Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/85378636109211F1A9071BF1DAE4EC9C.roa
File: 85378636109211F1A9071BF1DAE4EC9C.roa (raw, json)
Hash identifier: 31g9f8r4PRTToSrGV+MAU8lrp2Ut6PSVXBQhu0BrGw0=
Subject key identifier: 47:2E:61:6B:BE:D0:99:3E:F9:EE:EB:E1:F3:82:39:32:C4:57:0A:55
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019FEE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/85378636109211F1A9071BF1DAE4EC9C.roa
Signing time: Mon 23 Feb 2026 08:34:51 +0000
ROA not before: Mon 23 Feb 2026 08:34:46 +0000
ROA not after: Mon 30 Mar 2026 08:34:46 +0000
asID: 62468
IP address blocks: 45.204.208.0/24 maxlen: 24
45.204.209.0/24 maxlen: 24
45.204.210.0/24 maxlen: 24
45.204.211.0/24 maxlen: 24
45.204.212.0/24 maxlen: 24
45.204.213.0/24 maxlen: 24
45.204.214.0/24 maxlen: 24
45.204.215.0/24 maxlen: 24
45.204.216.0/24 maxlen: 24
45.204.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106478 (0x19fee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 23 08:34:46 2026 GMT
Not After : Mar 30 08:34:46 2026 GMT
Subject: CN=699c112b-1b34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6c:d2:6c:99:89:07:de:47:26:c0:04:36:ba:
4f:53:86:6d:23:8b:60:ae:ab:1f:22:77:4b:9e:28:
e7:be:75:2a:15:86:3b:d4:aa:aa:3d:97:6a:ed:fa:
d0:2c:ec:b8:f3:5a:23:cc:6b:ed:3d:0e:97:42:4d:
05:bb:d2:c8:a4:74:fa:99:38:ab:95:9e:c8:c9:c0:
8a:13:27:16:c3:d2:17:e7:1a:60:a8:8f:f9:4b:42:
3e:c2:39:23:fb:bd:d8:a0:0c:57:0d:12:da:89:1c:
55:89:b2:bf:32:11:9a:36:5d:77:ec:09:63:40:24:
cb:ba:be:c1:b2:63:8c:a0:e9:5d:af:58:cf:75:e4:
e0:c3:6d:28:f6:44:21:6e:30:50:2b:9e:26:94:39:
fc:31:de:3b:5c:ce:52:d8:6d:b3:8c:78:89:a4:e2:
2f:94:19:25:dc:21:0e:0a:49:9a:90:a5:d9:cc:23:
1c:d4:41:58:f5:19:ad:15:e4:8a:c7:22:bd:2d:7b:
24:5c:fd:cb:8b:83:e2:92:14:7c:1b:55:a7:00:f5:
9e:0e:cb:c5:d1:e8:d1:4b:87:fd:7b:e9:38:47:70:
ff:dc:83:17:db:30:b5:0b:b5:d4:b7:f4:3e:90:71:
42:00:4d:b2:0f:f1:74:cc:a4:9c:7a:a7:c1:d3:a8:
a9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:2E:61:6B:BE:D0:99:3E:F9:EE:EB:E1:F3:82:39:32:C4:57:0A:55
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/85378636109211F1A9071BF1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.208.0-45.204.217.255
Signature Algorithm: sha256WithRSAEncryption
82:6c:4e:ff:88:f0:d1:b4:42:2d:89:bd:35:e5:3e:40:73:38:
d9:9b:81:63:99:fb:bb:4c:01:9c:1b:51:ea:ad:03:9a:5c:c2:
be:75:f8:53:f1:9b:4f:d6:72:8e:89:3a:b0:0c:53:e4:a3:50:
ab:8c:f8:f9:49:83:65:b5:a4:b8:9a:af:93:f7:f1:6d:2b:1a:
4f:d9:9f:83:35:a5:1d:c9:38:f2:5a:26:c1:4d:29:fe:f7:68:
4c:84:6c:7c:db:a4:77:68:4c:c6:f4:4d:da:1b:0a:22:89:f7:
6d:90:7d:3d:c2:15:c0:32:60:90:f1:a5:fb:7f:76:c8:db:e7:
a9:6e:64:fc:84:15:9b:ca:07:d9:3f:39:1c:f1:19:b3:dc:ce:
ca:19:0a:54:39:e8:cf:2e:93:85:b1:26:9f:21:25:2f:79:e7:
16:32:a3:f2:c4:77:70:89:e5:dd:65:5e:f9:29:e1:ce:ca:13:
1a:51:09:94:8d:2f:d5:a6:95:a6:11:e8:e0:22:99:5e:17:3e:
d9:f2:5c:74:68:f5:be:22:c5:c0:f4:89:0b:7c:b1:a2:0a:d0:
4c:0c:0d:2a:b1:21:88:fc:c3:4f:4d:d5:8f:91:2d:0a:bd:8f:
6d:79:dd:6b:02:ec:30:2f:21:88:35:ab:60:2d:bb:69:65:10:
98:a5:b9:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:21:23 2026 by rpki-client