Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A2E8980A2F3711F1978F54DFDAE4EC9C.roa
File: A2E8980A2F3711F1978F54DFDAE4EC9C.roa (raw, json)
Hash identifier: QfyhHYKdjvkeFsdJYpkYOcyGRex8V1+t3ZRkQtkgNgQ=
Subject key identifier: BE:B9:71:72:56:1C:19:7D:84:46:36:E7:1D:3E:FA:08:8C:15:47:E9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A9A4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A2E8980A2F3711F1978F54DFDAE4EC9C.roa
Signing time: Fri 03 Apr 2026 08:32:23 +0000
ROA not before: Fri 03 Apr 2026 08:32:18 +0000
ROA not after: Fri 29 May 2026 08:32:18 +0000
asID: 133073
IP address blocks: 45.196.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108964 (0x1a9a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 3 08:32:18 2026 GMT
Not After : May 29 08:32:18 2026 GMT
Subject: CN=69cf7b17-4388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0e:59:05:68:19:78:a2:2e:e3:fb:61:04:2d:
33:16:ce:64:b0:fc:17:9b:0e:f7:43:89:e4:aa:01:
95:f7:41:5b:6c:b6:d8:12:2f:bf:86:d8:9f:72:54:
b9:50:9a:10:ab:68:f1:f6:14:89:09:fd:7e:e4:ed:
47:87:0f:44:44:a2:af:01:19:80:92:b5:56:5c:09:
6e:fa:b8:23:b2:8b:36:c7:87:52:7a:f0:fd:c6:ea:
cf:23:1a:87:cf:c8:d5:8a:ea:b3:ea:6a:fe:f8:c7:
fc:56:23:fa:7c:5e:96:5e:1d:22:72:6a:82:40:1f:
8d:4e:c3:63:60:18:0f:ca:69:e1:17:a8:e6:a4:c3:
45:dc:c9:30:45:6d:a7:d9:08:2d:b6:fc:15:2a:af:
1f:5d:a8:0e:92:77:80:5f:72:e6:df:cd:71:f2:fd:
34:b9:0a:6d:df:55:2e:b2:b0:68:cb:fc:e6:b7:69:
28:e2:a3:b2:6c:5e:02:ed:33:97:a9:e4:aa:90:33:
20:ec:d0:a1:e3:c9:7e:e5:47:89:1a:67:5a:f0:b5:
de:10:9c:ff:e3:d5:52:c9:5f:dc:ce:85:c5:c6:4b:
46:16:9e:ed:9a:ce:9b:c0:d5:ab:ef:30:d6:06:86:
72:3d:72:ec:88:7d:b3:cd:0f:ef:81:15:52:11:dd:
56:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:B9:71:72:56:1C:19:7D:84:46:36:E7:1D:3E:FA:08:8C:15:47:E9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A2E8980A2F3711F1978F54DFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.100.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:f1:99:7c:89:55:f3:fb:58:c8:78:2b:43:d5:63:ac:02:e0:
18:c6:08:6e:5b:6b:bb:95:88:09:8a:89:12:ca:d0:97:b9:c6:
dd:a9:2c:fe:8e:e3:de:bd:1b:a3:89:38:42:f0:ff:f8:55:97:
4f:47:75:b5:13:b9:80:4a:ce:e6:a3:13:8c:5c:20:c8:38:c7:
2b:2e:1f:8e:d2:f1:b0:12:0e:c4:d8:af:72:9d:f8:5d:c3:3b:
e2:6f:69:3f:c6:96:ba:65:c7:31:3e:8e:b6:0c:27:0d:a8:38:
2e:c5:f7:fe:17:dc:12:69:be:fa:a9:c8:ae:b4:ab:2c:ba:17:
7f:28:06:d3:02:b0:29:c9:ab:ea:cb:d4:0f:81:7c:4d:45:bc:
e0:b5:f7:e8:e3:55:a8:cf:1f:5c:cc:d3:47:b2:ac:e4:d8:91:
cc:de:90:ad:d7:d0:28:85:69:83:8f:60:d1:4c:0e:27:31:e1:
55:e2:d5:4b:c0:3b:96:42:51:e1:fe:35:a9:64:3c:ae:9d:88:
c1:d5:25:64:cb:f1:61:60:c5:0e:0c:1b:a4:49:35:f5:eb:92:
36:c5:1d:3e:73:1a:fc:71:d8:cf:9b:02:00:db:c2:fc:cb:2d:
ea:6c:bd:cb:43:85:15:1a:02:45:f4:2e:03:36:64:81:d6:1b:
21:a7:67:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:54:27 2026 by rpki-client