Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B9D37E5AFCFA11F0979AFD84DAE4EC9C.roa
File: B9D37E5AFCFA11F0979AFD84DAE4EC9C.roa (raw, json)
Hash identifier: aZnCHsifHPxEeh5tcfUqKA02bx+BwozWYbLF5Rh3KBs=
Subject key identifier: 1E:55:EC:C9:1E:D8:B9:11:C6:23:8D:41:6E:DB:56:48:90:FA:ED:BE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019AA0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B9D37E5AFCFA11F0979AFD84DAE4EC9C.roa
Signing time: Thu 29 Jan 2026 10:10:24 +0000
ROA not before: Thu 29 Jan 2026 10:10:19 +0000
ROA not after: Sun 17 Jan 2027 10:10:19 +0000
asID: 4760
IP address blocks: 45.202.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105120 (0x19aa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 29 10:10:19 2026 GMT
Not After : Jan 17 10:10:19 2027 GMT
Subject: CN=697b3210-2d45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:39:26:45:45:06:aa:8b:10:ef:de:a5:e8:e7:
3b:9e:e5:37:d4:d9:dd:78:71:93:04:de:99:d0:3a:
d2:ea:d5:1b:f0:f6:5d:5a:26:96:4a:8e:77:07:34:
9a:53:96:52:75:51:16:97:e8:58:3d:ae:6a:27:f0:
18:4f:fb:6e:6f:4c:1e:a5:7b:7b:1a:3d:b7:81:83:
66:e0:8e:77:58:10:94:7b:5d:b6:cd:b5:c5:5b:26:
e1:02:0c:d5:29:23:bf:7f:c3:44:35:96:2d:de:69:
81:9e:c2:d3:a7:3e:93:1f:8d:63:ec:ef:4b:a6:79:
b5:a9:87:c0:28:2e:2a:4f:89:19:a8:74:ac:f5:d1:
c4:61:b0:59:ca:c5:59:0e:7d:f3:a0:52:12:c0:f0:
56:a6:c2:63:5f:43:58:28:9e:a7:7e:c3:d4:48:21:
af:8f:42:1b:98:a7:19:ff:79:a2:5c:ed:83:e3:45:
cb:9d:57:be:bb:02:40:a6:56:bc:7d:98:37:c6:31:
73:f6:37:e8:18:21:b5:77:19:20:21:1c:e3:c2:64:
71:8f:fb:92:e6:a6:0b:d2:bc:98:cc:62:c6:51:bc:
81:34:9f:3e:77:36:5c:03:ea:ba:0f:09:a6:a5:3c:
44:70:b8:ce:f2:8a:ba:ad:c5:2d:5a:ec:56:2a:e8:
04:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:55:EC:C9:1E:D8:B9:11:C6:23:8D:41:6E:DB:56:48:90:FA:ED:BE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B9D37E5AFCFA11F0979AFD84DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.224.0/20
Signature Algorithm: sha256WithRSAEncryption
8a:d3:c8:3c:1a:d0:23:67:3a:23:3c:c2:9b:b3:98:e2:47:08:
22:fc:79:b9:34:b2:98:eb:d2:10:5c:1a:6b:83:8e:66:a1:28:
8c:96:cc:e9:aa:98:4c:a6:9e:6c:93:06:cc:a5:3b:89:7d:43:
bf:24:4d:b6:18:34:f2:c5:c8:51:5f:61:28:1d:07:e7:c4:30:
5e:8c:84:78:ef:42:54:a5:80:1c:ec:b4:d3:e4:f8:01:b2:bf:
a3:66:88:3f:5f:cd:67:ea:cc:f5:ae:5b:be:15:42:8d:06:67:
f9:1d:7d:c9:cb:21:5a:83:48:e7:fa:2a:82:8e:02:67:a3:e5:
6d:91:db:9b:06:9b:9c:dc:b6:de:0e:ed:f1:7b:62:17:2f:40:
6f:59:d4:fd:85:f0:3a:c4:bf:39:fa:ec:84:81:8c:6c:34:6e:
c4:28:a7:39:42:83:5c:21:f4:00:bc:92:17:21:a4:13:e9:b3:
e7:6f:d7:09:f5:eb:3d:38:34:ba:29:2c:dc:f3:6c:84:f4:f1:
fb:52:8c:84:45:87:14:57:6c:78:a3:c0:06:2d:50:52:9d:d7:
34:66:2e:14:8e:32:8b:a8:22:90:03:b2:56:a1:39:e8:b2:e1:
78:69:8a:8f:56:a4:e6:3f:a7:03:d5:36:6c:b8:2d:44:af:7a:
45:b7:e9:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:19:13 2026 by rpki-client