Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE02F3D42AE011F1B9D1B3C4DAE4EC9C.roa
File: BE02F3D42AE011F1B9D1B3C4DAE4EC9C.roa (raw, json)
Hash identifier: Wd5TYBmpJBWlq1nZzkAUP2YS9H9NlZOPQLdPjxleQ8M=
Subject key identifier: 56:10:66:3C:63:BF:E9:5C:B9:FF:7C:3B:6F:8B:1B:A6:A2:17:CF:F0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A862
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE02F3D42AE011F1B9D1B3C4DAE4EC9C.roa
Signing time: Sat 28 Mar 2026 20:00:18 +0000
ROA not before: Sat 28 Mar 2026 20:00:13 +0000
ROA not after: Sat 16 May 2026 20:00:13 +0000
asID: 401696
IP address blocks: 45.192.96.0/20 maxlen: 24
45.205.16.0/20 maxlen: 24
45.207.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:26:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108642 (0x1a862)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 28 20:00:13 2026 GMT
Not After : May 16 20:00:13 2026 GMT
Subject: CN=69c83352-83e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:91:4b:36:ff:05:f0:eb:f7:95:09:5c:92:58:
e1:e8:dd:82:04:e1:a4:ff:61:9d:bd:64:ab:1c:14:
a1:c2:fc:5e:4e:e3:09:5d:82:b0:ea:9a:25:34:8c:
bb:ff:34:1f:1d:a0:52:ba:81:8c:26:98:f3:57:b0:
85:52:56:a3:de:be:08:fb:3d:5b:f4:f4:23:40:8c:
12:e9:fe:a7:5e:b9:41:d5:cf:ff:48:d6:c4:a8:fc:
56:48:4f:ab:52:0a:9e:43:61:b7:b1:6b:86:b5:6a:
da:16:b8:1f:64:8f:b5:9b:7f:e2:a7:11:0e:22:84:
8b:db:33:ba:a6:10:15:29:01:4c:d3:18:b6:fe:91:
db:f5:51:02:ad:d6:e6:91:31:cd:47:62:46:37:f8:
b8:7e:f8:91:37:10:83:de:cc:da:cb:b5:ac:9f:a2:
55:b9:80:23:02:94:55:fc:80:9b:04:89:03:4c:af:
44:10:82:04:6c:41:a2:e9:16:52:cd:79:0f:2a:9c:
28:68:bb:c0:ce:81:2e:30:61:30:41:21:e3:d7:56:
0d:0e:11:a9:e7:d7:a4:aa:38:53:1e:78:d4:69:53:
c5:e9:28:d8:f4:b9:5b:81:3b:83:ca:08:c7:96:8b:
6a:2b:d4:58:13:58:7c:5c:0e:d4:27:64:f9:eb:91:
98:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:10:66:3C:63:BF:E9:5C:B9:FF:7C:3B:6F:8B:1B:A6:A2:17:CF:F0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BE02F3D42AE011F1B9D1B3C4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.96.0/20
45.205.16.0/20
45.207.192.0/19
Signature Algorithm: sha256WithRSAEncryption
73:7f:2c:06:e7:61:2d:a0:6a:6d:da:48:4f:ce:57:cb:b4:40:
a9:6c:de:42:64:79:30:17:37:57:3d:01:06:ad:d6:76:7d:53:
af:41:7d:7d:1a:50:75:16:27:eb:0c:a5:21:ce:73:c7:2b:80:
5d:52:82:a7:86:9b:b8:af:9b:6e:f0:3f:75:e3:c1:36:66:c3:
ab:0e:16:7e:63:3c:55:4b:0f:25:f8:c0:1c:e3:b3:e4:48:1b:
a3:0d:89:23:a4:ed:e7:c8:dd:a2:87:5d:91:b6:e4:05:99:2c:
b0:15:88:4b:98:b2:4b:43:b8:a0:b4:8d:68:3c:39:ff:c5:5b:
a4:15:98:02:2c:7e:8e:b6:95:b6:5b:5c:a6:5e:75:37:12:c9:
8f:7d:b7:f9:fc:fb:73:ed:fd:58:15:5e:99:c1:4f:2e:e6:fd:
1c:17:63:de:fd:68:ea:e7:11:22:0c:a3:6c:f4:02:9b:62:26:
71:c5:9f:1d:31:59:2f:a0:ca:07:57:01:ba:57:f0:1d:d1:43:
fe:79:a1:53:a2:3a:5f:7a:85:76:5f:d8:32:fd:fc:bc:f8:6d:
05:ad:05:16:2a:d7:79:c3:86:48:d0:6b:b2:e1:d8:84:39:f0:
a1:34:7c:74:53:c9:3b:4a:5b:16:88:74:8c:33:cc:c0:e9:30:
62:5e:03:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:53:39 2026 by rpki-client