Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/742598020F0B11F1B5F34292DAE4EC9C.roa
File: 742598020F0B11F1B5F34292DAE4EC9C.roa (raw, json)
Hash identifier: 6ywc+1zK0Lvy5vtns+xBjH43alXiwq8doYQdc7wF2P4=
Subject key identifier: 3A:9E:55:32:C4:D3:05:D0:87:D1:BC:3E:FB:C8:80:64:03:20:7D:90
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019F59
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/742598020F0B11F1B5F34292DAE4EC9C.roa
Signing time: Sat 21 Feb 2026 09:55:29 +0000
ROA not before: Sat 21 Feb 2026 09:55:25 +0000
ROA not after: Sat 28 Mar 2026 09:55:25 +0000
asID: 48031
IP address blocks: 45.200.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106329 (0x19f59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 21 09:55:25 2026 GMT
Not After : Mar 28 09:55:25 2026 GMT
Subject: CN=69998111-98e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:68:67:de:9b:62:90:c3:6d:b6:54:ed:52:03:
b0:de:e1:fc:19:a8:c6:ea:89:87:76:94:35:04:13:
76:e5:3d:49:d1:a5:f1:3d:bd:91:72:38:9b:ef:56:
1f:05:e7:a0:a2:a0:89:df:e1:73:d7:84:d5:08:40:
a2:be:91:eb:ca:e3:02:83:15:f6:0f:47:39:20:e2:
b9:bf:0a:6e:79:60:d6:50:f1:d8:b0:a3:39:3b:85:
20:f0:04:34:30:04:0b:ad:71:1f:a9:b2:e8:30:a1:
52:2e:1f:ce:aa:72:9d:db:ec:bc:b5:5e:e2:32:98:
b1:35:15:42:b2:e5:0b:b7:04:01:d0:74:12:03:b2:
2d:f8:16:23:23:9c:46:14:8d:4e:1b:63:3a:b4:9d:
d5:11:74:1b:10:a0:cb:8f:22:9f:c6:19:1f:b9:ed:
0b:d4:c8:24:78:5d:fb:88:9b:e5:5a:9b:ca:69:97:
05:1b:0a:7e:0e:aa:7e:09:01:06:61:de:45:a1:98:
cb:93:9b:55:0c:5a:1c:fa:b5:fd:06:3d:e6:24:f6:
7d:44:20:5c:6c:f3:57:48:ba:c9:67:c4:72:09:6e:
ba:6d:90:c9:61:d0:93:19:80:f6:44:fc:35:d8:b3:
c6:ad:0c:67:d9:9d:80:c3:5a:57:85:0a:f2:cb:17:
64:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:9E:55:32:C4:D3:05:D0:87:D1:BC:3E:FB:C8:80:64:03:20:7D:90
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/742598020F0B11F1B5F34292DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.191.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:c4:e8:88:2f:ea:9d:9f:ba:22:8f:6c:d6:56:98:d2:06:f4:
de:33:6d:20:86:49:ff:74:45:2e:7c:29:17:c9:28:b9:db:fc:
3b:71:b2:71:0a:34:d6:88:09:ec:f2:ba:e8:94:70:56:fe:19:
c6:47:89:53:ab:70:de:36:ee:84:27:3f:38:c0:2b:94:c2:25:
a1:ee:dd:76:8b:63:eb:de:e4:ea:ad:cf:f9:70:b7:2f:08:57:
5d:c8:e1:00:9f:b0:bb:27:a4:4d:fa:84:6d:42:7f:2d:0f:6c:
89:bc:e3:c5:e5:ab:fe:aa:31:54:0e:52:7c:9d:d9:b8:ab:3e:
f7:a2:21:c9:1e:32:5d:06:ed:74:9c:30:37:ad:10:e8:f4:f3:
79:32:48:32:67:fc:95:29:8f:0a:b2:e2:8b:e7:84:35:3c:32:
36:04:a8:e1:94:76:d6:fc:19:49:b5:f5:46:d4:c8:4f:62:40:
44:15:9f:15:83:b3:c1:22:f2:40:37:56:dc:c5:5c:60:5e:da:
f9:1f:2e:82:54:0e:e3:03:d4:06:8f:c4:1e:61:9b:45:43:cc:
8c:6c:a6:61:a9:62:00:98:06:bb:da:73:6d:dd:23:3c:11:d9:
c4:d9:28:db:eb:86:70:86:6b:b4:f0:f2:47:b8:ab:d6:ca:57:
cd:1d:f5:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:19:33 2026 by rpki-client