Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A047682AFC4B11F09E7061CCDAE4EC9C.roa
File: A047682AFC4B11F09E7061CCDAE4EC9C.roa (raw, json)
Hash identifier: b8RfuLNbwlt/huUgKmMB03Sf2WPjrXad/k5aN9h/Uyo=
Subject key identifier: 8E:84:FD:E4:1E:BA:BF:13:39:3F:5F:32:02:DB:89:98:B4:1C:D4:CB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019A71
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A047682AFC4B11F09E7061CCDAE4EC9C.roa
Signing time: Wed 28 Jan 2026 13:16:59 +0000
ROA not before: Wed 28 Jan 2026 13:16:54 +0000
ROA not after: Mon 02 Mar 2026 13:16:54 +0000
asID: 9304
IP address blocks: 45.198.16.0/24 maxlen: 24
45.198.17.0/24 maxlen: 24
45.198.18.0/24 maxlen: 24
45.204.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 02 Mar 2026 13:16:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105073 (0x19a71)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 28 13:16:54 2026 GMT
Not After : Mar 2 13:16:54 2026 GMT
Subject: CN=697a0c4b-8c7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:45:90:5d:e6:1b:21:83:0d:54:11:b3:76:77:
52:58:7b:eb:87:45:5d:ae:47:7f:ae:93:8e:9c:bb:
59:54:d0:57:ca:c7:ca:55:93:30:5e:63:62:4e:4d:
26:36:27:7f:93:64:09:65:66:5a:8c:85:85:d2:32:
65:20:e0:95:d1:5d:7c:ec:79:26:58:d0:a2:c9:a7:
ce:c4:23:e5:67:f1:92:aa:f8:ab:5e:5b:5b:21:77:
fc:81:56:dd:6b:34:e2:18:fb:18:c3:f5:4b:0a:ba:
d6:72:81:b9:77:f5:08:77:08:8d:32:00:8f:76:4b:
e4:3a:89:50:86:88:ca:51:c2:09:e6:ef:eb:ce:f2:
b1:74:4b:fe:12:2d:e0:97:76:51:15:09:cb:70:51:
8d:2f:24:e2:b5:76:f0:b7:60:17:5b:6c:57:e2:68:
44:a3:a1:21:5d:ca:bc:6f:78:98:31:10:25:ab:fe:
3b:2c:00:9f:ec:87:0d:20:9f:97:29:13:39:6c:6d:
b0:4c:15:47:6c:d3:31:69:6b:b2:09:30:1a:af:11:
10:8a:bb:c1:f6:aa:1b:bd:52:91:02:3d:03:fb:32:
d7:43:9d:10:df:8e:87:90:3f:7a:a7:d9:fb:23:1e:
e7:0a:be:f9:9a:4b:e0:1f:0d:86:99:f0:0a:64:b3:
87:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:84:FD:E4:1E:BA:BF:13:39:3F:5F:32:02:DB:89:98:B4:1C:D4:CB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A047682AFC4B11F09E7061CCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.16.0-45.198.18.255
45.204.181.0/24
Signature Algorithm: sha256WithRSAEncryption
64:1b:e6:70:ce:7a:98:39:ff:d3:49:85:16:50:d5:4b:02:81:
a4:2e:30:6c:c5:cd:db:ce:a5:3a:a6:5a:21:4d:e0:cc:d2:46:
b6:27:6a:65:42:07:01:e8:8b:38:52:05:15:b1:cb:d2:01:e6:
54:2a:23:f1:e9:d9:fa:39:02:b7:45:b2:b4:9c:fb:8c:f7:e8:
af:94:e4:9a:36:ad:1a:b7:7c:56:45:87:96:d9:09:e4:85:e0:
eb:09:a2:21:9a:a1:31:8e:55:cc:d4:87:c3:fa:99:2c:bc:e9:
63:b8:ab:24:ed:fe:b8:81:b3:9d:de:c7:88:23:5c:75:7c:d7:
dd:3b:1b:4f:fe:a9:1e:f6:d5:75:5d:67:c0:cf:ff:b7:6b:d6:
67:a6:51:ca:45:f7:89:29:df:33:53:bd:33:17:58:49:87:93:
17:7e:bc:8d:b3:d6:db:54:c5:00:4e:4a:a4:09:ae:b7:e3:dd:
bc:8c:03:16:9b:27:e0:cc:f9:bf:3d:01:ca:e5:d7:e9:73:44:
9b:6e:61:a5:5b:dd:6a:9e:11:c8:fa:8f:5c:ab:c4:4a:1f:7c:
5a:75:49:4c:38:4f:df:bc:dc:ad:aa:6e:22:51:8b:aa:fb:f3:
a0:59:83:54:3d:bf:7a:c2:04:b4:1c:09:f2:60:14:e9:b7:d5:
01:88:af:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:59:46 2026 by rpki-client