 07:51:04 2026 GMT
Not After : Mar 29 07:51:04 2026 GMT
Subject: CN=69a14ced-2d6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:02:ba:90:b0:9c:e7:87:45:53:d9:e8:cc:8d:
2d:b4:53:c9:2a:15:bd:cf:35:27:7b:ea:bc:76:aa:
28:2c:ab:e2:37:d7:35:03:d0:3c:dd:48:63:6b:2f:
08:fd:90:4b:d5:40:da:b9:0c:d0:00:db:2c:6a:ba:
65:9e:6a:5a:3e:b2:6a:7c:03:2a:d5:6e:34:f7:95:
2c:12:aa:4b:1f:67:96:d2:bf:c4:f6:38:25:a9:4c:
03:ad:9d:4e:eb:fe:d4:f0:ea:96:b1:84:97:be:5d:
c1:fe:d3:ec:36:35:a9:64:d2:d5:d4:dd:bb:12:2f:
a8:9c:8f:e5:b6:9d:22:41:0e:38:2f:62:9a:0d:ea:
b7:8c:3c:ea:7d:cf:cf:c0:0d:aa:89:f3:ad:22:b2:
6f:f0:0e:09:da:51:b0:cd:ee:0d:e8:e5:44:32:69:
22:26:b5:2b:2d:51:fd:b9:48:87:ed:a4:b7:97:a6:
c7:9d:ad:87:c1:d8:87:1f:d8:57:28:0a:bb:b7:6d:
0f:6e:73:f6:50:04:00:f0:27:4a:2d:d0:03:5f:41:
b0:05:f3:77:9f:bd:80:a1:27:6c:1a:59:43:e6:72:
42:b8:5a:71:30:b4:22:1d:b9:4d:9d:c2:4c:04:c0:
77:23:c7:d9:3e:0c:d4:51:36:2c:dc:34:ea:22:77:
f1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:18:E8:EB:30:05:5D:79:41:FA:41:FE:5F:36:52:5A:86:22:8F:61
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1407FABE13B111F1A7350D98DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.3.0/24
45.198.97.0/24
45.198.109.0/24
45.198.112.0/24
45.198.138.0/24
45.198.163.0/24
45.198.168.0/24
45.198.176.0/24
45.198.181.0/24
45.206.44.0/23
Signature Algorithm: sha256WithRSAEncryption
43:69:43:88:4f:20:cd:e5:f7:16:12:5b:19:c7:b0:84:d5:c0:
36:55:f0:24:b9:5b:2b:07:89:ec:fb:0e:7d:4d:ed:e1:00:35:
aa:ca:11:75:00:e0:45:de:db:5e:fe:b7:8d:63:4b:1b:bc:71:
0e:82:04:72:27:65:d5:31:7d:4f:2f:ef:3d:6a:30:f1:30:09:
50:21:fa:75:cf:cb:ef:2d:e1:78:e7:53:df:6f:30:ce:59:ed:
39:f2:ce:9b:d1:a4:07:34:3a:5f:84:4c:f1:4c:53:c7:df:fe:
f3:3a:56:2e:2c:0b:68:bc:3e:a4:09:c9:c6:f5:8f:64:66:d5:
d0:27:b6:fe:96:ed:5e:c1:9a:ce:08:12:10:0c:2d:1c:1f:c6:
a0:2b:41:c0:ea:77:98:ab:83:a3:72:dd:83:32:98:d0:71:b6:
89:4b:8f:c5:0c:d5:3b:12:dd:1b:28:6e:44:2a:46:df:c7:a7:
14:f5:3f:d4:be:a8:c5:c2:d8:1c:86:af:48:6a:e4:20:b7:fa:
4f:69:7b:65:4b:aa:f5:c7:da:d5:b6:29:e7:ed:44:23:80:67:
d7:ca:54:ae:eb:e8:05:0c:40:ee:05:e7:3b:5f:1d:ab:c0:9c:
ad:e7:30:a5:c0:67:b6:76:11:ed:1e:1b:81:fd:f3:ae:6e:c1:
d8:7d:de:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:19:30 2026 by rpki-client