Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/45D6D1EE0D7311F1976E97BBDAE4EC9C.roa
File: 45D6D1EE0D7311F1976E97BBDAE4EC9C.roa (raw, json)
Hash identifier: DZiLr8HEBw6VcKvd6i4glGzrhscYG0Vsnjh7dAZhtrQ=
Subject key identifier: A2:1D:7D:BC:CF:BD:7C:20:03:1F:52:2B:F1:7B:59:35:4C:22:F7:C0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019EC2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/45D6D1EE0D7311F1976E97BBDAE4EC9C.roa
Signing time: Thu 19 Feb 2026 09:13:37 +0000
ROA not before: Thu 19 Feb 2026 09:13:32 +0000
ROA not after: Thu 25 Feb 2027 09:13:32 +0000
asID: 18186
IP address blocks: 45.192.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106178 (0x19ec2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 19 09:13:32 2026 GMT
Not After : Feb 25 09:13:32 2027 GMT
Subject: CN=6996d441-efea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:eb:a0:25:70:16:7b:7b:c2:33:2e:cd:15:ec:
6a:66:6a:61:3b:ea:c0:d4:1a:84:7a:87:96:14:d8:
fb:d6:ec:4b:e0:7b:67:e8:eb:da:c8:0a:49:e9:28:
83:9d:42:b3:0c:9c:12:a0:2d:a1:06:52:ab:62:5a:
97:71:3e:5d:a3:0e:0c:3a:b7:fa:59:fd:5d:78:04:
3a:94:6a:8f:f3:5d:4a:37:fb:af:ed:8d:55:80:7c:
27:fc:e9:ad:55:a4:71:96:c8:f6:95:c5:66:3f:78:
da:ee:9e:81:a3:f8:23:ec:19:a5:94:7a:bd:19:14:
84:4f:40:2f:db:1d:90:d8:73:e8:05:79:5b:29:4c:
f3:50:ea:95:6c:ab:02:2e:e8:a7:cf:f6:6d:0f:71:
fe:6d:92:71:69:39:5a:db:13:4c:6e:64:55:e5:7f:
3d:9a:36:c0:df:17:26:d9:ba:61:53:96:78:26:c8:
10:fb:09:9c:ac:3c:56:33:a6:87:20:d2:b2:9d:cc:
e0:47:75:a6:76:76:4c:0e:6e:ee:b2:0b:8f:fb:37:
6c:68:f9:a9:d1:81:c0:6e:f1:be:f7:54:e8:2a:ab:
59:cd:77:2c:32:71:62:a1:0e:e0:93:04:82:75:dc:
84:66:91:b3:49:d1:90:cd:c9:4f:c1:b7:0f:2f:c6:
84:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:1D:7D:BC:CF:BD:7C:20:03:1F:52:2B:F1:7B:59:35:4C:22:F7:C0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/45D6D1EE0D7311F1976E97BBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.17.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:be:b9:75:42:16:96:ae:f5:31:47:bd:4c:f1:55:f2:0e:89:
2e:cf:a1:e3:bd:19:21:b7:ad:7b:9a:4f:05:2d:3b:9b:36:e2:
1a:6f:49:ef:83:84:9e:6d:41:da:8d:9c:e9:64:ea:df:26:77:
a6:22:33:20:d3:6f:7b:29:d1:0a:29:80:6c:a6:bc:41:f2:d3:
df:0d:8d:82:48:eb:f4:28:e4:8f:04:8a:5a:7b:18:8d:3f:40:
8f:7c:83:36:d0:48:7b:a1:f8:41:1c:d5:97:b5:9f:7e:d2:64:
c4:3a:4c:12:ca:9c:18:b0:8d:10:5c:f7:78:12:40:be:59:83:
16:19:06:ea:7e:0c:13:31:7a:aa:74:e0:04:96:fe:f1:87:d0:
1d:6d:55:d9:dc:33:ee:a6:f0:db:2b:2b:52:4f:6a:12:69:a1:
45:d3:1b:c9:6d:ff:d2:11:fa:5e:7b:4c:07:d2:f3:29:fd:9a:
5f:87:79:1e:4d:26:af:11:fb:50:e9:8a:7b:cf:ea:5c:7d:ba:
89:46:c3:aa:11:5b:ad:00:7e:6c:2d:d0:39:ff:e7:16:08:9f:
d9:58:00:24:41:8a:3e:11:82:ce:bc:61:e6:dc:87:1a:e2:7b:
13:33:51:cc:e4:67:99:c0:70:0b:08:f9:37:0d:b6:57:08:f6:
b3:c2:5d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:19:44 2026 by rpki-client