Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3262210C126B11F19151FABEDAE4EC9C.roa
File: 3262210C126B11F19151FABEDAE4EC9C.roa (raw, json)
Hash identifier: Tlubj+pKyiZpOC84GcVq4fZUumHEIdXMkvn9mzZX2zk=
Subject key identifier: A6:AB:C1:98:D8:9B:4A:B0:8F:61:BA:41:76:D2:52:4D:B9:11:57:72
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A08C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3262210C126B11F19151FABEDAE4EC9C.roa
Signing time: Wed 25 Feb 2026 16:58:24 +0000
ROA not before: Wed 25 Feb 2026 16:58:18 +0000
ROA not after: Mon 16 Mar 2026 16:58:18 +0000
asID: 27951
IP address blocks: 45.195.254.0/24 maxlen: 24
45.196.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106636 (0x1a08c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 25 16:58:18 2026 GMT
Not After : Mar 16 16:58:18 2026 GMT
Subject: CN=699f2a30-84ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:af:e0:55:c1:08:43:d6:ea:a0:0c:46:f7:91:
ed:ff:66:1b:91:d2:d9:21:8c:06:77:fd:f4:03:0f:
6b:d8:6c:7d:d6:13:e2:c6:3f:4e:08:55:6d:44:08:
43:e7:d4:e6:a7:5a:3e:9f:ef:fa:02:d6:c6:46:6f:
1e:36:13:37:2d:bb:47:89:96:f2:21:10:13:23:1d:
e5:e6:1c:4d:5a:31:8f:e7:61:1f:e2:e1:b2:b3:46:
ac:ea:9c:06:80:f8:52:68:02:3f:e0:07:1b:51:2d:
fb:e3:07:aa:f8:1b:7b:da:e7:8e:c1:d6:55:dd:d7:
dd:5d:f8:3c:d5:77:71:4b:57:f5:22:e5:23:e9:e5:
d7:c8:31:e0:44:69:b0:a2:76:78:cb:99:fc:54:fd:
38:5e:a1:71:9e:2a:10:2e:49:09:84:8b:85:0f:ef:
ec:5e:d3:00:97:c9:cd:ef:6e:c8:b7:6b:48:e2:00:
5e:33:f9:5b:e7:5b:cc:d6:97:31:66:c6:04:93:0f:
31:d0:db:7f:44:a7:1d:be:53:f6:02:19:e3:7c:25:
7b:ea:ba:ab:b5:fe:8c:60:2f:6a:a1:1e:f9:bb:8a:
ad:de:30:0d:f0:2d:a2:28:71:75:e0:67:2b:e4:d0:
96:9d:49:ee:11:7b:a4:b8:c8:24:17:6a:5a:53:4e:
5b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:AB:C1:98:D8:9B:4A:B0:8F:61:BA:41:76:D2:52:4D:B9:11:57:72
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3262210C126B11F19151FABEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.254.0/24
45.196.91.0/24
Signature Algorithm: sha256WithRSAEncryption
21:06:62:e1:e3:3f:b6:af:6f:e0:2a:07:93:48:93:88:20:51:
37:77:52:3b:33:1a:5a:f6:f1:c5:b4:9b:cc:44:09:04:f2:19:
e4:f2:6b:e7:77:4e:9d:d5:c4:3d:51:7e:45:e9:3b:bc:9e:14:
a4:e0:3e:3a:34:11:83:e4:ed:5a:a9:6b:04:0c:e7:4f:28:48:
8f:ab:13:79:f0:e1:51:47:98:cc:f2:dd:0e:99:21:61:d6:12:
5d:08:d3:a6:c3:30:80:0a:8a:8c:de:ef:1a:ad:42:77:37:f5:
79:e7:e1:b0:ef:e9:f9:c1:9f:d3:53:98:2e:7f:1a:fc:aa:2b:
03:5c:af:bf:60:26:cd:4b:ac:f5:2f:03:1b:30:0e:b3:5f:4d:
2b:dc:b2:39:ad:b3:5f:a7:a9:13:74:cb:d8:02:b7:e1:cc:b1:
db:f8:6d:33:8d:b0:c5:d8:a4:32:72:c6:ee:c1:de:b9:1a:03:
01:82:d6:69:56:a9:68:95:5d:b8:59:90:e0:f4:84:05:d0:24:
4e:23:e2:e1:70:e7:99:4e:9b:3b:21:ed:c9:5f:97:55:dc:29:
0c:7e:76:eb:46:d5:49:d4:38:96:8b:50:a3:01:29:b9:b9:86:
80:db:7c:47:cd:22:f2:22:4f:1d:27:23:7d:8a:2e:b6:67:84:
28:99:39:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:06:40 2026 by rpki-client