Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/97F0095A2AD811F1B5D7B194DAE4EC9C.roa
File: 97F0095A2AD811F1B5D7B194DAE4EC9C.roa (raw, json)
Hash identifier: +AmZ7jSQg2UUDkrHbBh1K0LhcqDFdmWFz6UXtkAo3pI=
Subject key identifier: E6:11:A0:29:01:AB:B2:16:E8:79:D3:B7:0C:9F:D9:1A:0A:95:C2:32
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A842
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/97F0095A2AD811F1B5D7B194DAE4EC9C.roa
Signing time: Sat 28 Mar 2026 19:01:58 +0000
ROA not before: Sat 28 Mar 2026 19:01:53 +0000
ROA not after: Tue 12 May 2026 19:01:53 +0000
asID: 51847
IP address blocks: 45.207.216.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108610 (0x1a842)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 28 19:01:53 2026 GMT
Not After : May 12 19:01:53 2026 GMT
Subject: CN=69c825a6-0d10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4d:09:7c:29:e7:d0:69:4b:0f:e6:4d:a0:b0:
46:c9:36:df:78:01:9c:cd:3a:d4:90:b9:6c:ed:ac:
c4:50:56:34:68:9a:34:50:d6:fc:09:ae:81:5a:82:
14:8a:b9:37:e3:f4:9b:90:c9:70:c7:49:9d:5c:8b:
ee:f2:15:c6:ae:2b:17:fd:a0:68:9f:00:cf:01:a3:
27:b8:f6:01:2b:cb:33:d1:77:e3:9e:ef:0f:56:46:
e0:fe:a9:a3:49:b1:07:8c:11:8b:9f:f6:f3:2c:78:
28:fe:9a:ae:9f:db:d0:ba:9d:5a:8f:b7:04:cf:2a:
f1:6a:a4:bf:13:d2:75:53:45:9d:7d:21:60:da:aa:
e6:46:bb:0e:c8:7a:4a:36:58:43:3f:3f:d6:7a:eb:
7e:09:9b:53:c5:18:63:5f:59:18:e8:ee:19:f9:38:
a4:c9:83:9d:b7:2d:9c:9e:8d:2a:83:2c:e7:c5:28:
e9:b4:12:12:ac:b9:e3:df:9e:12:71:bc:26:03:03:
a1:18:68:41:58:e8:00:fc:9d:19:c8:72:45:87:77:
7d:47:f1:45:ee:83:ee:2b:4c:7a:07:c6:c8:d9:e8:
53:9e:da:bd:33:09:f8:ad:a5:ff:9b:59:03:00:3a:
95:c3:91:2f:d7:7e:85:17:fe:03:41:33:e3:db:e4:
38:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:11:A0:29:01:AB:B2:16:E8:79:D3:B7:0C:9F:D9:1A:0A:95:C2:32
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/97F0095A2AD811F1B5D7B194DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.216.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:de:ec:73:a0:4a:48:e8:44:bd:90:b8:ff:30:66:61:9d:5f:
ca:3d:0e:08:d4:d5:5f:9d:3b:54:38:f5:f4:3b:cd:28:08:91:
8d:1b:91:79:dc:3d:fe:3d:9b:72:95:fb:ae:3d:b9:97:4c:24:
e6:a5:7d:85:66:0d:8d:f5:fb:81:17:4e:5e:57:60:57:a0:a3:
e8:91:dc:70:b0:7e:23:70:25:33:85:e0:14:b7:83:76:5e:3d:
c1:3d:55:13:f0:c8:b7:ac:a0:a6:6c:f4:c2:db:ef:75:90:d5:
a2:12:87:fa:cb:53:11:f6:ad:4d:62:45:f1:04:a3:8b:ee:ab:
50:83:06:f9:b4:75:2e:7e:94:08:cc:a7:26:ea:5e:0b:d2:65:
7c:c6:d2:3c:cf:80:30:13:ac:1f:9c:a8:c4:5d:0d:db:c2:45:
da:be:f3:25:a4:fe:09:a4:46:09:7a:cd:35:15:3d:43:a8:d3:
1c:d8:a3:52:f2:8f:5d:07:b1:b0:ab:68:f9:7c:d3:0c:39:57:
14:de:16:c9:b1:6b:87:9b:6d:e0:b0:88:ce:7a:6f:ec:d7:df:
49:3f:37:dc:ad:6f:ef:27:2b:8f:97:b2:71:4a:2b:38:d9:30:
02:9b:6c:84:f7:fe:be:4b:ad:8a:d0:3d:a5:3b:90:30:04:e8:
ef:01:ca:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:51:31 2026 by rpki-client