Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/52E1DE00097811F1A34104C7DAE4EC9C.roa
File: 52E1DE00097811F1A34104C7DAE4EC9C.roa (raw, json)
Hash identifier: q9/XgDwpJmeCjU3E+gphcU+oi/0sG2+EeCVJpAeshtQ=
Subject key identifier: 04:A5:CB:15:C0:47:67:0F:7C:9F:79:E5:58:1C:6F:1D:97:7C:51:AA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019D7C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/52E1DE00097811F1A34104C7DAE4EC9C.roa
Signing time: Sat 14 Feb 2026 07:39:42 +0000
ROA not before: Sat 14 Feb 2026 07:39:37 +0000
ROA not after: Sun 22 Mar 2026 07:39:37 +0000
asID: 142032
IP address blocks: 45.205.16.0/20 maxlen: 24
45.205.16.0/21 maxlen: 24
45.205.24.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105852 (0x19d7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 14 07:39:37 2026 GMT
Not After : Mar 22 07:39:37 2026 GMT
Subject: CN=699026be-f0fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ac:09:e7:8a:27:ae:d5:08:d2:48:cd:b7:fa:
96:b1:e5:f7:a5:72:c9:29:82:f8:52:0d:23:81:99:
84:0a:d6:81:f2:26:a1:75:df:f2:7f:c8:f3:af:d0:
86:bf:e6:32:41:1a:91:70:54:6f:d2:82:27:fe:a0:
64:00:fd:06:e4:4a:84:d4:d9:6f:d0:1c:23:65:60:
da:1d:9b:43:0f:06:f7:ed:c3:8a:8b:cd:1e:21:27:
3d:d0:cc:f8:66:00:99:e4:fa:9a:be:45:2c:e2:2b:
b6:e4:65:31:6f:74:d3:42:c6:c8:98:78:7d:a9:15:
a1:71:ed:b2:1d:5a:a5:e0:fa:a0:d1:56:69:df:a1:
0d:27:37:bc:af:81:b0:3b:50:30:bb:d8:d5:2e:b1:
18:73:a9:c1:ce:24:f6:a8:34:09:ec:05:20:a6:ea:
b3:58:58:d0:eb:f0:8d:f4:57:50:a0:4f:e2:1f:87:
ef:50:cb:f7:db:bd:89:5c:8b:b5:6f:b1:ad:07:e3:
05:cd:a9:de:40:49:61:c2:bb:be:22:15:14:d8:aa:
a2:23:29:19:a1:33:33:eb:a5:21:12:e4:6a:39:15:
12:c7:17:dc:5a:20:6a:7f:8e:80:bd:e3:fe:d2:44:
7f:28:ba:be:bf:31:ac:d2:fa:98:7e:d8:af:5c:0c:
02:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:A5:CB:15:C0:47:67:0F:7C:9F:79:E5:58:1C:6F:1D:97:7C:51:AA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/52E1DE00097811F1A34104C7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.16.0/20
Signature Algorithm: sha256WithRSAEncryption
1f:37:f8:6b:32:3d:e7:95:4d:14:74:5d:e3:f6:9b:96:0b:cd:
34:2f:7c:0c:02:f1:19:42:15:cd:fd:10:48:a2:15:1e:5e:91:
f1:87:5b:06:9a:2b:23:56:02:6e:19:b8:56:36:1b:e9:38:70:
40:25:52:ba:87:ad:e6:89:c7:c7:59:96:93:96:77:d0:65:04:
84:9b:ef:a8:51:e9:cf:0e:20:f3:f9:d2:c2:cf:21:b0:8f:f0:
6d:31:8f:24:ae:31:80:22:29:82:33:03:f8:cf:14:a5:5d:52:
df:17:a3:7a:20:86:b5:d3:77:d1:ad:ad:00:82:bc:07:90:1b:
1c:46:08:d5:b0:28:59:de:c0:81:12:d4:bc:58:6b:bc:53:e8:
78:32:c9:74:7a:29:00:ae:e6:0a:25:d2:da:60:fe:af:3b:a1:
c6:19:f2:20:3e:b9:25:6c:84:ab:fa:c1:c9:8c:67:85:cd:9f:
de:10:34:79:fe:9f:5f:ab:35:a9:65:84:51:41:c0:24:7d:7f:
ab:be:64:af:3b:b4:37:93:ce:87:14:e8:fd:e2:e1:5c:23:38:
15:47:6b:08:1d:42:6c:f6:d2:60:38:86:3c:57:b0:0a:0e:fb:
e0:69:83:b4:6e:f1:37:19:df:c4:ef:fd:bd:fc:b3:1a:89:8f:
72:07:00:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:52:04 2026 by rpki-client