Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2C97403212E211F189CEAAA1DAE4EC9C.roa
File: 2C97403212E211F189CEAAA1DAE4EC9C.roa (raw, json)
Hash identifier: cLHAFcQFmGP1HVhD0hfQ5ryazY8g6Jdnlvb9/JdTaDw=
Subject key identifier: 2C:11:E1:EE:23:F6:D8:96:90:2D:5E:18:8A:B2:3D:60:94:69:5B:D3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A09F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2C97403212E211F189CEAAA1DAE4EC9C.roa
Signing time: Thu 26 Feb 2026 07:10:04 +0000
ROA not before: Thu 26 Feb 2026 07:10:01 +0000
ROA not after: Mon 26 Feb 2029 07:10:01 +0000
asID: 17561
IP address blocks: 45.203.20.0/24 maxlen: 24
45.203.21.0/24 maxlen: 24
45.203.22.0/24 maxlen: 24
45.203.23.0/24 maxlen: 24
45.203.24.0/24 maxlen: 24
45.203.25.0/24 maxlen: 24
45.203.26.0/24 maxlen: 24
45.203.27.0/24 maxlen: 24
45.203.28.0/24 maxlen: 24
45.203.29.0/24 maxlen: 24
45.203.30.0/24 maxlen: 24
45.203.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106655 (0x1a09f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 26 07:10:01 2026 GMT
Not After : Feb 26 07:10:01 2029 GMT
Subject: CN=699ff1cc-5751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d8:4b:f9:35:dd:cd:b5:60:d9:16:e4:c0:38:
05:17:80:a2:72:bb:1f:4f:9a:e1:12:7d:3e:6a:06:
01:96:0f:aa:60:a0:c7:5d:7c:9b:58:b9:d3:ce:c1:
fa:23:91:e9:b1:1b:f2:0c:fc:07:a4:53:71:88:1a:
bd:f7:4f:07:05:74:e2:04:22:32:e1:05:9c:72:46:
9b:c1:7d:e2:6f:c6:33:88:5c:00:5b:24:97:71:a4:
55:0e:f4:f6:15:8f:cc:5e:f1:b2:a0:87:96:53:db:
1e:e2:47:9d:6a:73:55:3f:44:51:7b:11:19:ab:d6:
39:17:39:1e:46:62:62:45:ee:b0:5a:20:51:e8:10:
32:9d:d4:8b:ce:f4:49:14:c5:1b:f4:d1:fc:26:c7:
3f:ec:ae:45:f2:03:0d:2c:2d:f6:6d:89:41:8f:91:
a5:30:1a:16:85:e6:ef:3c:a6:e1:90:84:8a:8b:72:
e6:4d:64:d2:03:79:72:b7:86:15:9e:65:f9:ed:ad:
86:89:63:2f:06:55:51:6c:d4:2b:20:40:04:6c:e9:
f6:58:d3:f9:3b:d4:17:c6:97:fa:dd:a5:3a:a2:cb:
00:4f:00:f3:44:ff:34:a5:ad:19:e0:bb:87:f8:3b:
45:9b:67:4b:37:cb:7c:75:51:2b:cd:a3:75:04:bc:
a2:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:11:E1:EE:23:F6:D8:96:90:2D:5E:18:8A:B2:3D:60:94:69:5B:D3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2C97403212E211F189CEAAA1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.20.0-45.203.31.255
Signature Algorithm: sha256WithRSAEncryption
90:9e:ec:a3:70:a3:69:ef:d0:3f:b6:e9:a6:c0:fd:69:26:d4:
19:3f:24:47:f4:0e:f3:08:2a:b7:20:93:33:fc:0a:91:fe:b0:
27:b0:10:be:5c:92:3f:2e:35:24:87:bd:9d:ca:4e:25:1c:76:
56:80:ce:a1:cf:7b:01:4a:81:56:b8:b8:21:c1:5d:ca:c6:07:
b4:bc:70:0e:21:f3:8c:d6:34:8c:c7:75:7b:d8:8a:54:52:aa:
db:c9:bf:27:37:6b:a1:96:c3:73:fc:12:84:33:09:8c:f5:63:
d9:16:2c:c9:1a:b4:86:77:8d:ff:60:5a:00:af:c0:b1:eb:a7:
43:25:a9:1d:22:93:2a:3f:9e:24:f8:6f:50:e4:ae:b9:15:9b:
10:e0:be:01:7a:83:d3:1b:22:77:25:04:f3:c1:86:b2:f3:dc:
1f:e3:37:3a:52:ad:29:54:2a:43:a4:16:73:2f:af:d8:c0:62:
8b:23:1a:d4:f2:9f:84:3a:b1:a7:45:d4:ad:88:d5:78:80:09:
66:65:04:c5:0f:1f:44:06:ca:69:ba:06:b8:7b:32:d9:d7:3c:
23:c0:88:d9:22:19:fb:3e:24:f0:53:30:f1:3d:81:d6:d1:2b:
66:15:c7:28:b8:b9:8d:9a:f2:a4:e6:8c:fa:93:13:21:b6:c1:
5a:94:d8:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:56:20 2026 by rpki-client