Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1B30AFD0109511F1AE159D81DAE4EC9C.roa
File: 1B30AFD0109511F1AE159D81DAE4EC9C.roa (raw, json)
Hash identifier: P2X+OfzPs67uJ8TZXTepw1lpOIFH3NZtdYouUQKMeVA=
Subject key identifier: 8C:47:AD:EB:4F:D1:4E:B8:BE:7F:55:AB:FF:4B:96:D4:AA:FA:B9:CF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019FF2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1B30AFD0109511F1AE159D81DAE4EC9C.roa
Signing time: Mon 23 Feb 2026 08:53:22 +0000
ROA not before: Mon 23 Feb 2026 08:53:15 +0000
ROA not after: Tue 02 Mar 2027 08:53:15 +0000
asID: 139056
IP address blocks: 45.195.70.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106482 (0x19ff2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 23 08:53:15 2026 GMT
Not After : Mar 2 08:53:15 2027 GMT
Subject: CN=699c1582-18c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:de:52:c7:38:09:ef:b7:eb:a2:40:ab:6d:2e:
93:2c:2d:80:ee:10:0c:9c:fa:8a:f4:6e:45:a7:b1:
39:4e:67:ef:4c:e7:7b:22:87:e0:b4:bc:29:85:3b:
ad:65:24:5a:cf:45:cf:e0:d0:f4:b8:a4:21:ca:b4:
a0:28:72:3f:a5:e5:34:c2:e0:11:f6:29:b6:18:5f:
08:3b:dc:c3:bc:69:ce:e8:49:e1:48:53:5d:fb:71:
b4:e1:50:43:e0:54:03:53:13:b0:cd:d4:91:f3:17:
f0:b3:12:8f:13:1c:76:1c:fa:41:72:90:36:f7:1e:
b8:da:10:59:53:f7:75:63:3e:b1:a5:ca:ce:e6:eb:
8c:fc:c3:25:1b:dd:58:2c:43:da:b6:cc:89:6e:8e:
62:d0:72:d4:31:19:83:9f:3d:5e:a6:f7:20:a6:0e:
97:4b:2d:20:d2:7e:b3:a2:31:c8:9f:8b:9f:64:9a:
a5:cf:38:9a:ac:9d:a6:5a:79:c0:a4:5c:cc:67:1b:
c7:29:1c:67:b3:87:82:ab:f7:b7:81:b7:80:1c:90:
cd:99:e1:4d:32:c1:eb:15:4d:5f:d2:aa:34:3f:21:
70:01:c0:d3:46:b4:ba:0b:2a:1a:44:70:d8:4a:0c:
70:37:d3:7c:33:f5:05:14:86:8d:fa:f6:49:79:1d:
8e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:47:AD:EB:4F:D1:4E:B8:BE:7F:55:AB:FF:4B:96:D4:AA:FA:B9:CF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1B30AFD0109511F1AE159D81DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.70.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:a3:76:a5:98:22:81:13:81:12:2c:b8:00:2a:a6:ff:ac:63:
1e:03:ff:2e:9a:af:3a:f5:96:bf:6a:52:40:a1:a4:73:b1:50:
96:53:f9:86:8b:f1:49:39:e6:19:21:4e:01:82:67:92:be:a0:
67:aa:5f:6f:ec:58:d4:10:9c:a1:7d:73:8d:ae:d7:99:e7:f4:
cb:f1:be:03:50:ca:23:e7:6d:34:0d:66:30:5d:c6:ba:04:0d:
89:f1:ea:c1:b2:86:c9:f8:bd:72:8b:13:c2:5c:bb:cc:5d:9a:
11:ac:81:90:ae:e1:e2:72:4e:3a:9a:37:a2:f9:29:70:52:4d:
13:db:9e:c9:da:84:b0:95:31:fe:ef:86:f0:5e:5b:64:f2:92:
a0:88:49:82:74:bb:bd:83:31:fe:a7:bd:31:ba:63:88:0b:e1:
61:cd:f5:bc:1b:46:91:f8:e9:c8:ef:b6:8a:4f:10:59:50:c8:
97:ea:4e:0b:f1:a2:2b:28:99:49:55:4c:bf:0c:16:53:65:13:
c7:d4:f9:bd:08:50:12:5d:9a:cf:29:15:91:25:14:c0:67:92:
9d:3d:56:1e:fc:c6:84:bc:33:ea:1e:2f:fa:f6:29:2a:0c:72:
5f:9b:e9:e0:73:89:46:21:06:f5:24:b4:f6:22:fb:cc:41:07:
64:36:10:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:18:53 2026 by rpki-client