Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/884065BA098411F1AAFC1C92DAE4EC9C.roa
File: 884065BA098411F1AAFC1C92DAE4EC9C.roa (raw, json)
Hash identifier: ZiT1jbojw+DrFSeMHZaDIK+6OD08V2jT1GqX0xoTGE4=
Subject key identifier: 3E:B4:A0:49:6E:64:6B:55:29:91:2E:54:22:2A:AF:DA:FB:81:B6:70
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019D98
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/884065BA098411F1AAFC1C92DAE4EC9C.roa
Signing time: Sat 14 Feb 2026 09:07:05 +0000
ROA not before: Sat 14 Feb 2026 09:07:01 +0000
ROA not after: Fri 27 Mar 2026 09:07:01 +0000
asID: 134824
IP address blocks: 45.194.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105880 (0x19d98)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 14 09:07:01 2026 GMT
Not After : Mar 27 09:07:01 2026 GMT
Subject: CN=69903b39-457f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:70:9e:08:0b:89:a5:a9:be:04:f6:51:29:72:
ba:8f:e7:8f:54:ca:71:0b:fb:a7:a9:06:99:fa:38:
80:ef:c1:87:27:bf:fb:80:78:7b:b2:ac:3d:8b:7f:
12:5e:55:bc:30:b2:ed:e0:c0:b7:58:97:26:07:83:
d6:ba:b9:61:35:b1:63:3a:ef:e8:49:d2:23:e4:a7:
5a:f4:6a:a3:d9:d7:0c:a4:8d:bb:e5:ed:0f:17:42:
c8:9b:b7:5f:db:15:1a:21:7c:1e:c9:22:b4:f1:c3:
c7:b5:26:0c:f6:07:ec:fb:80:b0:33:b7:77:80:5b:
57:a0:a0:01:f4:82:6c:20:fb:93:35:40:43:ff:d8:
05:aa:52:17:2a:a2:c2:66:a6:b7:a0:39:fe:b3:0b:
31:c2:0f:8b:97:f6:97:cd:cc:09:47:2a:41:b3:2b:
46:22:72:d7:4f:c4:d0:61:88:61:21:51:b4:f5:60:
ee:17:d4:1d:7d:27:2a:71:31:69:50:87:ca:b5:4f:
94:14:c4:b8:07:d9:10:6a:c5:e4:e6:58:03:a9:ea:
c3:66:7a:38:e5:88:27:b9:e4:c8:a6:9d:57:47:0e:
9c:1b:70:97:41:e9:38:a6:e8:20:96:9b:3b:3f:24:
79:73:43:68:e3:ae:3e:23:be:7e:ce:2e:52:da:5e:
7a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B4:A0:49:6E:64:6B:55:29:91:2E:54:22:2A:AF:DA:FB:81:B6:70
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/884065BA098411F1AAFC1C92DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.93.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:9f:cd:c5:a7:9c:6e:8c:74:39:84:fd:38:fb:5f:46:98:98:
2b:13:55:69:7f:d1:e2:f6:ff:ab:17:5e:3e:12:3f:1a:ea:4e:
9d:38:b4:ee:8d:59:24:07:93:eb:9f:78:3e:ad:4a:12:78:d7:
c8:c9:c3:79:83:c8:b8:32:74:58:b0:e2:24:bf:92:81:19:a4:
dc:fd:8a:ba:17:ef:1e:25:77:f4:71:45:d8:b0:c7:54:e8:b4:
21:ab:12:fb:b3:3b:20:7f:cf:59:22:b5:36:04:1c:af:3d:e9:
47:b1:29:23:db:57:5c:9e:88:6e:ab:8f:b1:24:5f:57:ce:7c:
26:17:5e:c4:e4:15:89:2d:c9:a8:02:95:3c:04:75:79:e0:c4:
83:a6:85:d3:23:f9:7f:de:8d:d9:12:1f:27:e1:5a:53:f2:9f:
3b:1f:f0:0b:56:a2:c8:44:9b:fa:84:99:f3:4f:f2:b8:eb:cc:
a4:28:df:68:84:9f:6d:0d:88:e0:41:4d:ab:c6:6e:2d:a0:29:
1f:77:a9:b7:5a:a5:db:c2:f3:22:e2:bd:70:33:0e:df:03:ed:
aa:cd:9e:f5:e7:19:a9:5d:9b:07:af:c6:4a:04:00:4f:ad:70:
4b:12:c5:18:81:cf:b6:b0:8b:d8:a1:c2:8e:f5:3c:04:70:6f:
da:f6:15:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:17:57 2026 by rpki-client