Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7B3FB172071D11F1AD56BCCFDAE4EC9C.roa
File: 7B3FB172071D11F1AD56BCCFDAE4EC9C.roa (raw, json)
Hash identifier: a5O1nN5bKHBKtFX0fyl6kn4HCkivLi48HLUAbWjvtCU=
Subject key identifier: 99:B4:79:4D:DF:E6:78:6A:A3:D1:ED:09:55:B5:96:8B:07:CB:05:52
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019CE3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7B3FB172071D11F1AD56BCCFDAE4EC9C.roa
Signing time: Wed 11 Feb 2026 07:44:23 +0000
ROA not before: Wed 11 Feb 2026 07:44:18 +0000
ROA not after: Tue 17 Mar 2026 07:44:18 +0000
asID: 54600
IP address blocks: 45.200.192.0/18 maxlen: 24
45.200.192.0/19 maxlen: 24
45.200.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105699 (0x19ce3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 11 07:44:18 2026 GMT
Not After : Mar 17 07:44:18 2026 GMT
Subject: CN=698c3357-d114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:77:9e:66:c3:2d:fc:74:6e:21:cc:83:44:55:
e6:32:9b:b8:80:d9:14:7d:3e:cc:e4:14:14:0c:67:
d3:8c:5a:4f:be:f7:38:96:b0:06:a1:4d:9d:65:75:
64:ff:b9:25:de:45:a2:c9:35:fe:46:97:df:72:08:
7f:b8:89:f2:8a:81:7b:8e:0a:72:1a:8f:b2:ae:74:
88:a6:19:0c:5d:d3:60:a2:f7:2d:e3:e9:0f:fe:46:
12:a7:3d:11:87:3f:f2:62:d7:fa:30:6c:c2:54:51:
17:2f:0e:91:86:24:47:a3:48:ab:95:68:4c:7c:4c:
a6:60:b0:6b:d7:37:26:84:2a:a3:86:80:f5:04:84:
cf:a9:f2:85:51:1e:de:4d:ae:9d:cc:d8:c0:aa:aa:
ee:13:3a:58:5a:08:cb:42:08:25:c6:ec:d2:db:57:
d4:8e:ce:29:44:de:43:60:d3:28:29:d4:4e:16:8a:
47:47:82:43:e3:d9:4e:69:e6:7f:e0:ac:e4:c8:f5:
fd:17:30:b7:c5:78:82:46:a8:e7:14:de:68:83:e4:
52:5c:68:0a:d6:96:c8:7f:f2:a3:41:c3:46:80:d8:
ea:f8:18:64:86:76:0a:db:2c:89:f5:95:3a:10:3d:
83:17:c4:42:bf:d1:ca:43:04:82:e5:31:16:b5:22:
d5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:B4:79:4D:DF:E6:78:6A:A3:D1:ED:09:55:B5:96:8B:07:CB:05:52
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7B3FB172071D11F1AD56BCCFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.192.0/18
Signature Algorithm: sha256WithRSAEncryption
b0:b7:af:08:22:13:c6:7c:94:29:f9:d3:d7:9e:31:f6:df:7c:
40:bc:07:7b:71:8c:11:f8:54:f0:43:7e:97:8b:30:02:15:2a:
13:18:f5:b5:9b:c6:09:7a:15:9d:40:d6:81:03:83:1a:22:79:
8a:fe:65:7b:5f:2e:9c:e5:19:6a:a1:da:4d:6f:b3:6c:de:6b:
38:31:da:a0:b4:fa:61:f7:91:a7:06:c4:62:f9:31:9e:fc:00:
b3:ff:81:9c:6d:bf:39:35:0b:a8:a1:b8:d4:c6:2f:ae:df:79:
1b:32:36:7a:e1:cf:52:b6:86:45:4c:2a:9c:25:36:34:ab:36:
6a:59:c0:75:29:68:f3:41:1d:0c:4f:a8:69:8c:83:ca:c1:e0:
50:2e:bb:3a:80:e6:0b:d8:30:73:84:f9:7a:ec:ec:e2:f4:93:
20:eb:0d:ae:fb:20:b3:2d:8e:33:cf:64:0a:13:ed:0a:3d:b6:
b7:5f:95:d9:b3:af:10:e2:b2:7b:b9:6e:d9:df:9c:11:9c:eb:
17:8a:b9:7a:d0:f0:21:ab:6c:5f:8f:7f:6e:f4:6f:1a:bc:76:
e3:c2:80:80:82:ca:52:be:a3:ef:ee:f2:b5:a5:f3:21:0e:89:
6d:89:b3:16:2f:36:d3:de:a6:ac:47:4f:1b:71:36:d1:71:eb:
45:75:2b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:03:11 2026 by rpki-client