Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5F08F9C8119511F1891AC19DDAE4EC9C.roa
File: 5F08F9C8119511F1891AC19DDAE4EC9C.roa (raw, json)
Hash identifier: IqJPRhXb3BSadD4rTeXnfwTJl2DBlcNcLCGST38rH5E=
Subject key identifier: C3:0C:65:86:A2:57:E9:03:E2:39:86:18:AE:EC:C2:38:86:C4:88:BA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A04B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5F08F9C8119511F1891AC19DDAE4EC9C.roa
Signing time: Tue 24 Feb 2026 15:27:47 +0000
ROA not before: Tue 24 Feb 2026 15:27:42 +0000
ROA not after: Thu 12 Mar 2026 15:27:42 +0000
asID: 2914
IP address blocks: 45.192.244.0/24 maxlen: 24
45.204.149.0/24 maxlen: 24
45.204.150.0/24 maxlen: 24
45.204.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106571 (0x1a04b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 24 15:27:42 2026 GMT
Not After : Mar 12 15:27:42 2026 GMT
Subject: CN=699dc373-ec89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5c:d7:67:db:bf:20:1a:86:13:b8:36:11:44:
94:3b:08:1c:61:fa:a0:9d:e1:83:e9:4d:e4:af:dd:
aa:ca:5e:80:dd:47:5f:0c:21:d5:10:a6:c9:e1:74:
d2:51:4c:b0:2b:53:78:02:e2:32:36:f7:e9:de:85:
f3:33:7b:ce:b3:78:79:a5:52:3e:ff:20:20:b3:19:
d1:d8:d3:26:77:fd:c2:0e:49:b9:1e:04:59:f3:ad:
47:4d:9f:97:af:b9:c7:22:4f:d4:54:5e:11:7c:c6:
8d:c5:74:01:8b:26:82:89:5d:b1:db:d1:a8:e4:7e:
1c:0c:8a:c7:87:e7:fd:85:e4:51:c7:ca:5d:5d:ea:
6a:87:f4:d3:ce:5c:d3:54:fd:58:de:b3:de:3a:8b:
3c:9b:af:b2:b7:cc:e2:1a:56:a6:67:07:48:ab:16:
41:bb:63:18:78:50:6f:c3:9f:ad:d0:aa:f8:1b:87:
dd:07:fc:67:2b:96:78:98:76:4e:d8:2b:7c:39:0b:
35:b9:77:27:ac:69:6d:d9:ba:75:dd:a2:4b:96:3e:
06:eb:11:0f:2d:0a:87:03:3c:b4:92:1a:4b:10:69:
74:ef:e5:3a:1b:78:73:35:d4:43:fe:ff:bc:7c:28:
a6:f6:50:b4:f4:87:2d:89:d5:5e:e2:cf:23:55:2c:
a0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:0C:65:86:A2:57:E9:03:E2:39:86:18:AE:EC:C2:38:86:C4:88:BA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5F08F9C8119511F1891AC19DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.244.0/24
45.204.149.0-45.204.151.255
Signature Algorithm: sha256WithRSAEncryption
17:44:0e:36:4e:e2:b6:44:ed:1c:bc:3c:4d:f5:a5:91:5f:45:
c7:3a:41:27:c7:0c:ae:d2:2e:ce:7b:52:5a:a5:ae:c4:ad:a5:
48:e8:5d:77:07:52:60:bf:fe:dc:68:ef:ef:d1:bf:77:02:78:
88:1f:ef:97:ea:e7:9b:17:bb:b8:14:4f:82:32:d1:04:a1:00:
d3:2e:81:28:f2:37:47:f8:5f:f9:a6:b6:83:df:74:62:e7:8e:
90:6a:81:e8:60:0f:d9:04:e7:fd:51:8c:d7:22:26:d0:27:a3:
a6:d8:49:84:6b:1b:2f:fc:b7:67:9e:81:97:48:ab:33:5a:f9:
28:a6:92:8f:fc:56:c8:d0:19:db:c7:12:9d:0d:de:6f:b7:e4:
d1:78:44:d8:78:1d:d6:ce:7c:b8:b0:3b:3f:59:22:e4:ff:61:
56:9f:10:f1:d2:56:97:af:4e:48:6d:da:43:67:61:81:09:59:
19:0a:c4:81:68:bc:58:d2:7d:33:c0:5e:b3:53:ff:a5:15:4f:
34:79:c2:4c:c6:e2:db:82:37:90:2f:63:ed:a5:6d:be:7c:13:
00:93:21:0a:6d:aa:20:e5:da:c6:66:59:c6:34:00:18:fc:3e:
41:64:84:25:e7:1f:21:72:53:05:a0:d2:11:12:0b:4a:5e:60:
78:91:d5:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:42:41 2026 by rpki-client