Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/608E39FC0BD211F1BF0D0CBDDAE4EC9C.roa
File: 608E39FC0BD211F1BF0D0CBDDAE4EC9C.roa (raw, json)
Hash identifier: NM81H7lVyjRmkLtKyAWkk4fuS6vW7cXpDYpIJpaXCI4=
Subject key identifier: 12:B1:1A:FE:9E:06:B0:BB:19:A2:71:DA:57:37:41:58:68:5F:74:C1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019E7E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/608E39FC0BD211F1BF0D0CBDDAE4EC9C.roa
Signing time: Tue 17 Feb 2026 07:29:22 +0000
ROA not before: Tue 17 Feb 2026 07:29:15 +0000
ROA not after: Sun 22 Mar 2026 07:29:15 +0000
asID: 395839
IP address blocks: 45.207.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106110 (0x19e7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 17 07:29:15 2026 GMT
Not After : Mar 22 07:29:15 2026 GMT
Subject: CN=699418d2-bb5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b0:b0:56:74:a1:a8:72:de:c1:a8:ad:c0:09:
42:fa:e3:f6:6b:7b:ec:ad:75:53:09:4d:37:21:5c:
62:b9:ad:6f:88:1a:a1:c1:2f:ab:84:ef:1c:32:1f:
6c:9b:a8:16:dd:66:e7:4b:32:6f:d1:10:a6:2c:5c:
bc:fc:25:0e:69:0e:6d:6e:49:68:2e:75:4f:f6:94:
3f:6a:da:a6:0d:8e:8c:fc:32:cb:bf:6f:bb:9c:a0:
74:d4:d0:64:98:59:e9:6c:b9:23:36:32:99:49:37:
b1:45:21:12:a6:dd:72:00:18:50:c0:c3:25:95:76:
dc:93:42:14:c4:21:ee:7b:1a:c3:a0:cd:a2:98:cd:
cc:67:0f:c9:aa:9f:2c:18:11:55:05:3d:e4:a8:00:
16:74:04:16:18:fc:3c:64:4d:d3:c2:e9:bb:ba:64:
33:fb:98:aa:cb:1f:fa:37:da:2c:43:1b:4a:92:b8:
ee:84:72:cf:b7:33:12:31:ae:a5:b7:44:f3:82:e3:
59:32:3b:31:6a:0c:3f:3c:0a:55:63:f0:8e:0c:ef:
68:45:63:9c:c0:5a:25:75:77:d4:ad:df:cd:38:1d:
7c:b9:62:bc:7b:a7:5a:3e:01:f4:b4:fa:ef:98:3f:
9e:aa:a2:65:69:0c:20:e9:ce:d5:c3:bc:f0:4f:e2:
19:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:B1:1A:FE:9E:06:B0:BB:19:A2:71:DA:57:37:41:58:68:5F:74:C1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/608E39FC0BD211F1BF0D0CBDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.21.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:03:37:85:9d:03:d4:17:8b:fb:3f:67:45:7f:40:21:88:56:
3b:65:61:8b:25:9c:41:cd:d6:73:b1:4e:ed:1e:f9:65:22:a6:
bb:a1:b4:11:3a:d1:af:2a:07:dc:7d:2c:04:85:ab:af:7d:ae:
aa:f3:c2:9c:09:fe:f9:72:c5:96:40:fc:2a:02:68:18:ab:ec:
83:83:7c:8c:2d:d8:db:8a:53:a7:75:5d:77:bb:75:ff:e2:ea:
b9:22:b1:0d:0c:63:50:91:9d:59:c8:90:ca:cc:b5:80:9a:57:
d7:be:c0:b3:89:53:97:28:90:7f:74:d8:40:96:ba:da:ed:d0:
48:ae:1c:b4:a0:3a:3a:bc:bf:01:92:4c:9f:6f:75:42:1c:f6:
02:62:34:1b:85:28:ee:8e:e3:64:d1:63:de:55:a8:53:d4:71:
f2:7a:d5:92:f0:c9:38:72:79:b4:af:a8:17:61:26:a1:cd:02:
92:93:47:5c:25:bf:15:72:69:a1:d5:7f:9b:e2:3c:99:db:dc:
9a:d7:5d:40:48:88:04:a1:7c:e7:f5:f8:78:96:72:c8:d7:c5:
72:25:00:e4:7f:55:df:01:15:a8:74:55:53:7e:24:a8:fc:97:
9c:96:96:e5:69:fe:83:d6:25:98:4e:8d:50:29:ff:d0:14:d2:
66:55:58:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:50:34 2026 by rpki-client