Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B7C3BBBA0B0611F1A0C1F8D8DAE4EC9C.roa
File: B7C3BBBA0B0611F1A0C1F8D8DAE4EC9C.roa (raw, json)
Hash identifier: ljr4FUX6l7qvLkP1hTH6S9FC43Vl2V9i1FyB1mImJuU=
Subject key identifier: 15:4E:BD:08:F4:F5:56:FA:8D:78:1B:A1:82:EA:8B:95:69:99:AC:22
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019E0A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B7C3BBBA0B0611F1A0C1F8D8DAE4EC9C.roa
Signing time: Mon 16 Feb 2026 07:11:35 +0000
ROA not before: Mon 16 Feb 2026 07:11:25 +0000
ROA not after: Fri 16 Feb 2029 07:11:25 +0000
asID: 17561
IP address blocks: 45.192.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105994 (0x19e0a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 16 07:11:25 2026 GMT
Not After : Feb 16 07:11:25 2029 GMT
Subject: CN=6992c327-92bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ad:6e:bc:e8:a1:90:ea:0b:7a:a7:7c:0d:3b:
a0:f3:a9:26:20:96:a3:6a:cf:c8:02:d8:b7:80:0e:
81:2e:7f:dc:0e:7c:05:2b:c1:97:4c:fa:9a:9c:4b:
0b:1b:52:e2:aa:d6:1d:9e:de:9f:8d:f2:59:35:df:
65:67:67:92:2e:45:e2:c5:61:f9:bc:4a:a8:e3:8a:
32:72:56:d6:84:35:81:64:4a:90:ac:cf:3a:7e:34:
e1:8a:c6:16:ae:59:99:0a:a5:fa:88:57:2d:f5:3f:
a7:f2:b8:4f:89:e3:39:9e:c4:97:7e:19:0a:ad:10:
57:92:22:17:20:41:e4:42:9d:5e:25:0e:2c:9c:4a:
6d:4a:79:e7:0e:7e:62:e8:d1:a8:c2:44:62:28:1a:
e3:01:b9:81:e3:e1:10:dd:78:33:a5:60:5a:4c:f9:
19:3f:a0:83:8e:d0:a2:bc:23:8f:c6:66:d4:65:f1:
0d:fc:d2:5c:76:8b:a1:31:da:69:c0:e7:0e:e3:85:
25:a4:00:30:3b:a1:45:8d:5c:5f:a7:d4:4b:bc:b7:
ea:e6:27:6b:ae:1f:f6:0a:68:06:67:e6:0b:4a:92:
5e:49:88:55:4f:db:8c:a5:88:d4:3d:a4:53:e5:e9:
50:43:5c:98:de:65:2b:00:8d:36:1f:b4:03:55:e8:
df:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:4E:BD:08:F4:F5:56:FA:8D:78:1B:A1:82:EA:8B:95:69:99:AC:22
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B7C3BBBA0B0611F1A0C1F8D8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.9.0/24
Signature Algorithm: sha256WithRSAEncryption
71:85:03:5c:a7:24:a1:7f:d0:bd:d7:47:9c:ee:f0:c6:17:3f:
bb:d6:66:fe:d9:44:6a:b0:a7:20:72:e8:a8:41:52:d2:ff:1b:
56:0f:7b:19:cd:6d:53:99:ac:6b:5b:11:ec:d7:be:a6:da:e2:
4e:75:0f:38:c1:e1:24:8e:a6:ad:a9:98:ed:42:f4:c7:c6:f1:
bb:30:75:c1:a6:62:3a:02:5a:56:91:f8:09:b0:5b:fa:ad:e4:
41:11:f8:cf:d8:c6:83:eb:92:9d:bc:d4:92:71:2d:7a:3f:43:
04:32:95:3c:be:02:dd:85:57:cc:58:85:42:03:fa:85:1f:ef:
87:04:54:60:dc:f2:39:d9:92:02:04:cf:6d:36:89:51:44:f2:
26:2d:fb:a6:8b:b7:fc:92:77:24:eb:bc:1b:83:e6:7e:ff:d7:
2a:d7:fb:30:51:49:71:e7:fa:06:75:1e:46:76:1f:5a:4f:03:
ec:0b:a3:9a:69:49:c6:86:d4:64:0e:90:fb:27:b5:54:b3:ba:
1a:ff:57:31:88:da:3f:6b:00:00:85:96:5e:2b:8f:d2:da:3b:
c6:b1:3f:38:b1:c0:25:42:3e:29:07:22:19:3c:4c:19:b2:90:
4b:93:3f:9e:17:55:66:82:98:5d:48:b1:a6:99:2f:a3:9d:e4:
39:1d:b9:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:08:52 2026 by rpki-client