Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/447E13D613D411F1B53886E9DAE4EC9C.roa
File: 447E13D613D411F1B53886E9DAE4EC9C.roa (raw, json)
Hash identifier: 24VJHN1UGJ0CpAfDkPziBfvwXPedH7MleFVoQ3BIelg=
Subject key identifier: 94:4E:EE:8D:0B:18:39:E7:5E:DD:9C:D8:51:3B:59:76:DD:F3:40:6D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A13A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/447E13D613D411F1B53886E9DAE4EC9C.roa
Signing time: Fri 27 Feb 2026 12:03:03 +0000
ROA not before: Fri 27 Feb 2026 12:02:59 +0000
ROA not after: Fri 03 Apr 2026 12:02:59 +0000
asID: 206938
IP address blocks: 45.196.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106810 (0x1a13a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 27 12:02:59 2026 GMT
Not After : Apr 3 12:02:59 2026 GMT
Subject: CN=69a187f7-5ccf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ea:ef:28:86:40:54:c9:9c:49:6d:d8:5b:71:
ac:5b:69:8f:59:45:c3:1f:7c:4e:48:8d:a4:36:56:
8f:94:13:b3:b9:3e:f2:70:16:31:f0:1a:32:a7:36:
68:75:eb:65:6a:e6:39:e8:bf:ea:5e:63:68:a1:3a:
56:46:f1:30:61:c6:9d:26:8d:8d:7e:65:17:a1:36:
e6:d8:cc:d6:6f:2d:39:1a:31:7f:41:13:81:6c:d5:
3c:ec:1a:7a:95:3e:39:59:ec:d8:f0:6f:98:13:6b:
c2:a6:2d:d3:3f:ea:a6:e5:6a:ee:1c:1d:81:a5:0b:
43:94:91:e2:c3:d8:81:41:48:5c:00:d4:8e:a8:f3:
04:b4:23:a3:43:28:7c:98:19:d8:84:e5:25:c3:20:
94:ff:34:ab:0a:5b:8a:77:1d:dc:3f:c6:15:a9:77:
9b:73:6f:1c:93:18:a9:82:12:04:9c:c1:b0:c1:3b:
5b:d4:9b:29:e9:7d:8d:1f:7e:8b:7c:7b:a1:8d:2c:
0d:1a:05:33:72:57:e1:13:59:0a:59:c4:c3:fb:2e:
84:2b:89:5a:ee:dd:35:72:e7:76:3b:52:8a:8e:b3:
74:f1:54:cf:b3:fb:92:56:6a:bd:8b:51:99:8e:14:
31:fd:57:8d:69:34:e8:2e:37:f2:80:92:c9:1c:d9:
53:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:4E:EE:8D:0B:18:39:E7:5E:DD:9C:D8:51:3B:59:76:DD:F3:40:6D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/447E13D613D411F1B53886E9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.132.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:07:0d:10:2f:3b:96:4d:81:03:97:d2:ff:24:ac:75:ce:a9:
25:fd:19:34:0f:23:00:95:6e:55:44:c9:f1:4f:5e:5f:94:5a:
e8:18:b3:2b:f4:99:f4:dc:4b:e6:d8:19:20:4e:e0:ea:c9:dc:
41:20:72:01:af:d2:6f:64:13:ab:69:8c:a0:4b:7b:0f:62:cc:
8f:2b:18:5f:05:9f:82:3e:6e:84:c1:db:45:7e:8e:23:11:20:
88:a8:1f:e3:f4:d2:c3:91:cc:57:13:b3:c2:b7:1a:11:74:71:
fe:9b:52:dc:4b:a2:99:9d:e1:21:50:40:60:3f:13:24:55:8e:
15:51:09:8d:fd:2c:4f:5c:4e:3f:c9:8a:c0:0f:63:90:3f:8d:
8f:3e:da:01:0f:fd:7e:be:be:79:06:62:1b:5f:7d:ea:a9:74:
0d:9b:b9:78:f8:4a:96:e4:6a:e1:b3:b2:a3:3b:db:82:29:7d:
da:bc:c1:54:53:5b:e3:5f:bd:23:50:93:f2:88:6e:5d:69:57:
1a:e0:67:60:d7:ed:95:9a:f8:a2:d2:20:bc:47:ea:c9:fc:84:
bf:42:4e:43:23:67:39:84:37:80:52:ae:d3:ee:ff:1e:41:3a:
73:bf:37:d2:95:11:5c:6f:36:f0:64:bf:b5:ee:d4:4b:5f:b8:
a7:e7:e8:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:08:37 2026 by rpki-client