Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/530301F2121A11F1AA74D0D8DAE4EC9C.roa
File: 530301F2121A11F1AA74D0D8DAE4EC9C.roa (raw, json)
Hash identifier: oDMoubt2ajD+nZ8e+XWtEHAJ39WbXpgYkNnXyKVc5Tk=
Subject key identifier: B9:14:78:2B:80:EC:35:6B:52:C8:6C:5A:39:2F:83:F4:35:22:A1:F4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A05C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/530301F2121A11F1AA74D0D8DAE4EC9C.roa
Signing time: Wed 25 Feb 2026 07:19:30 +0000
ROA not before: Wed 25 Feb 2026 07:19:26 +0000
ROA not after: Thu 04 Mar 2027 07:19:26 +0000
asID: 63199
IP address blocks: 45.196.72.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106588 (0x1a05c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 25 07:19:26 2026 GMT
Not After : Mar 4 07:19:26 2027 GMT
Subject: CN=699ea282-23e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3e:ae:37:24:ab:cc:45:dd:1a:9b:21:89:95:
1f:a8:fe:cd:0d:72:26:0c:9e:61:3a:13:1a:84:a8:
9f:1e:44:0f:f3:bd:32:94:d9:50:50:a8:de:16:b7:
00:c6:16:87:f1:b8:eb:58:cf:83:f3:c5:ec:fc:ee:
0e:c3:73:bd:bb:66:3d:4b:fe:4e:be:73:12:82:62:
48:f2:3e:98:b4:a9:8b:75:58:8c:38:5c:02:21:38:
f1:a8:ba:37:ab:f5:c3:51:ec:b3:83:9c:f4:14:30:
ed:ea:5c:56:1d:35:aa:8d:af:8c:23:8f:4d:9e:70:
4b:d1:b4:1b:9d:4c:31:43:a0:20:75:ba:46:85:8d:
08:84:d9:61:b8:26:c8:88:d9:e5:aa:1c:c1:16:b3:
20:18:2c:4c:00:fb:66:c4:0f:84:08:66:50:10:5b:
ab:cb:a7:58:f2:c8:39:5e:60:22:42:4c:08:d2:29:
a3:cc:d5:c4:7c:7f:88:60:60:73:7f:6e:bb:33:fa:
45:41:23:26:e1:cc:45:b2:16:65:e2:b6:05:69:05:
3b:2b:03:56:46:d0:a0:7f:c8:7d:e8:9b:25:ec:55:
96:da:66:13:69:6f:22:06:6a:1b:f6:11:41:1e:e9:
21:ba:22:5d:ef:7c:de:e1:59:28:ed:c9:66:84:4b:
cd:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:14:78:2B:80:EC:35:6B:52:C8:6C:5A:39:2F:83:F4:35:22:A1:F4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/530301F2121A11F1AA74D0D8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.72.0/21
Signature Algorithm: sha256WithRSAEncryption
70:b9:4a:cf:8e:7e:99:1c:78:d6:bf:7a:6c:21:d7:af:b6:37:
0c:16:0c:59:13:9d:26:fb:29:39:01:e9:b5:16:7a:85:43:b7:
2f:c9:94:61:90:b8:03:54:d7:00:66:9f:9a:40:e7:81:4c:62:
a5:4a:60:5e:d2:62:e8:a7:cc:dc:67:d9:e9:e3:87:8b:17:65:
64:b2:a6:d5:5d:1d:83:e5:a2:88:e1:a8:3c:36:4a:3c:12:de:
89:74:7a:32:40:59:1f:61:4f:1d:70:28:6d:78:a9:24:30:eb:
00:34:39:48:21:e7:d4:66:72:45:60:88:25:db:45:bc:7c:0f:
99:af:99:e7:ea:85:6a:bc:f6:3d:8a:ca:49:ac:47:2e:01:12:
35:0e:72:f4:b7:4f:e1:68:4b:0f:08:9e:7e:f6:33:38:8c:9b:
89:cc:85:b7:d7:9a:ae:6b:9d:15:a3:a3:fd:a8:cb:7b:58:40:
12:2e:2e:33:3e:21:05:0b:ed:80:e1:58:9f:8b:c0:95:dc:2c:
20:b4:ba:4b:ea:ce:5f:ff:50:18:82:ab:ce:c2:ee:87:c0:e5:
b1:7f:07:2c:cd:cc:b0:eb:0b:c2:b0:28:35:ad:6b:fa:4a:28:
6c:3d:29:46:a5:a8:ac:28:ea:33:c2:6a:53:56:cb:c6:9e:c2:
10:39:52:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:22:33 2026 by rpki-client