Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8D207704032C11F1901F889ADAE4EC9C.roa
File: 8D207704032C11F1901F889ADAE4EC9C.roa (raw, json)
Hash identifier: qODpe65GEGUhhKlSvEIvBBuO4pAOY4dEbCZeNVZ+4qE=
Subject key identifier: 90:03:53:0C:CE:7F:7D:7E:0C:3F:45:31:19:FF:73:86:B0:3F:93:84
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019BF3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8D207704032C11F1901F889ADAE4EC9C.roa
Signing time: Fri 06 Feb 2026 07:22:11 +0000
ROA not before: Fri 06 Feb 2026 07:22:04 +0000
ROA not after: Thu 12 Mar 2026 07:22:04 +0000
asID: 134548
IP address blocks: 45.207.22.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105459 (0x19bf3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 6 07:22:04 2026 GMT
Not After : Mar 12 07:22:04 2026 GMT
Subject: CN=698596a3-798b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:b8:20:87:e2:4c:da:5d:d3:b5:20:ef:60:39:
08:75:b5:b8:e0:a2:ba:20:01:cb:fb:6f:ad:18:bc:
ee:b3:b4:ad:59:9b:0a:6b:f7:c7:e6:7b:3d:2c:ea:
bf:c3:90:02:4d:cc:4b:3c:fd:52:5c:c7:e3:ce:0f:
98:f8:72:32:41:09:4a:cc:c9:3e:93:f9:7d:04:4b:
4a:6b:5a:5b:fd:77:a6:38:e2:c6:00:a0:d3:60:a0:
8e:61:dd:94:fb:3b:93:24:02:99:23:21:d2:c7:39:
eb:e6:9c:65:5b:08:b7:b1:37:fe:cd:f9:76:79:dd:
85:36:3a:4a:73:a6:44:bd:78:55:bd:0b:40:f6:59:
2d:9b:15:db:6b:ec:ea:74:eb:7d:4e:aa:2e:60:29:
57:18:6a:d8:42:4a:2b:77:8a:2b:fc:51:b4:03:9c:
52:46:a8:d6:e8:2b:a3:11:67:12:a6:f6:eb:2d:ab:
dc:fb:9a:09:f3:81:eb:51:bf:22:07:51:f4:de:aa:
28:43:2a:71:12:15:09:3b:24:4a:7c:17:4d:c2:20:
f5:1f:2d:13:74:1d:f4:ef:e2:1f:62:6c:29:89:0d:
9c:3a:92:c3:5e:ad:b2:49:5f:53:6f:a8:fa:be:1a:
f4:4a:80:02:32:f0:36:d3:1e:14:e3:9b:62:9d:ab:
da:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:03:53:0C:CE:7F:7D:7E:0C:3F:45:31:19:FF:73:86:B0:3F:93:84
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8D207704032C11F1901F889ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.22.0/23
Signature Algorithm: sha256WithRSAEncryption
35:d4:bb:32:19:83:b7:4e:45:f6:5d:3f:de:6b:5e:0f:b9:95:
48:01:95:44:ec:55:b9:62:77:f2:59:9c:87:48:46:19:61:c7:
64:cf:43:5f:3a:80:13:8a:26:7d:6d:3b:ec:46:19:b6:e0:d2:
92:8b:6f:cc:93:b0:cd:ff:02:94:c3:c7:01:33:a7:21:45:6c:
57:97:50:20:81:31:ad:76:a0:33:bb:df:38:51:67:09:e6:e8:
c9:71:a2:ab:73:56:0d:c7:f9:54:ba:ec:13:36:28:21:a8:53:
ca:a5:04:00:e4:86:c8:b8:33:b4:83:8d:aa:12:36:f4:db:70:
50:56:db:ee:a8:8b:02:fb:a4:37:39:5e:d2:a0:7a:45:06:b1:
ef:54:ca:30:19:b6:e6:28:18:c8:3c:fb:05:fa:58:cf:e9:bb:
69:bb:df:42:28:00:36:53:50:65:33:03:a6:d9:39:8a:fa:d3:
9a:35:91:01:c3:a5:14:96:30:5c:be:04:50:a3:75:c9:fc:d6:
7b:ea:da:24:e5:e3:1a:d2:bc:7b:78:3c:e1:87:d6:68:5c:9e:
2b:ce:cd:5d:c5:65:f0:62:d0:86:3e:f8:9e:e4:e7:30:48:12:
d0:cd:da:50:ab:1b:e8:41:46:36:d4:33:28:aa:7e:5b:f1:bd:
55:94:bd:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:08:47 2026 by rpki-client