Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B48FF2EC07F011F19E571DE1DAE4EC9C.roa
File: B48FF2EC07F011F19E571DE1DAE4EC9C.roa (raw, json)
Hash identifier: YktTnkxQHVtzP0fFVcInAT9HgZ4jRTx4iT9mjXQO8wk=
Subject key identifier: A8:46:E1:72:61:77:2E:73:10:B4:80:1B:2F:1A:42:1F:FC:5E:E9:34
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019D2E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B48FF2EC07F011F19E571DE1DAE4EC9C.roa
Signing time: Thu 12 Feb 2026 08:56:23 +0000
ROA not before: Thu 12 Feb 2026 08:56:17 +0000
ROA not after: Wed 06 May 2026 08:56:17 +0000
asID: 149440
IP address blocks: 45.194.27.0/24 maxlen: 24
156.227.0.0/24 maxlen: 24
156.236.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105774 (0x19d2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 12 08:56:17 2026 GMT
Not After : May 6 08:56:17 2026 GMT
Subject: CN=698d95b7-cd6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:80:31:6c:42:cf:70:30:bb:07:c8:36:37:35:
4f:54:eb:40:a4:7f:59:2f:f9:d6:02:e7:f4:de:1a:
15:ad:c7:c8:f2:ed:6f:9d:34:4e:4a:43:c7:a9:d2:
c5:b7:ca:a6:64:14:d9:cf:15:df:35:3a:fb:13:0b:
68:07:12:f7:59:c4:23:ca:5f:89:ff:f2:0a:ae:10:
fe:cf:0c:48:6d:bf:d8:0d:f5:02:d5:03:f9:ba:d5:
f5:df:64:f0:11:8f:b4:65:72:ab:d0:52:00:e4:cc:
c1:0e:01:aa:b7:2e:f1:1c:e1:84:51:7d:50:ee:b2:
79:4f:68:5b:f1:9d:d5:55:c3:a7:50:ba:4f:69:bd:
d3:c1:e4:c6:1d:25:47:4f:69:ee:cb:43:8e:2e:6b:
ad:db:84:07:47:6a:8b:ce:5c:2b:2f:49:69:09:4f:
f6:59:29:45:d8:9c:05:c6:1b:d4:9f:85:da:e1:10:
7b:b0:05:ff:49:9a:9c:43:2c:df:81:bc:ad:3c:5b:
83:8a:91:a4:95:1a:d9:9d:20:0e:47:fe:10:57:d4:
a0:c3:74:86:f0:25:25:9d:3c:7b:b9:cd:37:c0:9c:
d8:c9:ff:58:8b:fa:40:43:a0:40:c4:ad:c1:88:6e:
56:a5:83:30:08:26:60:b3:63:58:23:65:aa:7a:5f:
92:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:46:E1:72:61:77:2E:73:10:B4:80:1B:2F:1A:42:1F:FC:5E:E9:34
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B48FF2EC07F011F19E571DE1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.27.0/24
156.227.0.0/24
156.236.76.0/24
Signature Algorithm: sha256WithRSAEncryption
13:1e:86:10:e0:dc:05:db:a0:49:98:6f:82:f1:3c:3e:cd:fa:
cd:6f:0b:1b:a5:9d:ee:8a:89:6a:80:22:ad:d1:90:f6:2d:0e:
89:a5:c5:fb:42:c4:21:03:83:b7:a6:26:89:5f:ac:6e:74:37:
66:11:ef:3c:8c:97:dd:61:1a:ca:d7:83:b9:86:b4:cd:fe:4b:
1a:43:ee:7a:cc:78:a6:88:10:6a:bf:c1:f4:12:b6:e4:af:ed:
93:4a:0c:28:2e:ee:d5:d9:e7:68:4d:02:0c:0b:87:97:77:4f:
35:d1:d9:95:0a:4c:9e:aa:84:42:db:a5:76:d1:7d:f6:6f:9f:
3f:67:61:08:b6:cb:23:48:bb:2a:ac:a8:dd:d3:c4:a5:c6:c2:
46:80:e7:57:15:29:9d:57:8b:17:dd:22:d3:32:cc:4c:d1:99:
85:82:f9:5e:a6:ee:89:3e:8c:ea:14:ea:24:e1:68:45:59:40:
21:93:24:0f:7b:76:77:a1:cb:da:2b:c3:5e:5e:d9:4c:d3:de:
2d:3a:a5:d7:0c:d2:89:5f:ca:e8:74:00:2b:d2:0a:31:fb:1a:
32:4d:36:5b:64:2b:97:8e:0e:6c:ed:a3:9c:1b:56:8d:3d:9e:
c7:83:e6:95:ca:e8:7d:f5:e6:ff:8c:94:e7:20:6b:9e:85:9b:
e8:60:b5:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:19:37 2026 by rpki-client