Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/33BBA71A121D11F192DC92EBDAE4EC9C.roa
File: 33BBA71A121D11F192DC92EBDAE4EC9C.roa (raw, json)
Hash identifier: NheePABRWxR86LcIC9E8kBlHuBrpRM5Jo2gXVPQFxC0=
Subject key identifier: AE:4E:5F:E3:EB:24:7D:95:CA:2B:77:DB:FA:94:6F:40:81:57:68:1C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A060
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/33BBA71A121D11F192DC92EBDAE4EC9C.roa
Signing time: Wed 25 Feb 2026 07:40:06 +0000
ROA not before: Wed 25 Feb 2026 07:40:02 +0000
ROA not after: Mon 30 Mar 2026 07:40:02 +0000
asID: 14315
IP address blocks: 45.202.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106592 (0x1a060)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 25 07:40:02 2026 GMT
Not After : Mar 30 07:40:02 2026 GMT
Subject: CN=699ea756-5699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bd:c9:aa:19:92:02:fb:a3:0b:37:64:c3:12:
74:e5:2e:86:52:ee:17:7c:b9:75:6c:2e:c2:2b:f0:
34:f5:6c:25:6e:0a:98:c3:75:8e:13:4c:a2:db:0f:
90:df:28:2d:4d:b3:5f:fd:54:07:3e:b8:8c:4d:19:
65:93:ad:ca:e9:bb:b3:87:7c:61:08:d6:44:19:b0:
c6:19:0b:77:47:d5:28:82:91:45:47:74:11:49:82:
49:c9:5b:59:2a:f2:96:e1:02:fa:53:a8:cb:c6:87:
19:fb:22:1a:e1:ab:5a:32:14:52:9f:b1:5d:a4:21:
72:63:11:cf:99:4b:76:a5:7d:c3:fe:1b:a3:a4:59:
72:0c:71:de:88:5c:9a:f6:4f:73:dd:dc:cc:43:ce:
7e:44:6d:4a:d0:66:1d:19:25:40:25:e5:d9:2c:2c:
78:a6:38:a3:a4:2a:c5:86:e8:c4:82:e5:30:b2:5f:
13:60:94:d7:b2:b4:f9:6b:d8:f2:31:bf:14:29:d5:
7b:e3:c5:f1:5b:79:6f:71:1d:44:77:95:81:08:8c:
c7:9b:64:a3:de:44:71:1d:83:94:c6:b7:02:52:7c:
2a:85:da:52:74:57:1c:bd:c6:f5:28:3c:23:e8:b5:
b2:69:d6:bd:dc:c6:5d:da:76:1a:71:90:f6:51:7f:
9a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:4E:5F:E3:EB:24:7D:95:CA:2B:77:DB:FA:94:6F:40:81:57:68:1C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/33BBA71A121D11F192DC92EBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.109.0/24
Signature Algorithm: sha256WithRSAEncryption
92:59:bf:ca:48:43:66:8e:29:1f:32:7c:1e:ad:07:ec:ea:86:
cd:b9:76:d9:fc:7a:91:ba:76:7f:43:67:a3:52:99:79:2c:7f:
e9:b5:77:15:7a:54:be:3a:01:cd:85:0a:93:58:8b:4b:3f:93:
dd:7e:4d:31:c0:aa:17:1d:e4:86:be:e2:2c:49:51:a8:1a:a4:
13:59:f4:d2:63:30:23:b7:39:c1:3e:38:db:ae:34:59:d2:d6:
93:58:46:9c:16:2b:44:72:55:3e:2c:1f:34:a9:6d:93:10:ae:
2c:29:64:2b:3e:11:93:4a:9c:c3:06:8e:1d:4f:0d:e9:4b:d3:
41:a7:d1:9b:aa:11:ad:08:81:11:f9:6f:ad:32:b9:86:9b:be:
e0:16:67:9e:1e:d4:5c:b1:97:ac:ea:3f:8e:f2:d0:2a:d1:1d:
43:40:41:ab:e1:d5:95:ff:fc:96:45:4b:57:3a:5e:d6:c6:6e:
fe:97:26:80:0d:31:da:59:9c:ef:d0:d4:23:22:d0:6d:39:c0:
05:e1:bb:64:90:4b:7a:91:78:77:59:7c:74:20:f0:0d:42:0a:
23:b5:d9:32:e5:28:61:18:70:92:d9:99:27:8e:10:c7:e7:8e:
7f:bb:cc:3d:5e:b6:e0:eb:7e:f0:6a:e1:d2:2a:35:47:5b:d8:
86:c9:21:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:11:40 2026 by rpki-client