Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BD1FA3F0097911F1988639CFDAE4EC9C.roa
File: BD1FA3F0097911F1988639CFDAE4EC9C.roa (raw, json)
Hash identifier: eh8YD3tZ5aAChxD17IdXP8FbACyao0sZVX8F7+f4+jo=
Subject key identifier: D4:FF:37:7A:09:87:1F:D3:5C:2A:6A:AC:D3:91:22:D3:3A:E6:86:43
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019D80
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BD1FA3F0097911F1988639CFDAE4EC9C.roa
Signing time: Sat 14 Feb 2026 07:49:50 +0000
ROA not before: Sat 14 Feb 2026 07:49:45 +0000
ROA not after: Sun 22 Mar 2026 07:49:45 +0000
asID: 8796
IP address blocks: 45.205.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105856 (0x19d80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 14 07:49:45 2026 GMT
Not After : Mar 22 07:49:45 2026 GMT
Subject: CN=6990291e-3dca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:50:e7:5c:b8:7b:9c:07:4b:cc:37:f6:d3:43:
2d:49:5c:bd:09:62:e2:8e:05:94:10:b5:d2:4b:09:
3c:b4:55:27:bb:a3:6c:14:95:1d:45:84:ba:ee:f8:
d9:d8:7b:af:25:2c:6b:da:eb:c8:63:5b:a7:b4:67:
c9:93:3f:95:a4:d1:bc:68:51:92:85:b2:f3:48:6d:
b7:c7:85:43:64:1a:92:bc:c0:0f:f7:11:28:81:8f:
90:8c:43:c9:00:0d:a5:27:bb:59:59:40:a7:70:c2:
41:f0:3a:f6:13:80:1c:22:c3:f3:e5:73:38:3a:3f:
75:4a:9e:57:b6:93:2d:66:cc:b9:ba:1a:ba:75:a5:
5d:66:fa:fe:2e:c0:63:3e:af:ae:6d:8d:89:07:f6:
40:15:b5:4d:00:f6:d8:8d:a6:12:6b:eb:ea:ca:39:
98:d5:5c:e7:29:27:63:d3:75:6e:a7:1a:7a:77:4e:
ea:54:32:ec:07:1f:c8:4d:8b:5e:6b:72:79:ed:49:
06:d5:38:f3:b2:c7:49:7a:8c:d2:f4:64:46:3a:57:
b4:3d:c2:52:44:f5:62:e7:d1:0a:3a:b3:4c:95:48:
a5:60:7b:c8:dc:ca:2a:8b:2b:d6:2a:50:9c:6b:17:
c6:84:b6:cd:1c:5b:e9:7d:6c:c3:b6:68:c4:66:df:
de:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:FF:37:7A:09:87:1F:D3:5C:2A:6A:AC:D3:91:22:D3:3A:E6:86:43
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BD1FA3F0097911F1988639CFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.16.0/20
Signature Algorithm: sha256WithRSAEncryption
93:da:4e:b9:16:65:e8:7f:79:f7:d5:88:79:68:ec:4e:dd:a0:
76:2c:8d:39:e0:90:02:85:8e:9f:38:72:63:62:0f:d5:51:02:
05:c7:05:47:b2:88:c8:a5:86:49:f8:82:52:ac:b1:6b:b0:65:
06:ee:50:22:78:86:71:28:5b:9b:15:3f:a6:3e:9c:d3:70:ff:
bc:73:1b:af:df:d4:95:d6:2a:05:40:57:b8:0c:9e:c0:54:79:
d2:04:dd:03:67:05:59:c4:d4:38:98:fc:af:1a:11:65:ef:55:
5e:0b:94:9d:85:eb:c7:88:a7:71:de:7d:cc:4b:e2:4b:11:12:
09:dd:7b:bb:9b:21:bf:b4:36:0d:f5:66:a8:a5:20:a6:38:96:
76:ac:f5:9e:37:1c:b7:96:39:fe:f0:3b:36:14:20:f8:83:5c:
1b:7c:31:f4:f5:22:be:4c:05:65:55:b0:ee:58:b6:b8:74:de:
f0:d6:3d:59:d0:cc:0f:45:dc:a7:c5:c9:8e:af:29:37:33:63:
b9:87:c8:73:ff:ef:d0:d8:3d:63:8d:ee:12:80:e1:c4:05:b5:
53:99:94:2f:54:ca:12:06:83:2a:bf:29:0e:16:bb:b2:98:c3:
15:7c:01:1b:c8:7d:7d:53:a6:09:28:82:6f:74:0e:66:c2:02:
c8:1e:e9:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:51:13 2026 by rpki-client