Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A87F88EC072211F1BAF7C9EEDAE4EC9C.roa
File: A87F88EC072211F1BAF7C9EEDAE4EC9C.roa (raw, json)
Hash identifier: ZFfCO78L7rzuA0rC3x9emYqkbbkjpZvJni3/vWLUZq0=
Subject key identifier: 5C:8B:AE:03:88:AF:36:6E:6E:EF:35:88:FD:F0:94:57:64:1A:F3:BB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019CEF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A87F88EC072211F1BAF7C9EEDAE4EC9C.roa
Signing time: Wed 11 Feb 2026 08:21:27 +0000
ROA not before: Wed 11 Feb 2026 08:21:22 +0000
ROA not after: Wed 18 Mar 2026 08:21:22 +0000
asID: 14315
IP address blocks: 45.196.104.0/24 maxlen: 24
45.202.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105711 (0x19cef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 11 08:21:22 2026 GMT
Not After : Mar 18 08:21:22 2026 GMT
Subject: CN=698c3c06-7a40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d8:70:15:13:80:e0:a0:2d:9c:0f:74:ab:9d:
51:18:c0:1d:c7:99:80:3e:ae:f7:5b:37:b0:18:69:
bb:f9:cc:c9:9d:76:3e:82:a7:87:db:a5:06:e5:42:
1c:4f:b7:81:3a:91:80:75:aa:f2:3d:11:25:07:b2:
09:15:1e:c6:db:75:90:21:5f:b1:d5:b5:4f:d5:8b:
f4:8f:9f:0c:e9:f1:fa:1d:19:32:53:5e:04:dd:e0:
be:a7:6a:25:c3:98:4f:d5:50:2d:92:cd:c2:92:09:
65:a7:12:2a:8a:fe:ca:85:66:7d:a2:6b:6e:d1:b5:
21:0c:7b:08:a1:e7:7f:a0:e9:f2:67:a8:df:a6:c7:
7d:b9:95:01:9c:1a:d9:73:f2:99:50:65:c2:98:cb:
b9:12:69:d7:0c:e3:a8:f8:5e:ce:72:5b:41:06:33:
dc:d1:b0:07:52:2b:e1:3e:35:c0:39:5e:44:89:e0:
cb:47:54:59:6b:91:77:9f:43:da:80:10:dd:d5:b7:
ef:84:d1:15:a2:89:1b:fb:ad:91:16:8c:c3:21:e1:
72:8f:2f:32:7f:56:58:54:88:56:ff:6a:8e:e9:32:
c8:72:54:72:5c:d3:c1:c7:0c:94:14:1b:c3:5c:19:
df:36:79:aa:2a:c5:bb:ab:01:1f:bd:06:63:ab:d0:
be:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:8B:AE:03:88:AF:36:6E:6E:EF:35:88:FD:F0:94:57:64:1A:F3:BB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A87F88EC072211F1BAF7C9EEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.104.0/24
45.202.203.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:27:38:4c:3b:ce:2f:ce:c4:02:4e:6b:7b:ea:4d:bd:e0:7c:
8a:2a:f2:d9:7a:98:13:1c:80:89:e2:0c:9b:0d:9e:6c:f9:85:
50:26:3f:6c:e8:5e:f8:3b:e0:aa:8d:a9:6b:dd:d1:7a:41:07:
a7:99:7b:eb:52:6b:e8:9f:68:ac:f7:be:6c:8e:df:58:17:ea:
29:4c:a7:29:e0:dc:80:72:c1:ab:9c:cd:05:69:ce:bb:08:dc:
59:48:0d:0a:40:b6:65:eb:8f:d8:60:67:bd:be:98:8c:f3:dc:
10:1e:85:18:6c:26:1d:9b:35:f1:d7:8f:1d:e1:26:c7:16:7a:
da:ed:8a:32:a8:c4:19:85:76:88:a2:a7:ab:45:c4:15:86:a6:
8c:e8:3e:0a:d6:49:23:21:e5:3b:6c:5a:a3:cb:3b:f8:6a:6a:
2c:9a:32:05:1b:58:fd:e4:b9:3e:af:8b:94:39:3c:64:03:f8:
ce:c2:e7:dc:b3:63:dc:15:d2:7a:9b:0d:b9:f4:05:e0:ac:ba:
a8:4c:49:4f:53:cc:2c:d4:6f:7c:16:78:3f:9c:69:91:a8:df:
74:a4:67:aa:7e:75:dd:de:81:96:32:b0:fe:d5:25:2e:40:ba:
71:e6:a0:3b:62:87:30:bd:ff:e1:cb:6a:de:3a:84:c0:4b:3e:
2f:58:a5:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:17:12 2026 by rpki-client