Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C8CAD0213B311F1AC1170A4DAE4EC9C.roa
File: 3C8CAD0213B311F1AC1170A4DAE4EC9C.roa (raw, json)
Hash identifier: L+KuBpM61h2cKTWnD3EXMhkYWX0nslMfWN3ksyCsvKc=
Subject key identifier: 5A:E0:E3:41:6A:BA:E8:43:23:73:DA:6B:76:81:A7:E6:AC:1D:FA:5F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A100
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C8CAD0213B311F1AC1170A4DAE4EC9C.roa
Signing time: Fri 27 Feb 2026 08:06:36 +0000
ROA not before: Fri 27 Feb 2026 08:06:32 +0000
ROA not after: Tue 17 Mar 2026 08:06:32 +0000
asID: 273908
IP address blocks: 45.194.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106752 (0x1a100)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 27 08:06:32 2026 GMT
Not After : Mar 17 08:06:32 2026 GMT
Subject: CN=69a1508c-ce46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fb:c0:9d:13:b3:2c:ad:8a:f7:ab:d2:f7:7d:
69:ff:6b:06:19:4e:89:51:62:ba:87:46:7c:cc:27:
2f:ff:ef:93:d2:83:08:f7:e6:73:c1:26:4b:d9:3e:
34:2c:99:6b:e9:e1:78:db:b2:18:e9:1f:63:5f:65:
c6:e1:78:79:c1:18:14:ba:74:8d:6a:cf:65:f9:ea:
e1:99:11:60:ee:d4:8a:db:8c:ee:b4:6a:b7:97:75:
bf:96:cb:93:54:e0:e8:0f:42:da:0e:b3:f2:1e:bc:
49:e0:fa:58:8a:2c:72:ad:fa:5e:39:94:0f:93:72:
4a:db:b2:e3:56:c1:37:1a:6a:b5:37:13:72:e7:3c:
fb:7c:58:3b:74:7d:25:3e:dd:f5:4f:9c:f4:44:e1:
8d:6a:90:12:fb:d6:8f:3e:dc:a9:67:65:78:52:09:
2a:af:60:2a:12:e1:68:ae:fe:5e:40:13:23:73:3a:
72:f6:09:2b:3b:88:dd:e7:61:17:df:c2:81:f0:ac:
b4:1d:5e:3e:bd:ed:c6:b4:18:8d:4f:82:f3:01:a6:
97:aa:2c:98:ef:32:eb:8b:af:50:73:54:e1:ff:49:
83:88:e9:b1:12:75:79:33:55:a6:95:06:7f:df:e7:
1b:cb:86:88:fd:c1:e6:e7:2c:57:10:90:83:1b:6c:
f7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E0:E3:41:6A:BA:E8:43:23:73:DA:6B:76:81:A7:E6:AC:1D:FA:5F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3C8CAD0213B311F1AC1170A4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.69.0/24
Signature Algorithm: sha256WithRSAEncryption
54:f8:20:02:0a:a7:95:99:7e:0a:c6:f6:71:dd:fe:7a:3d:43:
45:ac:75:34:e1:d9:ae:25:12:e5:6a:63:83:c7:47:20:1d:bf:
1a:3a:7c:ce:e7:3c:11:6f:7f:97:6a:01:da:23:fa:b1:51:14:
9d:95:91:68:45:40:bc:88:fc:73:33:80:4e:be:3b:ab:45:21:
09:1b:83:ce:e1:45:66:9e:41:8c:bb:67:e1:21:a3:5a:cf:5a:
f7:ad:11:f9:fd:3b:39:64:c3:b4:79:f6:4b:e7:80:9c:80:5f:
09:9e:8f:17:32:74:63:ee:e4:d5:25:46:03:63:6d:b8:d4:03:
89:81:95:7e:60:64:8d:6e:69:5d:c6:8a:f0:82:07:a0:94:39:
a4:df:bc:07:20:1e:f9:38:0b:5d:17:47:5c:f1:59:13:ff:41:
68:8f:65:e6:b4:d6:0e:a6:78:67:8e:44:d8:24:d0:a5:aa:d0:
88:69:1e:1b:e3:76:27:8a:2d:96:dd:7a:cb:56:f2:4a:92:3c:
de:34:a0:04:84:03:54:16:1f:ab:8c:84:a3:c5:1a:00:ed:97:
ec:cb:5f:19:b2:7f:d5:09:66:ca:ee:1e:bd:c3:93:37:b0:ba:
52:4c:79:e0:76:e8:71:d6:60:e4:a3:ae:58:13:78:f9:43:e4:
87:ab:05:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:19:55 2026 by rpki-client