Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B14AF89A131011F190DA60B7DAE4EC9C.roa
File: B14AF89A131011F190DA60B7DAE4EC9C.roa (raw, json)
Hash identifier: o10tGtNhUoy18AowQlrpOLD0smJiCsgdmVRThWkQHvg=
Subject key identifier: E8:D7:B2:FB:70:09:FB:F6:E9:4B:96:1B:21:1F:96:11:E8:FE:2D:3F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A0BB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B14AF89A131011F190DA60B7DAE4EC9C.roa
Signing time: Thu 26 Feb 2026 12:43:04 +0000
ROA not before: Thu 26 Feb 2026 12:43:00 +0000
ROA not after: Wed 01 Apr 2026 12:43:00 +0000
asID: 17561
IP address blocks: 45.198.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106683 (0x1a0bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 26 12:43:00 2026 GMT
Not After : Apr 1 12:43:00 2026 GMT
Subject: CN=69a03fd8-10a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:17:1f:b6:f9:77:e8:5e:a1:2b:ab:a7:7d:73:
ea:89:3c:33:9f:6e:79:ec:0b:be:98:42:2a:e5:31:
c5:a9:ab:ce:b8:13:b0:8f:72:7d:d7:37:39:68:a1:
ed:15:19:8c:18:1b:b9:82:f9:8d:a8:82:7b:0d:19:
27:d1:0d:51:55:0e:af:eb:53:fe:fa:69:10:4f:7d:
07:c1:19:13:16:c3:21:2a:d9:99:83:0a:fc:28:d6:
b5:68:e6:19:c4:53:bd:09:0e:03:9c:9e:e2:e7:b5:
21:28:c7:93:ea:95:45:f5:5b:cf:96:5a:dc:0a:51:
b4:d8:82:44:46:cb:22:cf:26:e8:17:11:ea:27:1d:
cb:e7:38:1c:ec:94:2f:97:20:ec:14:9d:0a:37:bc:
f0:8d:57:09:44:df:79:42:0f:14:8e:37:45:e2:1c:
9d:50:2b:c2:9a:78:c0:2b:b6:cd:88:c2:8a:64:07:
ba:bf:b3:df:3b:e2:89:e6:59:71:3f:df:9c:1a:b7:
70:e6:9d:2a:3f:c8:8a:b1:f2:bf:99:ae:89:56:8a:
70:81:e6:7d:c6:12:89:f9:43:dd:37:7b:18:3c:55:
e0:9f:59:96:ef:09:c2:6f:5a:66:9c:0a:a5:92:5d:
fc:fd:c0:30:bf:7d:f6:76:41:ff:9b:90:0a:e8:c2:
7e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:D7:B2:FB:70:09:FB:F6:E9:4B:96:1B:21:1F:96:11:E8:FE:2D:3F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B14AF89A131011F190DA60B7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.62.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:1c:14:9e:d0:95:48:19:04:62:32:38:6a:42:f0:05:35:75:
9d:86:03:6c:ff:4d:f5:3a:76:e3:b0:1c:28:a1:60:86:d9:8f:
ec:00:85:30:8d:e7:82:71:ae:91:cb:8d:e5:d3:8d:33:73:95:
2e:9b:64:c1:4c:de:f0:c9:1f:ff:20:32:ef:33:14:bd:ff:c1:
1e:af:3b:7e:9b:6e:2c:dc:58:a4:8a:81:e2:a0:42:c9:10:6f:
bd:97:49:c1:85:05:29:50:8a:b8:22:6c:17:dd:ad:94:3e:41:
aa:35:6f:88:ff:b4:3b:ce:72:72:d6:39:da:ed:e5:4c:7d:01:
5c:99:7f:ff:6b:f9:43:b5:e7:06:57:08:a7:db:05:26:82:d3:
b3:e9:81:05:00:6d:40:c3:f9:1b:b2:90:85:17:b0:f5:68:55:
0f:e7:0d:bc:67:a5:46:46:41:ff:c2:37:ef:ae:d4:dd:88:7d:
10:08:28:d2:a3:9d:e2:e3:19:fc:87:30:8f:56:f8:7a:87:3b:
ec:f7:ee:99:43:ec:7d:0e:65:77:23:4d:ab:7d:1f:53:5a:03:
5b:8d:2e:f3:a0:01:01:de:d6:09:be:a3:50:b9:98:62:3b:1c:
08:1e:2d:eb:bc:10:5e:92:79:f1:70:e0:5d:c8:de:4c:8d:fd:
26:dd:72:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:17:31 2026 by rpki-client