Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/74E530D400D511F1AF636BB8DAE4EC9C.roa
File: 74E530D400D511F1AF636BB8DAE4EC9C.roa (raw, json)
Hash identifier: n7N9C85BrZ5op0IjwcUF2+nJkwH3D33XjGvlj/DnoEI=
Subject key identifier: 10:D7:FC:F9:A3:94:D4:73:D1:B8:0C:63:03:D5:ED:A4:EF:01:16:BC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019BA0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/74E530D400D511F1AF636BB8DAE4EC9C.roa
Signing time: Tue 03 Feb 2026 07:53:42 +0000
ROA not before: Tue 03 Feb 2026 07:53:37 +0000
ROA not after: Mon 23 Mar 2026 07:53:37 +0000
asID: 4760
IP address blocks: 45.192.144.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105376 (0x19ba0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 3 07:53:37 2026 GMT
Not After : Mar 23 07:53:37 2026 GMT
Subject: CN=6981a986-2427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c7:63:9d:e9:d6:56:f3:60:65:21:af:ae:00:
a4:56:07:7a:77:1e:8d:5e:04:a8:07:27:01:31:64:
59:5e:2a:ed:48:77:65:31:df:f3:40:54:0a:86:c0:
66:e2:9a:e5:a5:91:4f:60:74:44:23:84:16:57:b2:
6a:93:31:4b:fc:3b:4b:00:4f:63:b1:60:be:f0:f8:
0f:b2:b2:e5:93:4a:4c:49:29:36:f0:05:82:9b:45:
95:8f:95:7d:7d:b8:32:57:60:c1:04:db:ce:4b:33:
59:87:55:d1:75:1d:d8:b8:ec:05:c4:5f:a2:16:2e:
df:c0:85:fb:c6:d6:85:c6:ba:b9:45:c5:9c:08:66:
1f:31:dc:82:c1:43:d3:12:08:7e:a4:8e:df:67:b7:
65:31:13:e8:37:f5:64:c2:61:ae:4f:97:46:89:8a:
f6:6e:55:af:93:0a:b3:87:0d:b1:69:19:eb:f1:69:
b7:49:a0:5a:b4:85:e5:34:49:3c:4b:d9:91:95:56:
f2:9b:22:67:7e:72:49:21:df:1e:aa:a9:2c:d5:da:
45:95:5e:8e:06:57:6d:70:65:19:b4:8f:d7:a5:82:
28:c4:65:01:76:e2:b6:2d:20:f1:bd:29:6b:93:7c:
de:35:52:4f:b3:cd:d1:27:b8:2e:29:35:75:5c:67:
c7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:D7:FC:F9:A3:94:D4:73:D1:B8:0C:63:03:D5:ED:A4:EF:01:16:BC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/74E530D400D511F1AF636BB8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.144.0/20
Signature Algorithm: sha256WithRSAEncryption
85:cd:7b:3e:8c:fc:50:26:60:fa:03:09:cf:24:50:3c:3c:1e:
f6:74:d9:56:7a:d8:50:2a:ed:e2:57:a4:81:a9:7d:ca:64:7d:
0f:f5:ab:6c:5c:46:e9:2b:e7:46:34:f4:2e:89:64:30:6e:1e:
b3:9d:3b:e8:b3:28:37:58:fd:40:b3:6d:79:25:84:7a:3f:cf:
13:e5:c9:a9:6e:ea:f6:79:4f:04:53:86:5c:b6:34:28:7c:60:
42:65:e5:1b:ff:ea:53:75:d4:f7:69:b5:80:79:5a:92:d5:3d:
f2:db:da:ad:28:2f:c4:a9:75:ef:e6:10:01:79:d8:1a:88:83:
e7:53:6f:51:1e:2f:8e:67:3f:e8:ab:a5:7f:6f:b2:37:17:96:
3c:02:dd:97:b4:f6:27:69:5a:6c:91:53:94:5f:c6:f3:77:09:
97:a6:71:d0:08:41:76:76:99:18:a2:fe:7d:e0:5f:54:36:c2:
6d:18:ec:72:d0:66:c8:2d:3d:d0:08:65:9b:61:70:ec:a4:c0:
00:ab:0f:dd:af:0c:ef:db:4e:bb:eb:e4:b9:1f:68:0c:6c:ae:
64:52:5f:d8:43:71:6c:67:e0:2c:5a:94:7c:f5:de:1e:f0:da:
58:3b:fd:cd:3a:bf:46:c9:14:2b:48:6d:87:60:34:a2:cf:62:
f9:4e:75:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:52:28 2026 by rpki-client