Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/93F94D8E097711F18C26EAC2DAE4EC9C.roa
File: 93F94D8E097711F18C26EAC2DAE4EC9C.roa (raw, json)
Hash identifier: 28t4kr1mH8ivjfT3wywQxaEnh9hty2BfVZNmOkwUxcY=
Subject key identifier: 6F:22:32:E1:0E:89:2A:89:D8:6E:56:34:57:42:C8:C2:6D:9E:D8:AD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019D7A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/93F94D8E097711F18C26EAC2DAE4EC9C.roa
Signing time: Sat 14 Feb 2026 07:34:22 +0000
ROA not before: Sat 14 Feb 2026 07:34:16 +0000
ROA not after: Sun 22 Mar 2026 07:34:16 +0000
asID: 40779
IP address blocks: 45.205.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105850 (0x19d7a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 14 07:34:16 2026 GMT
Not After : Mar 22 07:34:16 2026 GMT
Subject: CN=6990257e-59cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6a:88:78:63:88:eb:ef:8d:03:1b:ad:68:9c:
79:d5:2a:fb:bf:26:6d:a3:34:61:ba:a6:84:e3:07:
1b:8f:c7:6d:40:6c:7b:b9:a0:44:ba:04:3c:2f:20:
19:50:98:79:da:c4:24:99:ad:c6:4f:62:79:ca:25:
5b:64:e9:f9:33:10:a5:f4:80:96:af:c1:f0:04:08:
d6:17:3e:e9:42:51:5d:4d:61:3d:75:2d:13:c4:77:
94:69:d7:88:b2:a6:c0:36:b7:7b:51:87:0c:6a:e2:
0f:52:7b:27:a7:5e:28:99:ec:78:d6:38:f2:64:dc:
b2:ab:f8:f4:0b:bc:3d:b7:36:e7:cb:4e:e7:62:6d:
80:91:f0:67:43:20:2a:9e:9c:b8:0c:1d:14:ec:ae:
57:83:3b:24:e4:f3:b5:83:98:b1:e3:99:22:4d:8e:
a0:c8:07:b5:60:27:f6:83:a1:33:c7:ad:1e:8c:48:
49:ef:9a:87:df:08:25:0d:f8:32:a6:02:df:6e:14:
ad:05:13:f8:cd:09:f4:6d:d4:15:21:4a:38:30:c9:
60:c7:43:34:3e:49:e5:c3:44:83:6b:e5:da:a1:57:
17:2c:e2:8d:47:1f:d8:c2:63:75:6e:f9:07:3c:65:
bf:e5:bf:9c:b4:cc:0e:18:8d:ef:b1:5f:fb:b5:03:
64:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:22:32:E1:0E:89:2A:89:D8:6E:56:34:57:42:C8:C2:6D:9E:D8:AD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/93F94D8E097711F18C26EAC2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.16.0/20
Signature Algorithm: sha256WithRSAEncryption
1a:bf:46:a7:f9:a3:0f:d7:c1:94:9f:d3:7f:82:52:40:a3:c9:
05:ac:de:c5:e4:c9:cf:9e:bf:8b:b6:bd:4d:dc:d8:0a:17:c5:
44:4d:11:32:1b:9f:e4:38:fe:7f:0c:0f:24:3b:76:b5:a2:0e:
2b:d9:0a:63:b4:9d:fb:7a:9a:1b:5c:a7:00:2e:62:51:02:05:
0f:a5:09:d7:1c:3e:9e:17:4c:48:b2:91:68:af:8a:f5:d6:94:
65:fe:11:8f:73:69:4e:d0:12:94:a2:d8:88:c2:8e:3f:aa:b8:
55:30:88:e2:54:e2:b2:65:0f:c9:5a:20:73:b8:33:db:87:be:
35:13:a4:c9:4d:e5:95:ce:8d:14:0e:5e:5b:4d:1f:a8:5e:ac:
bb:6b:a4:18:ab:d5:9d:fc:79:3d:d0:f5:86:f4:71:92:91:c3:
a0:c5:a7:7e:c4:7a:ec:d5:8b:55:26:d3:1a:36:09:a9:a0:51:
e0:f4:5f:5f:d3:71:b5:6f:7c:d1:ca:88:84:6c:c9:11:99:72:
9a:5a:22:5f:15:f1:65:54:2e:54:0a:92:49:bc:44:3e:3a:07:
fe:7f:ea:35:be:74:bb:ee:c7:25:94:d0:4a:f7:ce:d3:c8:b4:
b5:e8:6c:68:a9:08:0e:54:69:84:97:7a:5c:3a:a6:18:ed:ba:
f8:3f:24:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:17:14 2026 by rpki-client