Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1FD4D86828F011F19C7E5780DAE4EC9C.roa
File: 1FD4D86828F011F19C7E5780DAE4EC9C.roa (raw, json)
Hash identifier: 11t2ao2Vhos/tlzLmEQCUROpyPtSthIlCVjLV+8tUu4=
Subject key identifier: 99:E7:0F:8E:E9:34:F6:4B:81:91:6E:BC:48:72:34:DC:76:3B:BA:2A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A774
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1FD4D86828F011F19C7E5780DAE4EC9C.roa
Signing time: Thu 26 Mar 2026 08:45:22 +0000
ROA not before: Thu 26 Mar 2026 08:45:17 +0000
ROA not after: Wed 03 Jun 2026 08:45:17 +0000
asID: 140224
IP address blocks: 45.194.16.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:26:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108404 (0x1a774)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 26 08:45:17 2026 GMT
Not After : Jun 3 08:45:17 2026 GMT
Subject: CN=69c4f222-8192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:d5:8e:24:80:02:e8:02:5e:1e:c5:96:0c:7f:
94:b9:2d:5e:56:e9:49:4f:f9:26:9b:38:23:4f:4c:
c1:a7:b2:62:c4:67:c9:e8:a9:6b:b4:d4:b2:73:f2:
f6:02:72:de:56:97:70:59:93:55:71:af:ff:0e:96:
33:19:f1:31:0f:4a:b5:d8:23:46:ac:fe:9f:08:b2:
56:a6:3e:bb:f4:f3:12:95:cb:3e:69:3a:d4:ad:39:
0c:d0:c1:61:95:02:2d:98:3b:84:c7:bc:dd:a7:dc:
d9:4e:43:22:f8:62:96:34:67:69:d5:7a:9c:87:11:
00:69:60:26:1c:fa:de:6d:95:f0:c4:64:cd:a8:68:
21:21:75:fa:df:56:eb:a5:41:f7:6a:2b:55:57:bb:
fc:70:7e:ea:ce:62:a8:8b:05:d7:fc:fa:b6:54:ee:
dc:75:6f:44:ef:70:fe:19:83:75:cb:6d:18:8d:70:
cc:ed:6c:46:ed:d3:eb:7b:d7:13:ba:c2:1b:19:41:
55:25:45:de:ec:59:f9:90:f8:1d:89:34:c6:63:1e:
4a:f2:71:c4:89:0f:d0:22:34:84:8b:a2:56:ff:80:
7c:17:6e:1a:e4:fc:a8:8a:fe:af:98:88:b7:8c:f6:
45:1f:45:e4:21:ff:6d:16:94:d7:e9:4d:76:5d:dd:
bd:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:E7:0F:8E:E9:34:F6:4B:81:91:6E:BC:48:72:34:DC:76:3B:BA:2A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1FD4D86828F011F19C7E5780DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.16.0/21
Signature Algorithm: sha256WithRSAEncryption
02:e3:a5:44:3b:fd:f1:7c:5e:b7:e8:b4:8d:09:61:7b:b1:9b:
1a:e9:3f:c2:7a:45:9e:df:ae:fc:1c:d4:17:34:fe:81:53:d3:
ea:0c:e3:60:2e:c1:1e:41:ef:f2:38:63:fd:b9:98:b1:de:57:
91:70:bf:d5:de:46:ba:85:bd:87:18:50:70:51:78:5b:19:07:
3b:7a:b2:56:d1:b0:48:2f:c0:5f:b5:4d:67:67:c6:76:1f:49:
c4:7e:e5:68:c7:ac:8a:a1:74:cd:a2:55:02:17:9c:ed:0b:4c:
d8:43:6c:72:c5:d9:06:d9:be:e6:69:b5:0a:6f:62:dc:cc:b1:
9f:bd:a0:b5:9c:dd:0b:b9:f3:ce:3b:4d:15:3e:30:0e:27:de:
16:5b:c2:6f:eb:a6:bd:a3:c8:30:53:81:38:15:1c:f8:69:ce:
17:09:65:1b:c6:cd:ba:29:8f:d4:4a:d0:aa:18:7d:b7:76:69:
51:68:57:2b:7a:a0:08:14:8c:fd:f0:1d:fe:1f:9d:7b:ec:84:
c8:86:a8:36:6c:01:be:00:cd:c6:b7:a5:d7:f9:f9:fb:e4:2d:
76:03:d0:ce:a6:d0:40:5b:2a:99:65:bd:a0:1f:a6:d0:11:bf:
f5:65:f9:8f:fc:8e:28:4f:c4:8e:70:89:cd:b6:0c:a5:29:e9:
01:04:2d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:35:42 2026 by rpki-client