Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2656D7E20F0D11F19AD1C89ADAE4EC9C.roa
File: 2656D7E20F0D11F19AD1C89ADAE4EC9C.roa (raw, json)
Hash identifier: kSQQPZhg+JQjaUVAkLAQDTIwNw3azX+ZSvG9yfrGezs=
Subject key identifier: D5:4B:B2:3F:5B:26:FD:70:FC:11:F5:7E:11:15:00:31:72:7D:FC:C1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019F5F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2656D7E20F0D11F19AD1C89ADAE4EC9C.roa
Signing time: Sat 21 Feb 2026 10:07:38 +0000
ROA not before: Sat 21 Feb 2026 10:07:34 +0000
ROA not after: Tue 07 Apr 2026 10:07:34 +0000
asID: 214049
IP address blocks: 45.194.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106335 (0x19f5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 21 10:07:34 2026 GMT
Not After : Apr 7 10:07:34 2026 GMT
Subject: CN=699983ea-bd4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:84:b1:8c:9d:02:53:d5:81:66:70:e4:18:60:
42:dc:1b:61:94:8c:c2:d0:0b:2d:ef:cb:3d:41:b1:
15:d0:38:5f:11:7c:cd:a4:2f:21:99:15:36:0a:5d:
9c:3f:1a:83:be:83:bf:be:21:5b:99:e3:97:4c:8f:
2b:c9:fa:f9:2e:cd:14:77:1e:8a:bb:05:96:00:81:
c2:a5:3e:8d:74:c5:4f:c4:63:3a:1c:3b:0a:b1:54:
1a:1b:75:1c:e5:3f:cc:45:55:36:2c:81:bc:26:3e:
ea:88:60:8e:68:d5:58:32:dd:ad:5c:62:ee:a0:5b:
92:df:a9:f5:0e:d4:a5:cc:2e:c2:54:48:ab:7f:c7:
94:11:25:1f:89:95:b4:90:23:76:8b:2a:8a:ce:b9:
8e:df:c5:39:ef:db:23:13:22:dc:eb:3d:66:f0:41:
3f:c4:50:62:94:74:7d:51:c0:c3:97:77:d3:ce:fa:
00:1a:fe:6a:3a:f0:0e:9e:ff:e4:54:c6:16:d1:a9:
23:c5:c4:6f:c5:bf:77:62:00:32:3f:12:9e:aa:f4:
6f:7f:94:00:8b:8b:3d:e1:20:f8:ae:17:07:cc:4f:
b9:97:e6:a7:c9:d3:2f:08:0d:f6:c4:64:e8:d2:f3:
83:cf:16:5b:03:0f:5c:3d:d2:cc:9d:cf:20:e4:1e:
7b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:4B:B2:3F:5B:26:FD:70:FC:11:F5:7E:11:15:00:31:72:7D:FC:C1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2656D7E20F0D11F19AD1C89ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.6.0/24
Signature Algorithm: sha256WithRSAEncryption
70:a4:96:71:6e:6f:5c:d0:9f:b5:30:53:14:da:40:88:c9:05:
17:09:74:c2:64:ed:6a:4d:e0:d2:76:ad:f8:d3:e9:e0:e9:ff:
c8:33:70:3d:db:db:0f:d1:ec:67:20:99:13:87:ee:d8:fd:2e:
41:c1:36:50:9e:fb:57:27:8f:2e:f0:e4:8b:eb:b4:59:04:6d:
fc:a4:6e:0f:71:0d:58:57:14:5c:bf:26:e3:7a:28:58:52:ae:
f3:8b:27:ca:9e:b4:5c:4d:b3:0a:f6:4f:ae:eb:27:3a:53:40:
32:be:07:68:7b:25:86:29:5d:0e:e9:c3:b1:5b:57:e7:1a:c5:
7d:c4:0f:64:60:9c:e1:33:39:5a:9d:57:e4:13:76:00:17:5d:
0c:a8:f1:4f:77:49:80:b0:8f:83:15:18:15:a2:36:c1:a0:f9:
95:69:ee:70:14:7f:64:7d:8b:62:7d:4e:44:f0:85:8c:c7:f7:
dc:3c:b2:41:67:d5:07:e3:a7:34:e7:9d:72:6d:47:39:3e:42:
01:5a:8f:9a:e2:73:bc:bb:cb:88:2e:ca:ba:83:9f:a5:66:bc:
7d:b1:df:6b:5e:6c:19:f9:d1:8e:7e:b8:3c:23:6b:b4:73:16:
5b:10:e8:34:ce:48:dd:44:2f:a8:dd:96:71:bf:d6:ba:77:36:
f4:99:8c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:28:21 2026 by rpki-client