Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/40BE35E0098511F180953996DAE4EC9C.roa
File: 40BE35E0098511F180953996DAE4EC9C.roa (raw, json)
Hash identifier: N4U3/Zdfi/WHouKh4gXtOhT2d3T3N46QrUlLowZD0cI=
Subject key identifier: 7F:54:AF:B6:05:A9:FD:86:0D:3A:28:D1:FA:0E:6C:02:17:4A:2C:C9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019D9A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/40BE35E0098511F180953996DAE4EC9C.roa
Signing time: Sat 14 Feb 2026 09:12:15 +0000
ROA not before: Sat 14 Feb 2026 09:12:10 +0000
ROA not after: Sat 21 Mar 2026 09:12:10 +0000
asID: 215925
IP address blocks: 45.205.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105882 (0x19d9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 14 09:12:10 2026 GMT
Not After : Mar 21 09:12:10 2026 GMT
Subject: CN=69903c6f-b78b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9b:4e:cf:0b:df:c8:f0:e5:0d:ba:9b:74:bd:
14:58:ed:81:50:a6:55:80:28:72:f8:91:ed:44:0b:
9f:a3:56:8c:36:c0:a6:92:70:46:65:95:1d:6c:7a:
a5:9c:7f:b8:65:d8:89:15:b9:d1:a3:77:17:e8:3e:
c3:9b:e2:c1:7d:fa:4b:a4:6f:1f:84:a6:a7:73:8a:
45:25:33:8c:e8:f2:fc:a6:af:b7:3b:63:50:c1:27:
c2:38:9a:94:99:61:75:f1:d4:14:33:f3:c1:76:8e:
38:cf:58:cf:f8:66:a8:54:9e:19:b2:a4:69:17:9a:
e8:37:d2:b6:ae:52:84:c1:97:3c:79:ec:20:b2:5c:
fc:4a:29:47:06:97:78:8a:25:fb:39:4c:bb:ab:77:
fe:35:b1:89:02:5c:bf:a6:ea:2f:49:cc:ba:68:4c:
20:c8:a2:64:74:37:2f:ff:1e:1f:f0:1e:b9:f1:d6:
18:b6:67:24:8a:30:f7:8e:b5:5c:b1:dd:9c:9c:30:
1f:99:cb:b6:0f:ab:26:62:d5:ff:23:27:a3:1d:29:
7d:1c:bb:f4:95:5d:cc:4c:d3:54:ec:90:73:aa:ab:
b8:aa:d2:77:1f:e8:5d:2f:62:c2:58:33:d8:ba:b6:
83:75:d7:d0:76:5d:49:ab:ce:d5:94:b9:66:3e:3e:
03:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:54:AF:B6:05:A9:FD:86:0D:3A:28:D1:FA:0E:6C:02:17:4A:2C:C9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/40BE35E0098511F180953996DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.1.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:39:4b:1c:05:98:db:bb:85:99:6d:5a:23:06:29:51:db:1b:
15:c1:d5:6c:27:dd:50:a4:43:c7:a1:ad:f0:28:14:c2:7e:25:
30:14:70:3f:2d:30:1a:99:2b:8e:26:c2:44:4a:7e:b0:f0:66:
50:e7:47:6c:9e:dd:3b:ea:85:f7:f8:28:b4:db:2f:d9:31:49:
1f:17:c2:3c:55:00:d2:30:9c:bd:05:11:cb:cd:32:47:05:cd:
8a:20:e8:76:23:0a:82:2e:4b:25:da:6d:18:c1:81:63:4e:4f:
86:09:1e:94:4d:76:52:05:3e:5a:27:77:b8:db:05:ca:a6:9a:
e9:04:17:be:86:ab:4e:bd:16:b9:14:db:c5:38:86:83:ab:a1:
99:a9:6b:f2:f4:30:79:fb:64:fe:91:52:e4:5b:9e:39:b5:79:
50:cd:b5:6e:4c:e9:42:f4:a7:9e:be:d6:14:a0:17:e1:7c:2d:
58:25:9c:c7:d3:7b:44:47:32:fa:c7:b8:6d:7b:10:0c:05:7b:
26:8c:3d:57:3a:39:f5:49:15:e4:f7:52:db:dc:51:20:5b:cf:
dd:c0:22:58:d7:d0:93:86:a4:e3:cb:65:b1:be:00:20:ec:64:
31:89:d5:01:d8:dd:d3:c6:fb:b2:21:08:c6:68:34:16:ee:87:
b3:d6:e9:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:31:14 2026 by rpki-client