Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/42EF833011FC11F18AC27DA4DAE4EC9C.roa
File: 42EF833011FC11F18AC27DA4DAE4EC9C.roa (raw, json)
Hash identifier: nXFLGLIeSrX2olLj+oZvd2lulPKJq35jaa2KDedcxtA=
Subject key identifier: 1E:87:79:52:A1:83:E2:CB:79:C7:2D:3A:AB:F0:2B:03:58:4B:C1:69
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A052
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/42EF833011FC11F18AC27DA4DAE4EC9C.roa
Signing time: Wed 25 Feb 2026 03:44:18 +0000
ROA not before: Wed 25 Feb 2026 03:44:14 +0000
ROA not after: Thu 05 Mar 2026 03:44:14 +0000
asID: 395793
IP address blocks: 45.196.64.0/22 maxlen: 24
45.196.68.0/24 maxlen: 24
45.201.36.0/22 maxlen: 24
45.201.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106578 (0x1a052)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 25 03:44:14 2026 GMT
Not After : Mar 5 03:44:14 2026 GMT
Subject: CN=699e7012-00bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ea:1c:3a:46:b4:6d:70:e4:7c:c2:be:0a:e4:
79:3a:e2:6e:7f:99:ef:d9:f2:a8:4a:37:0d:a7:66:
80:f7:b0:35:b9:4e:f4:a3:67:e0:7f:84:20:c8:1d:
eb:79:45:54:9e:d9:10:0d:03:52:a4:dd:e1:f2:5d:
28:c5:3c:9a:a7:c5:e3:da:fd:8a:3f:c0:9f:03:12:
84:8c:15:16:c3:bb:d9:6a:80:1e:a3:53:85:15:c2:
3a:17:a1:71:f4:64:79:8d:30:26:c5:3f:96:82:a7:
5a:f5:32:65:97:2d:b8:03:12:43:1d:ca:0e:8b:e0:
f0:5d:a2:4d:6d:0b:96:bb:39:8a:4a:df:ad:f0:e2:
52:1c:76:80:d6:a0:ec:fe:9d:3f:d0:0c:26:f8:81:
dc:18:7c:13:ec:6a:f5:7e:09:5b:f1:e2:1c:cf:44:
c8:f6:15:af:1d:41:26:2b:e4:b5:48:dc:0e:1f:44:
3f:db:d3:c1:27:c3:67:cd:e8:08:cb:cf:d0:c5:76:
75:46:fd:0e:a7:57:42:c2:e0:3b:6a:04:87:51:9b:
b8:69:8a:97:54:b7:8d:22:17:5a:2f:b2:d8:f1:10:
d7:9b:b0:b6:f0:7e:c6:8b:51:28:e7:4c:89:70:39:
e0:54:ac:1f:75:86:77:37:dc:cd:28:78:68:30:2f:
8b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:87:79:52:A1:83:E2:CB:79:C7:2D:3A:AB:F0:2B:03:58:4B:C1:69
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/42EF833011FC11F18AC27DA4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.64.0-45.196.68.255
45.201.36.0-45.201.40.255
Signature Algorithm: sha256WithRSAEncryption
1a:c0:6c:61:6a:02:35:e4:cd:3f:f8:ca:06:97:69:c9:ec:e2:
b2:6f:82:cf:39:5f:b7:ca:b6:4f:b4:32:b5:2c:ae:bb:ea:01:
64:dc:b7:5b:a0:ef:cc:20:5f:f5:83:d0:a0:e0:c4:47:44:67:
ce:e2:50:3b:59:ef:25:c3:0f:7d:04:62:8f:10:74:15:f5:90:
8c:7d:96:02:a1:41:4e:61:15:0d:4d:8d:ad:aa:40:79:96:d3:
94:d8:e2:37:0c:46:38:70:00:6a:53:f8:92:2c:e2:16:c9:0b:
cc:c8:1d:57:9a:92:a5:46:27:27:5c:d9:b4:32:ba:52:ed:11:
ba:56:05:9b:33:31:8d:6a:21:18:87:80:c4:88:91:cc:2a:11:
02:47:7d:8c:9a:f5:4b:9b:50:72:4f:76:bd:8d:5e:5e:24:b2:
cb:ff:ea:e9:a9:0f:1a:f1:e1:16:0f:c8:b7:8f:1f:34:d4:b2:
15:1b:c0:42:6d:bb:c8:e2:f4:ef:28:37:72:dc:33:0c:c7:89:
9f:d9:df:6d:c7:2d:59:82:e5:e1:52:73:20:ac:5f:88:ef:33:
a4:ac:33:37:63:5d:2d:c9:77:1b:cc:02:74:8b:44:cc:47:6b:
ca:07:e3:1d:85:bd:ca:76:08:94:ef:30:20:17:bc:13:89:6e:
51:27:d4:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:54:21 2026 by rpki-client