Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A2E82FF403FF11F195EFE7A9DAE4EC9C.roa
File: A2E82FF403FF11F195EFE7A9DAE4EC9C.roa (raw, json)
Hash identifier: K5k8eKEt/mTTp3STPtYUrn307ZmbKqhTLj5JzYyxFII=
Subject key identifier: 0F:18:DE:5F:4C:C6:44:0A:05:60:62:BA:33:68:B0:E4:F8:CE:13:46
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019C1F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A2E82FF403FF11F195EFE7A9DAE4EC9C.roa
Signing time: Sat 07 Feb 2026 08:33:11 +0000
ROA not before: Sat 07 Feb 2026 08:33:07 +0000
ROA not after: Mon 16 Mar 2026 08:33:07 +0000
asID: 401701
IP address blocks: 45.192.96.0/20 maxlen: 24
45.207.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105503 (0x19c1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 7 08:33:07 2026 GMT
Not After : Mar 16 08:33:07 2026 GMT
Subject: CN=6986f8c7-c332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f8:4a:ed:26:51:ca:db:5c:01:6a:47:88:a2:
cf:c6:d0:2b:29:ce:eb:7b:35:36:2f:c0:08:0b:17:
ea:7a:5e:8c:d8:90:f7:9b:d9:af:25:d6:17:32:a0:
37:12:90:55:5b:dc:37:2d:28:07:f5:ec:3b:f6:2f:
17:13:4e:42:b5:f2:c9:22:54:d6:4b:6a:b4:b2:f4:
65:7b:db:da:94:44:73:ff:dc:9b:3c:1e:7b:98:44:
43:99:e5:89:57:55:54:aa:a9:98:e0:08:d3:77:31:
a2:12:f7:aa:3b:bb:c5:0c:66:b9:f2:33:26:f2:65:
e2:50:69:e7:7b:93:f0:ea:3a:cb:cf:8f:f5:6c:bc:
d6:a5:df:16:32:79:50:60:8b:21:64:ef:e8:e1:e3:
4f:91:7c:53:78:ab:48:56:5c:ae:44:48:96:0a:1a:
6c:69:0e:25:84:b2:0a:67:91:50:a5:ad:96:e3:4f:
39:6c:8e:5b:f8:e6:06:fe:37:f8:98:6d:e8:8e:eb:
d5:dc:1a:c5:0e:92:44:d6:ba:96:4e:6a:c9:80:d9:
52:a9:97:49:2f:24:ff:21:22:86:b6:9e:7f:cf:4e:
89:1c:d6:ad:68:bd:4b:26:88:ae:6d:e9:ed:8f:a5:
ce:f6:59:53:0e:0e:b1:7c:0b:7c:4b:da:79:e8:a1:
43:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:18:DE:5F:4C:C6:44:0A:05:60:62:BA:33:68:B0:E4:F8:CE:13:46
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A2E82FF403FF11F195EFE7A9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.96.0/20
45.207.192.0/19
Signature Algorithm: sha256WithRSAEncryption
69:9d:67:0d:5d:4e:f1:f0:0b:24:f9:1d:3c:46:05:cf:c0:6e:
68:d3:10:44:8e:07:0d:87:c5:08:e8:78:a0:b9:c1:a8:fe:8a:
ae:e1:74:c6:97:b9:ca:15:a9:d6:e3:a2:be:af:5f:d2:94:34:
34:ac:89:b7:f9:e8:84:b2:32:60:91:3f:7d:a8:72:ac:f5:7d:
b4:bb:f3:a8:15:a0:2b:ac:45:16:7b:9b:c9:ab:c5:2e:a5:3d:
29:54:e6:ac:d3:1c:01:9f:60:42:ea:19:6d:c6:82:37:46:62:
75:18:ab:0f:75:6d:0e:52:86:d0:e8:b4:cd:39:14:ba:f5:66:
ea:99:82:26:70:c5:65:b5:3a:7a:c8:57:81:34:d9:de:9e:de:
ef:21:46:5f:f8:69:71:3a:9d:22:69:c4:5e:00:32:02:ac:ad:
74:f6:90:88:54:16:73:5a:91:9d:06:99:53:f0:6e:63:1b:dd:
66:5f:55:d3:01:22:9a:19:55:11:0f:ef:f1:3c:4d:68:28:a7:
d5:3a:85:0b:1a:cf:d2:92:c4:ef:ca:cf:1a:af:30:fb:d7:3a:
fd:bf:58:be:f9:14:60:3e:b6:0c:49:94:1e:06:d6:0a:e7:13:
98:fa:c2:97:c5:51:2b:26:bb:18:7f:90:93:92:ce:2b:06:2d:
c7:eb:77:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:19:09 2026 by rpki-client