Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/59EE457812E011F1B9709795DAE4EC9C.roa
File: 59EE457812E011F1B9709795DAE4EC9C.roa (raw, json)
Hash identifier: 2W6cNDkbPYWJkyu9vrRiuU5QuKjDg3ilsGZGS5eCwgg=
Subject key identifier: 79:5B:8D:DE:5A:35:9A:35:04:B9:A2:AC:6C:A4:73:70:5B:23:90:B0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A099
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/59EE457812E011F1B9709795DAE4EC9C.roa
Signing time: Thu 26 Feb 2026 06:57:02 +0000
ROA not before: Thu 26 Feb 2026 06:56:58 +0000
ROA not after: Sun 29 Mar 2026 06:56:58 +0000
asID: 214143
IP address blocks: 45.197.135.0/24 maxlen: 24
45.198.69.0/24 maxlen: 24
45.198.75.0/24 maxlen: 24
45.198.81.0/24 maxlen: 24
45.198.84.0/24 maxlen: 24
45.198.86.0/24 maxlen: 24
45.198.89.0/24 maxlen: 24
45.198.90.0/24 maxlen: 24
45.198.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106649 (0x1a099)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 26 06:56:58 2026 GMT
Not After : Mar 29 06:56:58 2026 GMT
Subject: CN=699feebd-1bee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:66:b4:21:af:66:68:15:56:27:ed:90:e1:d7:
f1:aa:68:05:1d:c1:58:b2:f3:d1:7a:37:fe:32:3b:
8f:2e:42:5f:73:42:d2:0e:10:90:9e:29:34:13:a2:
d7:c9:1f:82:2a:a4:6b:33:e5:84:16:01:85:09:44:
8b:e1:5a:d0:19:54:b0:ed:1c:27:22:40:e0:ef:3b:
ef:47:75:ae:4e:df:2a:d1:c2:eb:c5:72:06:7e:b1:
c5:42:7c:67:97:36:3f:6c:ab:f3:b3:cc:f3:15:5d:
d7:0f:23:7e:75:04:6d:2a:63:1b:6c:71:a9:89:c4:
4c:31:5d:07:99:8c:44:c6:df:09:06:05:61:a8:d2:
86:c6:31:ca:94:a6:84:24:f3:7d:c5:aa:b3:31:91:
18:54:fa:88:9b:75:48:08:16:6d:2c:75:18:01:78:
9c:42:a0:12:15:62:39:6a:5b:b0:2c:97:c4:31:6b:
9b:63:ed:e1:93:49:f3:29:5b:78:bf:13:3c:15:4b:
a3:ef:d9:a8:a0:72:4a:81:f9:29:66:a0:3e:ba:94:
45:14:6e:93:fa:35:ec:2b:3a:65:05:bf:92:05:b8:
f4:9a:95:c3:63:bd:f2:33:88:c0:5b:d7:a8:50:4e:
eb:97:e5:59:6c:cf:70:7e:e3:59:e0:6b:09:1d:6c:
87:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:5B:8D:DE:5A:35:9A:35:04:B9:A2:AC:6C:A4:73:70:5B:23:90:B0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/59EE457812E011F1B9709795DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.135.0/24
45.198.69.0/24
45.198.75.0/24
45.198.81.0/24
45.198.84.0/24
45.198.86.0/24
45.198.89.0-45.198.90.255
45.198.104.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:ad:c0:13:13:f4:a0:5c:fd:af:ff:59:97:b8:f2:b7:e8:04:
e9:56:87:f0:40:5d:3c:3e:e9:79:a9:0e:f2:5a:ae:b6:1d:8c:
59:c1:7f:e7:ab:5a:03:7a:29:ee:0a:18:ab:c4:b1:03:3e:ab:
92:c4:d8:d3:67:1c:72:5c:37:c3:c6:61:b1:6f:89:a2:2e:71:
34:74:25:fc:40:ec:cd:35:f8:2a:80:33:5a:18:24:b4:6f:b5:
15:b8:f6:b2:06:33:c2:0f:82:24:d0:a3:0d:b5:db:ae:f9:98:
9b:e0:72:82:e5:62:02:12:aa:45:b0:45:eb:59:20:ab:b2:56:
91:92:ac:74:bf:5d:a4:3a:4e:51:6f:ee:d2:4c:50:18:c0:a3:
0f:58:a1:d8:24:99:6d:98:75:b2:e8:36:08:1c:c0:92:2b:93:
c0:73:f1:a9:99:0d:e6:f6:6c:c6:7e:6a:b2:88:b5:39:0d:ec:
d1:cd:d3:b3:70:9c:4d:44:1e:3f:d4:99:60:35:9e:e8:d8:93:
c7:a3:e1:16:65:34:d8:21:0c:18:06:05:ec:0e:b8:39:a1:26:
f7:0a:87:71:b1:cd:9a:be:eb:13:2f:bb:58:68:ba:cc:63:bf:
12:3c:1e:5b:cf:42:d3:ab:cd:95:7a:53:21:43:42:61:39:9e:
72:81:e5:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:55:07 2026 by rpki-client