Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7D04D2DC097D11F19D30E2E5DAE4EC9C.roa
File: 7D04D2DC097D11F19D30E2E5DAE4EC9C.roa (raw, json)
Hash identifier: NWTxLu0hiVgAyqavO8bkhnyqncGAA/FWMjxHULA+kpc=
Subject key identifier: 63:4E:46:CE:E2:77:D3:7C:99:02:06:2F:AD:AD:5F:B9:FA:72:2A:BE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019D8A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7D04D2DC097D11F19D30E2E5DAE4EC9C.roa
Signing time: Sat 14 Feb 2026 08:16:40 +0000
ROA not before: Sat 14 Feb 2026 08:16:35 +0000
ROA not after: Sun 22 Mar 2026 08:16:35 +0000
asID: 141159
IP address blocks: 45.205.16.0/21 maxlen: 24
45.205.16.0/24 maxlen: 24
45.205.17.0/24 maxlen: 24
45.205.18.0/24 maxlen: 24
45.205.19.0/24 maxlen: 24
45.205.20.0/24 maxlen: 24
45.205.21.0/24 maxlen: 24
45.205.22.0/24 maxlen: 24
45.205.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105866 (0x19d8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 14 08:16:35 2026 GMT
Not After : Mar 22 08:16:35 2026 GMT
Subject: CN=69902f68-3fe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:15:7d:f4:8d:ff:3a:b6:e7:9a:de:b6:9b:f7:
1c:1a:e0:e2:75:36:30:63:1b:38:fd:53:d2:16:9a:
6f:63:2b:30:40:f5:ff:0f:ba:49:a8:df:96:65:d0:
1a:85:65:b1:e4:a0:4a:b1:19:32:ec:57:32:04:32:
6b:bb:89:44:5d:87:4a:90:b5:de:7e:d6:ab:3c:d7:
da:3b:29:1d:b7:36:8c:67:26:e1:5f:4a:5b:9b:03:
c2:f1:c1:d9:11:88:79:68:2d:b3:0c:13:b2:5b:55:
f8:bf:8f:75:c7:71:d1:de:b4:f7:cf:ea:7c:52:a3:
7a:a3:c8:51:af:a0:89:13:54:d8:88:cf:5a:ed:f5:
ee:32:5f:d9:24:f7:67:6f:08:0c:b5:9e:da:e3:b4:
b6:98:40:47:31:11:32:5b:4c:d1:4e:d8:bd:f0:b5:
40:83:e8:68:7c:a9:f5:d9:e2:26:3c:4d:4d:69:29:
0f:aa:62:4a:82:ff:b1:b4:28:f9:58:9d:4b:1a:1f:
4f:97:6c:2f:55:25:4b:9d:7c:ab:02:73:01:7d:36:
e8:d4:a8:26:cc:b4:48:e1:4f:19:cc:6f:95:4d:98:
86:de:8c:76:40:0d:57:d2:f3:1c:e4:74:dc:e7:61:
83:18:23:2c:75:8b:eb:f4:92:6b:d3:8e:09:b6:0c:
f9:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:4E:46:CE:E2:77:D3:7C:99:02:06:2F:AD:AD:5F:B9:FA:72:2A:BE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7D04D2DC097D11F19D30E2E5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.16.0/21
Signature Algorithm: sha256WithRSAEncryption
a9:92:d7:18:1f:e1:a5:68:9c:51:44:3c:b2:76:a9:67:4f:84:
45:1f:b3:04:3e:10:c7:00:42:40:e4:e3:11:a7:3c:74:41:e3:
0e:a8:38:55:2d:2b:b0:68:3c:33:46:d2:3a:ff:67:45:f3:6d:
56:8c:5c:43:c7:91:c6:b7:f1:11:2d:76:46:f8:90:8e:95:4f:
9a:f7:f3:60:78:ae:23:81:af:d2:c1:fe:d1:49:0b:ab:ac:f3:
4a:17:2d:4c:64:39:d4:fb:9d:9f:3b:bd:ae:10:3b:c4:54:51:
91:f5:11:9e:bd:21:ea:c3:f3:09:89:a4:04:3c:d2:3d:5e:3c:
31:4a:f1:4c:40:34:f1:4a:6c:cd:4a:61:89:a2:e7:17:f2:e3:
cc:16:82:b5:0f:b8:f2:77:76:c0:b0:cb:27:25:44:17:a1:a1:
df:0a:ad:6b:c3:a6:d5:7a:01:e6:64:44:59:1b:a8:ce:15:d6:
15:95:91:ba:05:77:52:51:37:55:9f:c4:82:f0:ad:6a:59:90:
4b:e1:8a:40:59:c4:28:cc:97:5c:c1:b4:13:a7:fd:01:7d:78:
62:e2:84:3b:d3:2d:59:5c:c4:74:79:b2:82:d3:60:90:ed:79:
6b:29:cd:4b:91:f2:88:09:4e:84:b6:ae:8c:fb:2a:60:bf:90:
d9:00:f8:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:19:24 2026 by rpki-client