Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/867A099E032F11F19E2B0DABDAE4EC9C.roa
File: 867A099E032F11F19E2B0DABDAE4EC9C.roa (raw, json)
Hash identifier: tgMOYh5CqoJbaBJdblYAYCOIijGpXXTwxU7srl0rPNY=
Subject key identifier: 64:95:5D:7E:56:A0:D8:00:CE:01:6C:9E:53:54:C6:66:26:F2:B0:E7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019BF9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/867A099E032F11F19E2B0DABDAE4EC9C.roa
Signing time: Fri 06 Feb 2026 07:43:29 +0000
ROA not before: Fri 06 Feb 2026 07:43:18 +0000
ROA not after: Tue 10 Mar 2026 07:43:18 +0000
asID: 201765
IP address blocks: 45.202.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105465 (0x19bf9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 6 07:43:18 2026 GMT
Not After : Mar 10 07:43:18 2026 GMT
Subject: CN=69859ba1-1d5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:96:3b:3b:44:4b:b0:89:4c:ac:8f:d4:2e:85:
49:1d:05:d8:ae:53:40:5e:4e:ac:d8:22:5c:28:f3:
80:da:3f:ca:a4:b8:2c:36:8f:e8:7a:31:ad:77:ae:
5b:23:4f:c5:63:ea:eb:50:02:8e:21:6f:1c:ae:90:
08:dc:eb:27:34:26:aa:15:14:b8:89:e6:bc:a6:57:
19:ea:10:c9:2b:9e:34:d2:82:6e:30:04:d1:2c:0e:
ce:f1:30:5e:f5:ec:56:ad:cd:e2:05:49:68:ca:de:
fa:2b:da:4d:f6:37:fb:e1:69:ab:3d:43:1c:53:d1:
b0:10:32:fb:bf:16:e8:ca:f1:2e:d7:de:db:a5:13:
a4:78:79:8a:48:32:06:5f:e9:7f:dc:3b:91:4a:0f:
92:5e:3b:f1:89:9a:d9:01:7f:37:66:d2:48:36:5f:
ec:b0:b4:99:74:a7:0e:3a:8c:82:5e:2a:7b:1a:32:
89:38:23:3b:cf:97:2b:ef:b1:b5:3f:e1:ca:e3:b8:
ad:11:91:bf:e8:67:e1:ea:0d:47:af:29:65:0d:54:
a9:e1:f5:80:f7:84:54:53:f2:09:c5:96:9b:36:91:
2f:b9:0d:dc:67:e8:c8:b5:13:dd:36:9a:e9:bb:2f:
d7:fa:74:57:1d:91:83:35:01:2f:2e:42:5f:c0:16:
5a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:95:5D:7E:56:A0:D8:00:CE:01:6C:9E:53:54:C6:66:26:F2:B0:E7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/867A099E032F11F19E2B0DABDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.245.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:d1:ca:13:c1:a9:24:cd:34:22:ef:59:58:b4:1c:c0:d5:c6:
bd:d0:04:6d:41:66:1c:51:95:01:e7:5b:38:be:16:82:59:d2:
cf:7c:3e:a0:ef:4b:48:e2:00:75:d4:4e:6b:1c:06:ea:6d:bf:
a9:4b:e6:9a:e8:43:1b:41:e5:16:85:10:bc:a0:82:7f:b9:e8:
7f:ef:8c:f7:e1:eb:7f:3f:a1:45:e3:62:db:12:7d:0b:d0:c0:
34:ef:a4:ef:eb:1b:22:f0:d4:99:3e:f6:3e:31:8b:9a:33:c2:
b8:36:6b:f6:3f:28:23:df:7d:95:b6:db:06:c4:5d:d4:4f:d9:
91:19:e0:60:5f:5a:d0:08:cf:0e:8d:68:ed:72:44:66:e1:b3:
58:15:6b:d8:1e:a8:29:62:4d:31:78:23:93:38:0f:68:34:0d:
4d:b3:1d:d6:b1:6a:ce:76:ab:af:a6:06:81:66:50:64:5d:a0:
70:4c:ec:f0:30:83:29:f1:31:54:b9:ef:08:44:93:db:bf:f4:
17:61:0c:86:0b:92:ba:55:72:33:c5:b2:50:2e:d3:78:42:a9:
6d:fa:ce:61:ea:67:7f:ca:4b:57:ee:7e:01:15:d4:f0:9a:44:
a1:7a:51:7c:4a:a2:79:a7:1d:2e:0a:3d:1e:dd:e3:75:24:ad:
56:6c:ce:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:11:14 2026 by rpki-client