Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3592B8360E8911F1BAA7D3E4DAE4EC9C.roa
File: 3592B8360E8911F1BAA7D3E4DAE4EC9C.roa (raw, json)
Hash identifier: ozztz8IGGk7Nkx84RxgMv2u8w1Ch/8R5ROTqd5oxwi8=
Subject key identifier: BE:29:A4:13:DA:9F:70:BA:80:E6:77:53:52:DC:5B:EC:5B:04:8E:65
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019EFC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3592B8360E8911F1BAA7D3E4DAE4EC9C.roa
Signing time: Fri 20 Feb 2026 18:23:10 +0000
ROA not before: Fri 20 Feb 2026 18:23:06 +0000
ROA not after: Mon 16 Mar 2026 18:23:06 +0000
asID: 131471
IP address blocks: 45.195.130.0/24 maxlen: 24
45.195.131.0/24 maxlen: 24
45.195.194.0/24 maxlen: 24
45.195.195.0/24 maxlen: 24
45.195.210.0/24 maxlen: 24
45.195.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106236 (0x19efc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 20 18:23:06 2026 GMT
Not After : Mar 16 18:23:06 2026 GMT
Subject: CN=6998a68e-4423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5a:77:3d:71:b0:8f:e3:2d:26:13:b3:e7:f6:
14:eb:02:96:79:08:90:55:2e:22:4a:c6:34:13:6e:
4e:53:04:b8:27:67:72:01:8a:48:b1:36:f9:b7:6b:
17:58:a1:82:9b:fe:48:0b:03:c3:70:ee:37:3e:90:
a5:57:16:b8:14:88:6b:66:f7:b3:7a:e9:62:00:ec:
4d:50:45:e3:af:80:7e:7c:bb:85:f3:46:51:a5:d6:
bc:98:89:79:06:9f:ad:16:d1:bb:20:53:eb:c8:4d:
fc:da:74:29:b3:6a:a2:b6:4f:d3:f3:2f:1c:5f:36:
c8:13:45:83:54:82:3d:45:e4:34:47:56:b4:83:4a:
e3:87:c1:c4:0a:05:da:24:3e:c3:4f:a0:1b:4e:04:
9b:8e:e1:fd:57:c4:67:bf:51:54:a9:8e:30:c6:87:
dc:0f:d3:40:49:29:5c:88:9d:6e:41:01:fa:31:26:
89:dc:e5:49:1d:1b:46:60:d8:6b:e5:6a:d7:2e:87:
2c:43:37:81:6e:50:00:df:6a:58:08:db:87:0e:20:
2b:e4:92:64:9a:35:5f:85:04:2a:c9:d9:08:1f:5b:
3b:00:d9:28:4b:8a:24:11:9e:71:6f:c1:0a:82:df:
79:05:48:b2:81:6b:88:30:72:ce:d8:a5:d9:64:c0:
eb:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:29:A4:13:DA:9F:70:BA:80:E6:77:53:52:DC:5B:EC:5B:04:8E:65
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3592B8360E8911F1BAA7D3E4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.130.0/23
45.195.194.0/23
45.195.210.0/23
Signature Algorithm: sha256WithRSAEncryption
46:98:75:37:71:a6:6c:e1:be:f1:6d:2d:c2:b1:b5:18:37:ff:
14:aa:f6:0b:03:d6:7a:c8:fd:3e:a2:aa:ef:0a:0e:ca:0d:26:
65:cb:f1:34:a7:7f:ba:30:0d:53:91:68:8e:c9:73:c2:66:8f:
99:32:7c:d0:17:01:70:a5:9d:3e:5a:03:ff:00:2d:3a:77:79:
43:de:fc:5a:c4:3a:cc:ee:56:ef:9b:99:01:80:32:81:83:bf:
6a:48:e2:03:64:8d:1e:3b:d0:f2:86:e2:5b:07:d2:fd:71:5d:
83:93:27:9e:6d:8b:e9:89:17:d8:85:99:b7:e4:6e:59:71:0e:
48:bb:7d:0d:2c:e0:f7:b8:70:42:0b:b3:8c:20:17:16:46:9b:
9e:9c:f3:76:80:5a:65:18:e9:6a:5d:e3:69:11:d3:83:cd:56:
aa:50:05:87:f8:07:00:9f:57:ba:51:94:d3:af:b2:bd:02:da:
19:b8:2d:f2:97:be:60:af:d1:14:9f:1f:4e:ac:9d:26:86:88:
3f:6e:69:d8:f8:e9:04:dd:97:33:00:48:d8:10:3a:ae:8a:4f:
e3:57:2e:fa:12:38:c8:81:95:2a:80:d7:3b:41:a2:62:9e:e3:
0a:d3:26:8f:12:fb:84:a7:e4:da:ea:c5:8a:9f:59:80:32:86:
1b:ae:b7:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:56:22 2026 by rpki-client