Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/632A4D3CFC2711F0BF361FF1DAE4EC9C.roa
File: 632A4D3CFC2711F0BF361FF1DAE4EC9C.roa (raw, json)
Hash identifier: U9OZrWJ7YArwRj5JHpOOFgHnQYtJv5x5oYNXbC+Pb1k=
Subject key identifier: BC:E4:A6:C8:F8:33:34:D2:66:44:5B:09:2B:26:A2:BC:17:8B:5F:CF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019A48
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/632A4D3CFC2711F0BF361FF1DAE4EC9C.roa
Signing time: Wed 28 Jan 2026 08:57:35 +0000
ROA not before: Wed 28 Jan 2026 08:57:30 +0000
ROA not after: Mon 02 Mar 2026 08:57:30 +0000
asID: 401783
IP address blocks: 45.197.24.0/24 maxlen: 24
45.198.16.0/24 maxlen: 24
45.198.17.0/24 maxlen: 24
45.198.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 02 Mar 2026 08:57:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105032 (0x19a48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 28 08:57:30 2026 GMT
Not After : Mar 2 08:57:30 2026 GMT
Subject: CN=6979cf7f-3785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0b:e1:b7:5f:c7:95:a5:16:84:45:2c:6b:90:
92:0d:2a:86:9a:49:b2:65:b3:3b:ff:60:5a:35:d6:
e7:a9:8f:25:56:ae:71:ce:45:02:aa:4a:03:bf:30:
6f:b3:a0:d1:41:38:44:7a:e0:aa:13:63:43:e3:a1:
cc:ec:0e:a4:fb:f1:d1:30:d0:80:f5:fc:7d:68:fd:
08:59:42:83:2e:de:ec:39:65:4d:18:34:4f:57:a6:
ef:4b:79:c6:87:7a:7e:83:52:46:ba:71:3a:49:8f:
89:73:c5:75:e9:f3:55:2e:8b:dc:2e:aa:21:1e:d0:
14:70:3a:0d:93:f9:8f:ca:0d:e2:47:c1:60:9e:0b:
6e:4d:ee:d7:ca:81:fc:dc:f9:98:5f:3f:05:94:0b:
60:12:04:c7:bd:92:f6:bb:91:88:0a:10:fd:6c:d1:
58:d1:7f:68:cc:c6:8e:a4:25:e0:05:a3:73:54:68:
df:1a:6b:e1:b0:ff:dc:e9:86:34:3a:08:b4:f0:8c:
de:57:48:ef:9f:a3:07:3f:07:6d:88:61:8a:d3:56:
2c:e0:a7:43:d5:6a:5b:f6:cf:6e:33:5a:c7:92:cb:
76:03:86:9e:bd:02:c8:b0:c8:59:5b:31:f9:74:9c:
1e:07:9b:5e:77:95:ca:6b:0e:1a:7c:30:f4:75:95:
e8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:E4:A6:C8:F8:33:34:D2:66:44:5B:09:2B:26:A2:BC:17:8B:5F:CF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/632A4D3CFC2711F0BF361FF1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.24.0/24
45.198.16.0-45.198.18.255
Signature Algorithm: sha256WithRSAEncryption
61:3f:8d:89:d8:e9:1a:a3:3e:96:b7:ef:6c:a9:5a:ba:68:07:
33:32:81:cd:93:57:71:66:43:1d:cf:0e:ea:ad:fc:bc:37:da:
e9:6e:69:6d:64:2b:4d:cd:ba:15:45:dd:5d:a1:c7:95:cd:9f:
6f:15:4a:7a:7f:22:ca:42:0b:7b:89:18:eb:6c:24:b5:3e:0a:
49:56:93:36:d8:a3:07:49:0a:10:25:8a:fe:75:b6:41:82:c0:
3d:fa:2c:41:5c:a0:fa:db:7b:04:a7:4c:bf:8d:88:6a:31:52:
b1:81:ae:4e:31:bf:3d:58:58:3a:11:b5:1a:fa:24:72:8a:25:
ea:1b:8b:c6:f8:dd:d6:7c:d8:bb:3f:3e:d3:ce:89:d0:a2:5e:
9c:2f:7a:27:2c:13:a9:1d:ee:21:f9:4a:29:fc:95:0c:9a:f9:
c8:7e:2a:dc:23:d0:f8:95:49:af:ee:1d:3f:9a:88:18:50:ff:
8c:cb:67:c5:92:ec:87:3d:0f:16:47:07:b2:b0:83:aa:bc:23:
14:a6:d4:3f:be:e1:ea:a4:a2:c5:4a:16:df:bc:21:0e:92:6d:
10:62:f1:9b:ed:c3:6e:f0:45:e9:23:3e:ec:12:ed:bf:e7:9d:
ea:b4:68:07:1b:29:0c:02:ff:8a:95:87:72:ab:1e:71:bb:08:
03:47:4f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:08:41 2026 by rpki-client