Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2C9DE1762AE811F1B3DCB1EFDAE4EC9C.roa
File: 2C9DE1762AE811F1B3DCB1EFDAE4EC9C.roa (raw, json)
Hash identifier: V2MGoXEoQea5zKNAq1Nefci/ozQh8tvDHkAi5GwDs7g=
Subject key identifier: 33:DC:5D:C2:18:1F:2B:C1:11:3F:15:37:7E:12:32:40:92:CA:9A:F1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A88D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2C9DE1762AE811F1B3DCB1EFDAE4EC9C.roa
Signing time: Sat 28 Mar 2026 20:53:30 +0000
ROA not before: Sat 28 Mar 2026 20:53:25 +0000
ROA not after: Fri 22 May 2026 20:53:25 +0000
asID: 8796
IP address blocks: 45.205.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108685 (0x1a88d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 28 20:53:25 2026 GMT
Not After : May 22 20:53:25 2026 GMT
Subject: CN=69c83fca-0c4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ae:75:c0:fd:e2:04:2a:8d:f2:f2:62:71:68:
5b:6a:1c:39:9d:97:71:ee:e8:cf:79:af:0b:0e:50:
d3:28:b7:07:95:67:8c:d2:dc:c8:23:ac:28:94:66:
51:fd:5e:2d:66:fd:78:21:94:af:7f:40:61:d3:64:
41:bd:3a:21:7a:a4:7a:c7:6b:7f:33:31:1e:37:cd:
57:87:6d:b6:e9:f5:02:e4:ec:d8:3a:06:20:fb:70:
fd:18:58:e0:63:6d:37:31:f8:8c:e0:ea:b1:15:fe:
58:b2:d3:de:56:06:71:3c:85:16:2f:40:40:b0:67:
2b:86:e1:cd:f7:ff:84:af:84:93:4f:68:6f:eb:ca:
cd:7b:d9:50:35:08:de:4e:f1:2f:bf:a0:71:ae:4e:
bf:98:df:3e:ab:f8:69:43:1b:3a:3f:74:41:ce:8d:
3d:49:19:be:a2:b8:de:ae:b9:ac:19:d4:f3:52:c3:
dc:d5:89:91:d8:a5:26:1c:7b:a8:24:2e:65:d1:25:
88:f1:c5:1d:ce:35:cb:41:cb:dd:01:9a:5c:13:67:
e1:f0:04:49:d7:de:41:66:39:d2:5e:ce:93:56:9a:
fa:89:97:ef:dc:e7:78:91:ff:59:ec:87:7e:ce:d2:
c0:00:19:13:94:6c:f1:1c:69:fd:dc:68:bf:9a:65:
1f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:DC:5D:C2:18:1F:2B:C1:11:3F:15:37:7E:12:32:40:92:CA:9A:F1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2C9DE1762AE811F1B3DCB1EFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.16.0/20
Signature Algorithm: sha256WithRSAEncryption
1a:12:f0:5a:3c:29:dc:67:5d:cf:ac:8a:cc:01:07:88:d7:48:
86:9f:fe:e9:bf:8d:8e:63:a8:e3:97:c6:68:a1:e1:36:ac:cd:
10:26:cb:da:11:e8:27:1f:2a:a7:08:01:50:e9:66:a4:34:64:
77:de:d9:a2:2c:39:4e:3c:dd:71:42:89:6e:33:96:e0:3a:8e:
6d:46:36:6f:e6:88:51:31:60:bc:3d:a0:7f:cf:d5:ab:9a:48:
f7:77:b9:8a:30:2a:62:f5:4c:cd:f8:1e:2d:07:00:7c:04:12:
f8:14:52:a9:46:b0:57:41:59:8d:b4:e3:95:a8:7b:31:40:2d:
a4:1f:f4:94:d6:6d:f1:b9:aa:09:86:4d:7a:d0:23:a2:c6:49:
2c:4d:99:a7:cf:29:89:30:bb:5b:41:f9:b4:8f:89:99:50:47:
83:39:f4:56:9a:a7:84:57:7c:d2:29:ce:62:d0:8b:29:02:d7:
41:f7:46:1a:ab:1e:15:1f:84:0d:e2:ae:e8:c0:dd:da:19:98:
66:00:49:83:29:69:da:27:d7:42:f9:3c:1f:e8:cc:db:6b:94:
93:d1:1d:25:a4:15:42:61:7d:c7:9e:c2:06:a1:d9:a4:01:ce:
65:97:90:3f:79:14:b2:ed:a0:9d:1a:bf:4d:ac:07:90:31:c8:
da:28:e2:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:00:41 2026 by rpki-client