Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8ACDF9960CA911F183C197E5DAE4EC9C.roa
File: 8ACDF9960CA911F183C197E5DAE4EC9C.roa (raw, json)
Hash identifier: sgkiWXcQPdSBMGzL/r40Cm0XY2YdyU3DWeUUCLp0I7U=
Subject key identifier: E4:91:E9:B2:2D:5E:F2:C6:D0:CF:D8:67:38:8C:66:8E:49:DB:CD:20
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019E9F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8ACDF9960CA911F183C197E5DAE4EC9C.roa
Signing time: Wed 18 Feb 2026 09:09:35 +0000
ROA not before: Wed 18 Feb 2026 09:09:30 +0000
ROA not after: Sun 22 Mar 2026 09:09:30 +0000
asID: 147176
IP address blocks: 45.201.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106143 (0x19e9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 18 09:09:30 2026 GMT
Not After : Mar 22 09:09:30 2026 GMT
Subject: CN=699581ce-e637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b9:5d:22:2d:cd:62:7e:b4:d2:29:d4:59:cc:
72:ab:cc:7a:65:6f:2e:ff:94:fa:17:19:11:98:fb:
43:80:f8:b8:55:d4:d6:79:87:b0:9d:b0:bb:2c:e2:
bd:45:0a:46:6c:d9:c1:6b:dd:62:3e:38:bf:62:1a:
b2:70:0d:c5:db:74:64:52:b7:45:a9:b3:b9:21:f2:
97:27:56:ee:e8:5b:00:ff:07:25:e6:7d:c3:90:02:
55:fd:ec:8f:85:11:21:df:53:d4:17:14:e6:f9:ad:
25:19:5e:eb:fa:99:db:89:3e:47:a2:a8:a9:7e:10:
02:d8:07:ee:50:1e:bd:db:f4:d7:f1:47:25:28:fe:
6a:5e:ca:b2:a5:57:93:8c:3c:80:f6:2e:fd:78:08:
ee:71:71:cc:e8:12:49:df:f0:62:f6:20:7a:bf:59:
a1:7b:23:e3:cb:4a:64:06:d2:1d:e2:ae:da:02:53:
73:62:76:c9:44:e6:68:ea:41:73:9d:12:b7:64:cf:
c3:4a:66:7a:12:b3:0d:b7:68:f2:17:1c:82:3f:d9:
31:db:9f:b1:a6:40:d6:1c:f6:de:17:3b:63:0a:76:
99:01:e7:9d:c0:44:9f:42:5e:08:5b:50:57:4b:2e:
cb:b9:d1:af:69:08:54:96:7d:65:b4:e0:b9:0b:2e:
2b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:91:E9:B2:2D:5E:F2:C6:D0:CF:D8:67:38:8C:66:8E:49:DB:CD:20
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8ACDF9960CA911F183C197E5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.0.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:14:c3:1f:71:04:68:46:e9:52:ab:aa:7c:81:06:b2:ab:2d:
9c:88:ab:fe:17:0c:42:3c:1a:f8:97:d2:29:83:3f:fd:03:fc:
ab:50:dc:ef:c4:c3:50:8a:81:34:f1:3d:1a:40:8f:74:87:97:
45:73:cd:96:f7:a0:68:ba:53:0c:4b:6e:a7:c1:d9:e6:e5:4f:
0d:3f:c8:74:3c:8f:34:05:41:38:b0:09:63:49:54:d6:c4:43:
3f:cf:4f:bb:82:c4:d6:ac:d8:4b:90:74:f1:d7:70:ce:2d:6c:
9a:32:41:c6:e6:72:53:eb:01:aa:7d:64:1c:70:f4:85:8d:08:
0c:2d:74:dd:34:17:18:3f:2e:8b:b8:20:4f:c5:fb:82:bd:9a:
b2:89:57:c5:a9:a1:7b:6a:fd:41:46:a5:c5:e4:62:f6:4e:4d:
af:cd:76:0d:13:d6:d1:43:9e:13:61:67:70:fc:ec:30:13:61:
d5:be:c5:b1:0f:55:93:6e:cc:49:14:fe:54:e3:f7:24:79:93:
e3:71:31:3e:83:20:7f:28:36:be:9b:04:47:17:c2:53:b8:ca:
ac:8a:4e:75:f1:7d:a9:20:a6:7e:58:00:7e:08:c4:6c:23:c6:
c1:f1:4e:3e:d3:79:38:6b:17:3c:81:f9:0b:14:8b:16:b7:8b:
19:79:97:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:25:42 2026 by rpki-client