Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/402B432A148911F1B04A42C2DAE4EC9C.roa
File: 402B432A148911F1B04A42C2DAE4EC9C.roa (raw, json)
Hash identifier: Ml1oEsmvk2AENlVJXusA26lWz5Xz/Ldw1Zxg741NFoY=
Subject key identifier: DD:BC:FD:CC:3F:D8:02:7C:90:4B:11:14:AE:7A:CB:A5:AF:55:DA:E9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A143
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/402B432A148911F1B04A42C2DAE4EC9C.roa
Signing time: Sat 28 Feb 2026 09:38:35 +0000
ROA not before: Sat 28 Feb 2026 09:38:30 +0000
ROA not after: Fri 27 Mar 2026 09:38:30 +0000
asID: 138456
IP address blocks: 45.202.194.0/23 maxlen: 24
45.202.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106819 (0x1a143)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 28 09:38:30 2026 GMT
Not After : Mar 27 09:38:30 2026 GMT
Subject: CN=69a2b79a-0b63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0d:3d:5a:b7:a1:b3:79:36:af:f5:c7:23:6e:
e7:39:d6:36:64:6d:2d:7d:f1:60:c9:a0:61:56:0b:
61:60:61:2d:c4:10:a6:14:be:b8:50:df:c7:93:31:
77:f7:73:c8:73:6f:1f:40:f1:ca:07:23:d4:66:f2:
c2:ea:c2:f1:f6:5e:2f:63:ee:fa:01:ad:ac:d1:6b:
62:5f:7c:6e:1c:fc:6c:0c:88:7d:c2:e8:5b:b4:4d:
cf:63:4d:b3:56:4c:dc:53:3b:fc:1e:40:c1:85:52:
fe:4c:1d:33:84:19:4d:cc:a8:cd:62:80:aa:34:c5:
37:cf:72:16:9c:7c:fb:7d:f9:fa:78:14:4a:b1:cf:
8a:c4:c5:69:cc:58:61:5b:83:a9:65:5e:af:ab:83:
7b:d7:64:8e:f3:9d:da:ff:94:8b:bd:85:8a:29:76:
5f:7c:24:d1:bc:6b:b2:d5:a9:b3:83:56:79:64:2a:
1b:5d:31:0b:60:a9:f6:b4:4f:00:d9:62:23:71:6c:
76:e4:fa:5c:17:7e:85:85:2d:18:86:01:73:a3:e6:
61:f5:e1:7b:17:01:c0:67:83:d2:30:bc:69:bb:77:
71:e2:6b:1a:e9:3f:09:61:40:62:3e:dd:51:df:7c:
6d:b5:f8:10:37:9a:98:7b:43:74:ee:c5:05:83:68:
45:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:BC:FD:CC:3F:D8:02:7C:90:4B:11:14:AE:7A:CB:A5:AF:55:DA:E9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/402B432A148911F1B04A42C2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.194.0-45.202.196.255
Signature Algorithm: sha256WithRSAEncryption
15:dd:62:b5:af:1b:e7:c4:ba:da:2b:5d:42:2f:8e:cd:07:0f:
9a:66:04:f3:0c:a5:66:73:07:78:28:ce:58:03:12:f2:45:a7:
6d:22:7d:d6:17:f2:75:49:2b:8d:d9:89:32:5c:d4:9e:84:30:
a1:32:ed:1e:ef:55:78:fd:8b:5b:39:57:d2:a2:df:9a:2b:e5:
6e:52:b7:f6:30:82:35:28:eb:bf:79:15:58:e7:3b:8f:3f:6c:
1a:11:0e:1a:73:3f:cb:94:4f:b8:d3:0c:cb:6f:88:98:37:ca:
9f:be:43:c5:46:91:2c:a9:4a:89:92:9c:2a:6b:6e:b3:28:0d:
f4:d2:ab:9e:64:df:6c:79:20:a9:9b:2c:50:10:1c:e1:9e:f3:
66:49:26:92:93:fd:9a:22:d6:40:7c:3b:32:66:ab:c9:8a:72:
a2:8e:55:99:2a:29:e3:f8:23:84:ab:2e:9b:65:40:93:bd:8a:
a9:f6:61:7e:3a:76:9d:e6:08:82:99:5e:f0:c1:b7:8d:81:1b:
c6:46:4d:15:26:38:4a:ea:86:70:4e:f1:54:f6:dc:32:30:5f:
78:45:5f:e0:37:6d:62:7a:33:cd:2b:f0:42:6c:13:f9:7d:8c:
68:32:b9:39:f9:93:fa:ca:96:fd:8c:76:c2:f8:54:76:5c:c7:
ca:d8:16:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:01:13 2026 by rpki-client