Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2D9006B200A511F18DB6A080DAE4EC9C.roa
File: 2D9006B200A511F18DB6A080DAE4EC9C.roa (raw, json)
Hash identifier: lezfxbzxG/K3oJJ3D+l5Y8tEie1waNsst2MiIH1ZrLs=
Subject key identifier: E6:4D:84:0E:6C:E9:16:32:99:ED:66:86:A0:9A:F7:CD:0C:5F:AE:16
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019B8E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2D9006B200A511F18DB6A080DAE4EC9C.roa
Signing time: Tue 03 Feb 2026 02:08:06 +0000
ROA not before: Tue 03 Feb 2026 02:08:01 +0000
ROA not after: Mon 09 Mar 2026 02:08:01 +0000
asID: 19318
IP address blocks: 45.202.80.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105358 (0x19b8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 3 02:08:01 2026 GMT
Not After : Mar 9 02:08:01 2026 GMT
Subject: CN=69815886-112c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8d:a3:8d:03:3a:a5:20:53:34:71:db:4e:d0:
e0:65:ca:e9:d5:0f:ac:dc:88:75:e4:1a:f0:92:b3:
80:6e:42:e1:3d:24:56:7f:e2:1d:54:0e:17:9a:4d:
6b:ae:5e:9e:40:49:a0:13:4e:48:49:28:3c:e5:22:
ff:0f:dc:c7:c6:f7:8b:65:c5:49:3e:50:b4:a7:21:
4f:66:d8:a3:09:80:e2:06:cc:53:44:86:f5:27:49:
2f:ef:1b:f9:aa:67:28:ae:b1:aa:3b:d4:9c:e0:f3:
f3:47:db:0c:4f:93:b2:2c:64:87:15:77:c6:bf:d5:
b5:8f:a8:a8:74:cc:9f:16:c8:5b:c3:2c:6e:ff:0d:
12:cd:27:4d:63:9e:5e:22:b3:a6:61:e2:61:d5:91:
dc:b2:a3:20:95:71:d1:dd:ac:eb:60:fa:79:3a:24:
15:89:b4:73:0d:8a:c8:a5:09:43:50:64:de:e4:93:
42:f0:01:0b:6f:8b:5c:42:38:66:0d:f0:67:b9:2a:
ac:99:56:fe:51:78:6f:7e:a6:f0:de:a0:cc:89:f5:
91:d4:48:a1:f7:cf:6f:20:61:df:e1:65:c6:fd:db:
a0:61:33:64:87:df:ea:84:89:d4:8c:26:22:50:e2:
29:21:4d:8f:6e:90:b7:97:75:f5:a4:11:e4:1c:8f:
8f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:4D:84:0E:6C:E9:16:32:99:ED:66:86:A0:9A:F7:CD:0C:5F:AE:16
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2D9006B200A511F18DB6A080DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.80.0/21
Signature Algorithm: sha256WithRSAEncryption
a4:d6:30:f7:5e:87:99:a8:88:d7:49:cf:15:3a:3b:a9:7e:54:
ee:4e:ab:d0:3a:1a:45:22:aa:9f:26:b8:70:57:91:fe:35:ca:
88:cc:7f:29:c4:66:bc:64:14:c1:68:04:5a:72:dc:00:69:6f:
c3:28:ba:db:73:e4:5a:0c:9a:dd:79:24:2b:71:d7:66:bc:5c:
5d:76:e5:f7:81:56:85:06:72:13:54:05:2b:0e:81:5c:94:d3:
90:cc:63:a9:0d:56:67:fb:10:85:a2:ca:b4:83:a6:b7:37:3c:
ee:c9:aa:8e:bf:37:3c:37:2e:4c:85:14:f6:ef:15:f2:2e:b7:
90:92:a9:8b:1b:e3:af:24:06:da:0d:9f:fc:7b:0e:02:29:b8:
52:2a:f3:7a:5b:2e:a5:82:56:82:1d:8d:40:72:09:61:d6:32:
9d:43:68:42:39:e9:8c:4b:68:31:f8:cc:1a:ce:23:47:4d:94:
7e:b5:90:f0:b9:f1:4f:5f:44:28:76:3e:5d:06:bc:9d:6c:aa:
d0:41:a9:cf:b3:4b:22:56:3a:78:73:b8:70:ff:89:3f:67:79:
a0:3b:59:2c:5c:83:46:91:0d:8f:15:ae:b7:fe:2b:ae:bf:02:
81:9c:c8:cf:3e:c5:05:9f:54:db:66:95:8c:23:a9:2b:b9:d4:
42:6d:fe:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:52:59 2026 by rpki-client