Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1A2D2A66000311F197451DACDAE4EC9C.roa
File: 1A2D2A66000311F197451DACDAE4EC9C.roa (raw, json)
Hash identifier: aj7w86KMbLyrFwkLFP9Ljeg7Bel0vco4l8962jgRtj4=
Subject key identifier: F1:05:F7:4C:80:80:D6:E8:7F:35:8A:55:EC:09:97:FD:1D:6A:53:0B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019B5F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1A2D2A66000311F197451DACDAE4EC9C.roa
Signing time: Mon 02 Feb 2026 06:47:55 +0000
ROA not before: Mon 02 Feb 2026 06:47:51 +0000
ROA not after: Mon 09 Mar 2026 06:47:51 +0000
asID: 135377
IP address blocks: 45.195.216.0/24 maxlen: 24
45.195.217.0/24 maxlen: 24
45.195.218.0/24 maxlen: 24
45.195.219.0/24 maxlen: 24
45.195.220.0/24 maxlen: 24
45.195.221.0/24 maxlen: 24
45.195.222.0/24 maxlen: 24
45.195.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105311 (0x19b5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 2 06:47:51 2026 GMT
Not After : Mar 9 06:47:51 2026 GMT
Subject: CN=6980489b-b1d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:80:12:83:f2:23:d6:fa:d0:0e:e0:7f:2c:82:
3d:98:76:a8:28:57:a0:57:df:bf:0a:a2:6e:71:05:
20:c2:ea:9e:a4:c7:83:5c:35:eb:6e:ab:46:b0:e1:
1d:4b:b3:0a:67:db:e3:ae:5f:02:12:ed:77:67:8b:
8b:b9:2c:72:23:44:77:cb:35:d1:86:c6:84:83:1e:
3c:b1:79:01:33:d5:f6:54:9a:9a:3a:60:f6:57:8d:
dc:db:77:3d:20:41:15:2c:b4:ff:24:5a:d6:46:1e:
4d:b5:e6:41:0b:64:36:67:f5:97:d2:ca:19:b0:92:
a7:74:66:41:7d:ef:28:dd:81:dd:94:7b:e3:93:f4:
01:bf:9f:b0:c9:7b:01:78:23:96:4e:35:6f:87:8d:
2c:e6:a2:94:2c:6f:ff:cf:4c:b6:f8:e5:9c:56:b2:
86:1e:43:17:6a:71:f6:7a:63:68:ff:f6:ca:b8:21:
bb:32:eb:ef:bc:95:69:0c:82:bc:7a:c8:1b:e2:53:
67:4e:96:26:75:05:ef:0b:66:60:0d:fe:94:18:ac:
39:6f:7d:dd:f6:60:95:6e:5c:27:cb:6a:85:b9:14:
aa:39:67:41:a0:ef:83:e2:eb:00:7e:51:a4:6a:23:
8e:3e:17:0e:d8:2b:91:ad:df:41:59:48:e9:53:7a:
35:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:05:F7:4C:80:80:D6:E8:7F:35:8A:55:EC:09:97:FD:1D:6A:53:0B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1A2D2A66000311F197451DACDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.216.0/21
Signature Algorithm: sha256WithRSAEncryption
06:59:09:c6:71:0c:98:65:7e:cd:6b:fb:ff:2b:46:c0:cd:33:
ac:e3:a3:45:ae:bb:de:fb:dc:3f:e2:85:cb:de:d4:e6:22:ea:
b7:14:4b:af:92:48:24:bd:ed:17:db:c8:d6:8a:02:5a:e6:b0:
89:b8:45:ec:85:6b:10:71:7d:34:a6:27:e1:d0:3c:5b:06:87:
41:5d:62:a4:a7:33:a6:8e:f9:8f:07:72:64:5a:50:18:7a:f8:
90:d9:ab:50:50:3f:be:eb:4a:c8:49:f2:a1:8e:b6:c0:af:ec:
36:49:04:58:7d:08:a2:86:ab:f5:48:67:b3:03:d5:06:86:2e:
59:42:59:46:4d:ea:56:ef:30:13:aa:fe:82:43:6c:3a:5f:51:
26:9e:38:e0:dc:35:08:1a:41:1c:1d:36:3b:a2:51:0a:b8:55:
bf:92:35:53:02:6b:72:83:2e:40:40:18:4d:0e:32:45:91:62:
51:74:57:71:30:0d:58:58:52:9f:ad:19:d9:17:c4:44:92:22:
2b:68:e8:c4:f2:05:b9:12:67:ae:f2:e6:9e:19:de:78:01:99:
84:ec:4c:35:3d:5d:bf:6b:06:de:90:14:c8:09:29:df:41:d0:
90:16:e9:55:7f:82:e7:61:5a:1d:d8:b5:32:47:c3:7e:92:78:
18:17:84:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:19:30 2026 by rpki-client