Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5754F72C034E11F1A92FE2E2DAE4EC9C.roa
File: 5754F72C034E11F1A92FE2E2DAE4EC9C.roa (raw, json)
Hash identifier: l9BZtmuxUyHGGlwttFLqE1UxCpX1MeeQzT76wDMA8zs=
Subject key identifier: BF:29:5E:68:B6:BA:E0:08:1A:AE:69:26:E7:6C:83:A7:87:5E:B9:26
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019C0A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5754F72C034E11F1A92FE2E2DAE4EC9C.roa
Signing time: Fri 06 Feb 2026 11:24:03 +0000
ROA not before: Fri 06 Feb 2026 11:23:59 +0000
ROA not after: Tue 10 Mar 2026 11:23:59 +0000
asID: 1405
IP address blocks: 45.192.242.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105482 (0x19c0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 6 11:23:59 2026 GMT
Not After : Mar 10 11:23:59 2026 GMT
Subject: CN=6985cf53-6be8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:10:52:ef:08:68:9c:e1:e9:39:21:6e:fc:1e:
ba:ca:27:cf:80:0a:f1:f2:ba:b1:0b:ef:e3:61:2f:
94:b7:66:bc:a2:61:b3:1f:8c:66:b5:1c:e5:f1:ae:
c4:c3:98:ac:08:08:f6:fe:4d:68:8d:94:af:b1:c9:
d9:58:82:63:1b:d5:05:f1:4f:2f:27:e6:8f:9d:e0:
51:0f:79:af:49:77:82:f1:60:8e:11:b7:cf:43:f4:
af:9d:7a:1f:29:f6:4e:03:1b:4c:82:d6:5e:20:37:
68:93:dd:2e:3e:f7:78:e8:7d:b3:b2:08:c2:4b:03:
df:a8:7d:26:0f:eb:82:8b:09:06:05:af:32:f4:ee:
32:7a:e3:59:73:36:65:7c:4a:df:39:a1:ee:48:f8:
9a:ba:f9:05:20:0e:02:21:f6:d7:dc:59:e7:38:42:
5d:eb:93:e5:66:b1:37:a7:6f:71:e7:2e:6e:7c:7c:
71:79:e9:ad:70:5e:64:08:5c:81:ae:a2:b4:8f:25:
dc:f3:be:d9:fb:94:70:8e:b0:ae:87:f0:e8:b2:31:
0d:6f:73:0f:e0:d5:81:e7:16:6d:b1:e1:a6:a7:50:
7b:84:34:2c:8c:a8:14:9a:a1:27:16:2f:75:59:57:
0d:cd:d2:e1:3f:b1:2c:1e:9b:36:7e:f5:5f:e0:98:
fc:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:29:5E:68:B6:BA:E0:08:1A:AE:69:26:E7:6C:83:A7:87:5E:B9:26
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5754F72C034E11F1A92FE2E2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.242.0/23
Signature Algorithm: sha256WithRSAEncryption
76:0f:32:14:db:8b:4f:37:e8:03:e6:be:49:df:bd:9d:d2:e2:
8f:f3:55:bc:20:60:7e:48:70:3b:24:21:51:55:bb:1b:3c:c8:
b3:ae:3f:97:f3:75:b9:44:50:36:79:40:d5:dc:0b:91:e1:43:
66:42:4d:2e:f1:ac:14:fa:98:ee:64:5e:75:38:1d:65:16:80:
da:f0:40:01:ad:30:ae:12:12:68:c4:60:7f:40:fa:b3:c7:95:
03:92:df:6e:d1:52:6b:8d:f5:62:b7:15:79:43:54:76:10:7b:
40:a0:df:31:b5:b7:9f:1f:85:1d:19:85:71:ba:56:02:ac:21:
db:c7:8a:22:97:ff:21:fe:6e:c6:aa:63:b1:81:96:ae:a6:b8:
cb:04:30:4f:ec:9e:da:8d:3f:49:a2:3a:d9:8d:df:55:c3:da:
3f:61:32:57:13:4b:db:10:79:85:5b:f1:04:ec:b1:dc:47:b9:
2e:7e:1e:24:b6:88:d9:93:98:ed:f8:d6:73:ea:fa:c9:58:c8:
14:2e:4d:50:07:6c:c7:9d:16:b4:e1:2c:6b:cd:6e:35:33:0c:
b3:46:06:36:f6:ec:da:ec:e8:cd:3e:39:57:aa:a0:3e:75:eb:
8a:00:97:ea:bf:57:8c:f6:85:d7:08:bd:6a:33:e8:f9:94:04:
0f:ec:07:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:18:47 2026 by rpki-client