Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/612F57780F2A11F1A6914BCADAE4EC9C.roa
File: 612F57780F2A11F1A6914BCADAE4EC9C.roa (raw, json)
Hash identifier: /m1PtNwkeXHWN0G7jjskDfQZYX4vYSw700wZCQYubwQ=
Subject key identifier: 74:07:05:86:0A:3C:0A:D1:52:58:88:99:A7:FE:2C:58:9C:BC:15:27
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019F96
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/612F57780F2A11F1A6914BCADAE4EC9C.roa
Signing time: Sat 21 Feb 2026 13:36:52 +0000
ROA not before: Sat 21 Feb 2026 13:36:29 +0000
ROA not after: Sat 28 Mar 2026 13:36:29 +0000
asID: 202656
IP address blocks: 45.192.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106390 (0x19f96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 21 13:36:29 2026 GMT
Not After : Mar 28 13:36:29 2026 GMT
Subject: CN=6999b4f4-1df8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3a:a4:e5:ad:d7:08:84:e0:3b:af:76:b7:16:
92:e4:9e:db:33:84:e4:00:c3:3b:9f:bb:09:2f:88:
39:e7:8d:ea:2e:d4:c1:08:04:90:82:40:2f:78:4d:
cd:6b:bf:f8:3d:87:ab:de:37:2e:e5:d7:b0:3a:ab:
ae:f1:47:64:e5:a1:8d:a1:b4:90:50:cb:9a:18:77:
45:bb:8e:02:f6:4f:fa:6d:00:4f:99:1c:9e:80:99:
81:56:69:84:a1:43:97:ce:cb:cb:e4:85:f9:a6:7f:
43:ee:23:b5:11:bf:66:77:77:cf:c2:ca:5d:d5:5c:
f1:54:b8:6c:d9:5a:91:c1:72:db:4d:84:32:66:43:
72:5d:eb:1d:65:fd:74:36:e9:dd:d9:ca:c0:04:b9:
02:31:b0:c1:19:a1:00:1e:8e:27:aa:ff:fc:c1:e2:
1b:02:e9:a2:40:bd:9e:12:df:13:4a:8b:50:ee:26:
3d:f9:69:96:79:a0:35:35:fb:2d:99:90:0b:6e:d9:
63:9a:82:db:a6:8c:38:ee:87:8a:cc:b7:ba:9f:6a:
96:c6:31:f2:9f:03:c3:0e:dc:eb:37:aa:da:2c:a3:
73:6b:dc:0e:6e:cf:a8:9d:78:4d:94:3f:69:3c:51:
f7:1f:71:3f:36:00:2e:96:85:70:81:57:08:e8:56:
5c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:07:05:86:0A:3C:0A:D1:52:58:88:99:A7:FE:2C:58:9C:BC:15:27
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/612F57780F2A11F1A6914BCADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.62.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:4c:9d:86:36:d5:ab:a3:91:d4:07:01:c6:b7:77:f8:58:6b:
66:31:09:e4:73:a8:5b:c3:13:39:df:ea:9f:73:2d:0d:0f:97:
14:bf:8a:0a:84:a4:f4:b1:f5:0e:8d:6f:b2:23:34:88:ae:a5:
0f:b2:c1:2a:d9:de:88:fa:4e:8f:6a:bf:ca:ff:3f:0b:51:21:
d1:f3:c9:cb:aa:06:35:79:22:a0:59:40:b2:9b:79:17:a4:4e:
ca:2e:65:b0:30:cf:36:e6:42:04:6c:54:0a:1a:0b:02:7e:82:
de:14:32:a0:40:b6:2a:d9:b9:b8:b6:60:52:0c:c4:12:ec:cf:
de:49:9e:7e:5b:70:fd:ba:e0:2b:ba:c9:35:7a:36:0f:36:68:
6c:32:85:12:ca:c6:0a:bf:3b:eb:58:20:d7:d3:f6:29:4c:50:
1a:b6:3f:9e:48:1e:a4:fa:2b:8b:d1:69:9b:9e:b6:11:7e:33:
73:07:c1:4d:53:0b:90:c7:80:4a:5b:23:fc:57:48:8d:69:7f:
f0:de:8a:f7:86:a7:2a:13:50:f1:d7:8e:08:84:15:fb:c6:5c:
3a:1e:36:b9:48:02:84:a9:81:9b:fb:76:7d:20:87:43:86:34:
bf:87:d2:7d:d2:fe:0e:45:a5:f5:ce:6c:a0:c3:c1:28:7f:f8:
5b:42:f9:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:52:36 2026 by rpki-client