Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AB02E6B20D7211F195CB41B9DAE4EC9C.roa
File: AB02E6B20D7211F195CB41B9DAE4EC9C.roa (raw, json)
Hash identifier: Xoq3icaWiyrHsqFmEGUv0YYI1mPoiNDOElAMVoIqRDw=
Subject key identifier: E5:04:B2:3A:01:4C:88:E0:D8:08:43:0D:4A:87:3A:87:2C:38:D7:E4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019EC0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AB02E6B20D7211F195CB41B9DAE4EC9C.roa
Signing time: Thu 19 Feb 2026 09:09:18 +0000
ROA not before: Thu 19 Feb 2026 09:09:12 +0000
ROA not after: Thu 25 Feb 2027 09:09:12 +0000
asID: 140224
IP address blocks: 45.192.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106176 (0x19ec0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 19 09:09:12 2026 GMT
Not After : Feb 25 09:09:12 2027 GMT
Subject: CN=6996d33e-5cb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:ed:de:9c:40:08:1a:42:11:d1:f9:6b:d9:ca:
38:12:3c:10:47:9b:4e:99:18:9e:7b:de:4e:18:c4:
da:a8:54:2b:66:e5:45:25:1a:b4:d2:3e:f1:6d:2b:
1c:e0:e6:17:ec:ce:42:0d:8d:b0:73:e1:f2:80:20:
e2:73:3b:22:93:34:93:91:97:83:d7:4f:0f:c3:d7:
1c:54:70:fa:9b:85:a5:e2:89:e9:1b:98:b7:38:a7:
fd:60:23:b4:c1:8f:41:86:90:60:6f:72:ad:27:c1:
9d:bb:dc:97:29:f3:93:cd:50:46:89:6a:da:45:33:
0f:7f:64:d0:0c:5d:eb:fb:04:17:87:cb:eb:72:bf:
ea:99:fa:a1:2e:cc:27:5e:e0:4f:19:5f:c4:14:22:
94:93:08:a6:75:a7:da:a3:af:c3:5a:b3:fb:cd:eb:
ef:de:c2:d5:78:9e:3d:49:c1:38:7c:ff:a7:22:58:
af:3f:bd:c8:57:ed:ba:9b:2b:6b:e5:ac:ff:0c:34:
5e:89:3e:cc:ad:3c:65:62:3a:e7:a7:95:9d:2e:49:
ac:e4:e8:b8:58:ab:46:2c:ea:e3:62:02:ed:2e:b5:
60:23:eb:ba:e2:b2:2e:35:95:8b:f6:2f:12:6b:59:
21:a2:e0:65:ab:08:99:58:85:e9:16:db:4b:17:0c:
c9:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:04:B2:3A:01:4C:88:E0:D8:08:43:0D:4A:87:3A:87:2C:38:D7:E4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AB02E6B20D7211F195CB41B9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.17.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:47:cf:f7:7e:ce:d4:c9:46:b8:31:36:08:9b:ca:5f:cb:b1:
06:3d:43:da:8f:50:4e:a5:8a:04:c2:5f:80:68:e7:57:a5:2e:
63:bf:3b:fa:95:d0:59:84:8e:27:58:25:d3:dc:81:ee:1f:23:
d1:65:77:de:eb:fc:3b:c0:f4:b7:b8:5d:a2:c6:37:54:72:0c:
50:a1:1c:35:a9:89:d7:de:1e:28:46:b6:b4:76:77:b7:ea:5d:
5c:f9:82:4d:70:ec:07:5c:dd:0d:0d:3e:55:32:da:d8:4c:09:
41:b5:30:10:e9:89:01:05:e0:65:a9:81:a8:cb:a1:9d:78:45:
ae:f8:39:91:ab:a3:c3:9f:7d:65:e6:35:17:25:2f:86:27:12:
b3:dd:56:62:64:e1:e8:2f:24:59:bc:18:63:5e:10:bf:29:75:
5e:af:46:b3:c9:a6:f8:b4:f3:d3:c4:36:ed:23:36:cb:aa:4d:
21:5e:3e:23:2e:af:d2:c8:0c:43:02:e3:0c:fe:c1:0e:7e:c8:
25:e2:02:2b:6d:e3:2a:93:74:c5:00:f1:aa:85:88:75:18:13:
3a:74:42:74:10:b5:c6:6c:cb:4b:a0:2c:b7:c7:b7:43:b0:3b:
a9:ae:9e:f0:b1:10:70:a2:54:dd:e7:c5:d8:2d:6c:67:a6:25:
3d:14:a8:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:40:50 2026 by rpki-client