Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8F3A3DF0312011F1928C61E7DAE4EC9C.roa
File: 8F3A3DF0312011F1928C61E7DAE4EC9C.roa (raw, json)
Hash identifier: wiMxL7KmIFsBlRwUaFyYs7tjPnt1o0u722tVj7ozqaU=
Subject key identifier: 75:32:B4:77:C6:71:F7:B7:DF:42:C6:7A:65:F7:D1:F8:56:61:48:DB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AA54
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8F3A3DF0312011F1928C61E7DAE4EC9C.roa
Signing time: Sun 05 Apr 2026 18:52:14 +0000
ROA not before: Sun 05 Apr 2026 18:52:09 +0000
ROA not after: Sat 09 May 2026 18:52:09 +0000
asID: 401434
IP address blocks: 45.207.154.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:26:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109140 (0x1aa54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 5 18:52:09 2026 GMT
Not After : May 9 18:52:09 2026 GMT
Subject: CN=69d2af5e-013d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:91:f9:dd:05:df:f7:85:e3:09:80:a2:d7:85:
c0:e5:41:77:78:a1:a0:1d:87:ee:27:72:d7:38:67:
f9:90:be:af:78:6a:6b:72:d9:0c:5c:77:1f:ce:c4:
26:09:37:0e:19:b6:0b:e8:19:e3:a8:a7:a6:eb:98:
78:25:e8:4d:fc:2d:8c:e7:4f:99:ba:33:a0:6d:59:
49:61:04:76:9b:0b:09:0a:fa:c7:e6:c9:1e:2a:bf:
61:1f:70:59:90:4d:23:e5:53:87:01:b9:78:f7:30:
34:f7:fb:5a:6f:1e:8b:6c:87:9c:2c:a7:c0:15:62:
69:e0:b1:27:ba:b3:86:a8:c1:a5:1a:3c:a1:44:d2:
26:5d:c0:f6:52:6e:fe:1c:b6:35:47:b3:80:ab:7f:
e9:18:d1:32:bb:47:97:07:fb:d3:ab:21:c8:9a:1d:
fd:44:60:aa:c7:8b:b9:c0:be:10:cb:9c:44:7b:ce:
54:e0:9d:de:7b:6e:bb:7a:a4:80:24:bd:78:89:cc:
e3:a4:0d:e5:8d:2d:e2:5f:fe:c5:85:16:de:a0:1e:
31:96:2b:bb:15:42:df:ad:a5:81:5f:4f:31:a8:b9:
b1:15:fe:ea:c6:d9:ff:e4:d7:dc:90:57:77:66:7f:
8d:0a:b3:0f:05:38:59:9f:20:59:b8:c0:b4:4f:7b:
e8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:32:B4:77:C6:71:F7:B7:DF:42:C6:7A:65:F7:D1:F8:56:61:48:DB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8F3A3DF0312011F1928C61E7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.154.0/23
Signature Algorithm: sha256WithRSAEncryption
9f:8e:33:af:81:38:38:82:b5:29:4b:94:3d:85:eb:3e:31:ab:
3c:71:e2:20:eb:b6:74:22:89:41:47:a2:29:ea:1f:ca:f5:7f:
a8:8b:80:8a:ae:fb:cb:b9:d6:b1:c9:5d:2e:9d:e7:03:b2:ac:
29:8c:21:3e:04:9e:6d:75:c4:39:cd:dd:10:40:7c:37:30:4b:
c1:cc:23:b1:c8:2b:57:20:e6:82:4a:cd:ce:97:39:9d:2e:f2:
69:5a:d3:73:ef:0b:f6:59:0a:45:3d:da:d5:51:15:29:f6:7b:
88:c1:74:3f:a5:1e:bd:32:24:b2:c8:10:18:f6:4a:3f:d3:75:
3d:b5:b1:0a:bc:f7:93:a0:6d:18:da:ac:79:40:a0:d1:a3:03:
6b:40:2f:ea:75:20:23:ae:63:b2:c2:59:5d:83:63:98:99:e7:
bc:7d:50:ea:07:71:26:b2:4e:de:13:d6:1b:50:cf:68:5c:f0:
e3:8e:1e:19:f9:96:f3:f5:45:c0:dc:08:8f:70:a6:78:be:6e:
73:e8:ea:e4:d3:e8:76:9c:c9:36:1a:d1:14:2d:0a:a3:ba:e6:
50:01:67:2a:24:a4:cb:23:24:29:a7:05:b8:09:d9:2c:c4:83:
98:44:7d:6f:c5:8d:f4:d3:c8:15:03:9b:ca:6a:30:77:a3:a4:
75:64:c5:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:09:40 2026 by rpki-client