Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7441FCF60F1311F1BCEABABFDAE4EC9C.roa
File: 7441FCF60F1311F1BCEABABFDAE4EC9C.roa (raw, json)
Hash identifier: Po+nBe23DuK8sl55n129TjzKuOsQYERXpvzMtW6X5es=
Subject key identifier: CD:65:8F:11:D9:35:4B:49:84:24:7E:65:21:F6:23:A7:23:4B:67:25
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019F71
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7441FCF60F1311F1BCEABABFDAE4EC9C.roa
Signing time: Sat 21 Feb 2026 10:52:45 +0000
ROA not before: Sat 21 Feb 2026 10:52:40 +0000
ROA not after: Sat 28 Mar 2026 10:52:40 +0000
asID: 214238
IP address blocks: 45.199.216.0/24 maxlen: 24
45.199.217.0/24 maxlen: 24
45.199.218.0/24 maxlen: 24
45.199.219.0/24 maxlen: 24
45.199.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106353 (0x19f71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 21 10:52:40 2026 GMT
Not After : Mar 28 10:52:40 2026 GMT
Subject: CN=69998e7d-4d2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:52:8f:6b:49:4c:17:b7:a1:69:5d:cb:2b:7f:
47:03:a2:c1:00:b9:4e:ec:7e:6f:a2:60:e9:9a:62:
f8:2d:0f:fb:35:da:04:2b:82:f3:f8:c4:16:92:80:
97:0a:71:b7:a5:fc:3b:c5:3e:b5:51:48:da:11:87:
87:69:8d:52:72:6c:56:39:22:95:4a:e4:17:9b:31:
ee:13:24:05:f6:72:91:6c:e5:b8:1b:ba:23:ff:56:
0b:3c:d0:25:4e:e3:bd:d5:ca:83:cd:28:12:eb:ff:
0b:45:0c:4e:57:61:6b:79:10:78:c2:50:92:08:6f:
f1:d5:8c:18:a1:47:d2:51:ea:05:88:b7:a6:1b:a9:
b8:29:42:4b:3b:f5:24:10:fe:54:9d:fd:e7:62:cb:
0b:49:b3:d9:c3:16:c3:e0:68:2d:30:c6:10:46:07:
f4:51:86:a3:78:6f:b4:f9:08:d4:0c:2f:f1:aa:7e:
c8:c8:f8:f5:8a:52:a1:eb:68:91:33:18:7b:e0:c4:
74:39:5d:c1:22:25:66:a9:bb:f5:1a:2a:d3:73:d5:
5a:23:cf:86:6f:a3:57:07:96:ea:92:9d:e9:88:34:
ec:88:aa:5f:59:3b:8d:64:e7:d2:b7:7b:8c:65:bb:
d5:c3:e0:15:19:c0:6f:ef:b8:a6:a1:3c:68:59:24:
08:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:65:8F:11:D9:35:4B:49:84:24:7E:65:21:F6:23:A7:23:4B:67:25
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7441FCF60F1311F1BCEABABFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.216.0-45.199.220.255
Signature Algorithm: sha256WithRSAEncryption
b0:8e:1e:ba:e5:94:83:f7:0e:24:8e:4a:20:e5:d0:c3:d2:0c:
5a:94:df:c6:63:80:f2:08:1b:bb:85:95:57:06:a9:a4:09:87:
dd:37:64:6d:72:db:38:cd:24:81:61:aa:9a:9a:2b:8a:c3:39:
2f:b7:80:54:9d:4d:e8:13:57:6f:24:1c:c3:e6:d6:e7:59:81:
9c:64:db:ec:6b:3e:32:17:00:18:4c:5f:da:9f:b9:a3:d3:ff:
2e:3f:27:17:fc:1f:6b:0c:30:55:90:1d:63:af:e0:be:7f:d3:
87:0e:a4:1b:a0:24:e1:32:cb:f3:b7:3c:0d:30:43:b6:7f:f9:
17:d3:34:14:f8:e4:74:b5:ab:89:e3:96:42:c0:80:89:eb:a7:
ba:8e:72:e5:5b:44:b7:3c:56:87:09:59:da:d6:c9:73:10:99:
0e:65:dd:d9:3c:15:a4:11:4d:99:1d:89:9e:81:33:a4:ad:27:
45:cc:cd:88:25:a7:14:05:7f:08:1b:9f:56:77:3d:07:2c:1c:
25:4f:4e:b5:ba:17:99:ed:48:f6:c8:5f:26:38:3f:7c:30:37:
76:8f:0c:0f:91:da:5f:28:52:68:d6:ca:92:87:53:32:df:57:
47:42:eb:d1:7c:5b:07:06:a2:d7:3c:0f:97:4b:5b:5d:d4:b5:
1a:7b:f5:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:18:11 2026 by rpki-client