Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/34FE2AD2040111F195C8D9B3DAE4EC9C.roa
File: 34FE2AD2040111F195C8D9B3DAE4EC9C.roa (raw, json)
Hash identifier: TMzHnud2/rI8jUAN4p1ZCnvnVb+QLDwQrFIQyy/4PRE=
Subject key identifier: F1:7B:22:9E:87:C3:7A:AD:78:AE:16:D6:F8:FD:2A:DA:77:9A:9A:A8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019C23
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/34FE2AD2040111F195C8D9B3DAE4EC9C.roa
Signing time: Sat 07 Feb 2026 08:44:26 +0000
ROA not before: Sat 07 Feb 2026 08:44:21 +0000
ROA not after: Mon 16 Mar 2026 08:44:21 +0000
asID: 142032
IP address blocks: 45.192.96.0/20 maxlen: 24
45.192.96.0/21 maxlen: 24
45.192.96.0/22 maxlen: 24
45.192.100.0/22 maxlen: 24
45.192.104.0/21 maxlen: 24
45.192.104.0/22 maxlen: 24
45.192.108.0/22 maxlen: 24
45.207.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105507 (0x19c23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 7 08:44:21 2026 GMT
Not After : Mar 16 08:44:21 2026 GMT
Subject: CN=6986fb6a-7395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b7:09:3d:37:2a:cb:3e:91:9f:63:0c:ff:63:
81:a3:c0:11:31:8e:dd:00:11:40:23:de:59:7a:e6:
45:4d:a8:3d:28:da:d4:95:89:cf:de:f2:91:7c:49:
b4:14:ae:99:57:4b:76:f5:2a:6b:ae:77:e8:69:50:
f3:9c:1f:09:2f:f1:58:4d:3b:1e:2a:97:b5:be:ba:
85:60:93:e6:8c:52:31:68:b4:78:15:ea:7e:c4:9e:
93:6f:8d:41:55:6a:02:23:cb:3a:ca:ae:de:fc:c5:
98:a7:b7:d8:8f:fb:d9:ae:5b:47:51:9b:7d:95:8c:
51:92:ff:4f:4d:7d:4d:4d:3b:44:8b:f1:13:59:e9:
bc:15:b5:5e:56:a2:f8:43:f1:fe:0d:04:74:5f:59:
d4:34:cc:8a:6f:05:79:db:55:b1:9b:e4:a5:93:aa:
15:2d:32:3d:bd:73:c1:84:93:81:f5:ac:06:bd:98:
0a:95:b2:89:bb:93:b2:66:07:82:48:90:30:37:4e:
ee:0f:c1:0a:c8:ce:2c:93:ad:d9:39:f8:2a:32:c4:
dc:a9:85:f8:0e:7b:02:0e:22:cf:8a:89:be:ca:2a:
49:02:2c:5f:12:6e:a5:f6:63:33:cb:97:69:f8:e1:
e0:e5:3e:ca:a4:fd:23:51:a7:52:a3:42:f5:eb:97:
44:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:7B:22:9E:87:C3:7A:AD:78:AE:16:D6:F8:FD:2A:DA:77:9A:9A:A8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/34FE2AD2040111F195C8D9B3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.96.0/20
45.207.192.0/19
Signature Algorithm: sha256WithRSAEncryption
3e:d4:6d:bb:e2:3a:cc:34:a4:66:c3:8d:dd:44:b9:e8:56:71:
79:4e:7b:b4:43:f0:d9:0d:87:24:7a:50:39:80:f0:98:fd:5d:
80:2f:04:4f:52:e3:50:21:50:33:67:ba:e4:27:92:83:22:23:
e7:3c:77:9a:5f:e6:16:f4:78:21:b8:1e:bb:ef:47:4c:f4:94:
54:76:1f:3a:46:60:4b:be:80:c1:51:62:5a:f7:0b:8f:79:45:
9e:bd:3f:73:31:6c:c9:11:ce:ad:83:82:6a:ac:b8:15:42:39:
40:d0:b4:d3:f0:39:8c:80:fd:f2:cf:c6:60:59:84:08:51:cb:
6e:9e:49:d0:1c:9d:19:05:82:90:f4:3b:c6:de:90:6e:50:d0:
3b:e0:83:a6:77:dc:f4:81:06:41:2a:0e:5c:a7:c7:f0:5a:ea:
86:1c:e6:5e:7e:5b:20:dd:d8:c9:fa:cf:09:d3:79:01:4e:ff:
15:66:03:5e:4e:58:a1:a7:38:47:85:49:fe:8c:42:af:ef:6f:
e4:bc:81:7e:37:9d:23:8c:a9:ff:f1:39:e2:7c:e3:81:08:dc:
04:8c:05:e0:6c:25:ef:80:ec:c5:30:94:77:c9:7d:71:42:f7:
e1:c3:ef:d3:c7:7d:61:c3:7d:6e:82:3e:67:7b:33:82:14:50:
ef:da:cd:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:31:03 2026 by rpki-client