Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3E7EF9B0066811F18E6221F2DAE4EC9C.roa
File: 3E7EF9B0066811F18E6221F2DAE4EC9C.roa (raw, json)
Hash identifier: kBfDIVEVSbvl7FFH1wRnlY8/bYGY9opp+g+uNhpBc08=
Subject key identifier: EE:D4:AF:8F:7A:0C:8C:07:28:B5:E8:AB:BA:0E:14:1A:84:FE:ED:FA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019C95
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3E7EF9B0066811F18E6221F2DAE4EC9C.roa
Signing time: Tue 10 Feb 2026 10:07:02 +0000
ROA not before: Tue 10 Feb 2026 10:06:56 +0000
ROA not after: Fri 20 Mar 2026 10:06:56 +0000
asID: 401615
IP address blocks: 45.196.234.0/23 maxlen: 24
45.196.234.0/24 maxlen: 24
45.196.235.0/24 maxlen: 24
45.196.238.0/23 maxlen: 24
45.196.238.0/24 maxlen: 24
45.196.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105621 (0x19c95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 10 10:06:56 2026 GMT
Not After : Mar 20 10:06:56 2026 GMT
Subject: CN=698b0346-45d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:d1:9d:24:6f:ef:d6:24:5e:4e:17:05:f1:6a:
28:b0:0e:6c:35:0a:75:1a:3a:df:56:41:7f:d6:05:
34:24:cf:32:09:17:68:2c:a7:4b:3d:9d:11:89:ea:
9d:49:e0:59:17:2e:7d:35:bb:8f:d1:f7:eb:3d:11:
8e:4b:49:0c:2b:26:b0:16:16:45:67:ba:da:af:1a:
f5:58:df:d9:1e:ee:dd:fb:44:ea:a2:3b:2d:66:cc:
2c:b8:b8:26:cb:c9:f8:84:bc:08:bb:20:8a:5f:15:
36:25:42:ce:32:0b:2a:fd:5e:8a:60:ae:59:cf:6b:
a9:7c:f8:24:9c:93:32:28:8f:52:16:c7:9f:5b:cf:
0b:e6:b7:86:f6:f8:b4:9f:b4:f9:0b:0a:60:34:ec:
4a:22:9e:0e:b2:90:40:c5:01:cc:af:79:5b:f4:a3:
56:e4:d5:2a:61:61:96:3b:48:80:88:7e:25:4f:3b:
55:9a:9e:5b:35:17:d6:4c:16:61:f4:11:d3:4b:49:
f1:1e:9f:17:d1:86:de:14:f2:1f:bb:37:d5:f3:d6:
c0:d4:42:ae:6f:4d:30:09:6c:41:ee:9e:06:09:73:
64:3c:29:e5:c4:03:8f:ad:1c:1e:a8:a1:62:01:d8:
15:b3:40:cb:23:fa:26:7b:1a:d0:ec:f2:a1:61:38:
dd:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D4:AF:8F:7A:0C:8C:07:28:B5:E8:AB:BA:0E:14:1A:84:FE:ED:FA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3E7EF9B0066811F18E6221F2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.234.0/23
45.196.238.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:22:49:3f:c3:5d:c0:96:ba:e3:55:0c:ed:3d:97:c2:3a:58:
a6:81:90:6d:69:eb:4b:54:06:7e:03:9d:67:03:61:e9:36:18:
2e:23:68:42:8a:4b:36:a9:d5:fe:64:61:9e:b3:08:5d:7d:44:
e1:84:da:ab:be:39:8d:0f:32:4a:4f:ea:d7:84:34:d5:62:7c:
ee:35:22:19:7c:35:ad:f4:cd:98:09:ba:0e:2e:c6:89:69:97:
58:c7:71:85:55:df:3c:8e:6a:ee:3e:7e:1a:b0:26:cf:ed:fb:
d2:25:c1:cd:e5:9b:11:4b:9b:04:ef:82:c5:96:b5:80:00:0f:
4e:71:c5:06:77:d7:f7:ea:57:06:c6:da:77:e9:b6:dd:21:1e:
eb:e9:66:2f:9d:d0:34:31:6d:8f:46:6a:a0:a2:f6:d1:e0:e4:
63:61:19:cc:0c:c1:c0:18:33:2a:5d:94:60:e4:0b:13:f0:b9:
86:51:0f:0d:c2:41:00:fa:56:25:8c:9b:3d:76:0a:37:a2:4a:
1f:b2:f4:d2:22:10:1d:f8:2f:2f:fd:58:68:4f:58:c1:a4:31:
37:43:45:0b:f1:ef:53:cd:9e:b0:f2:5e:02:0c:28:aa:d2:82:
75:a0:8c:6a:a7:a1:c0:69:1b:a2:86:77:15:16:00:2f:5a:77:
ae:c1:1f:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:59:17 2026 by rpki-client