Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C0A59260032E11F1B47CF1A6DAE4EC9C.roa
File: C0A59260032E11F1B47CF1A6DAE4EC9C.roa (raw, json)
Hash identifier: g2ccLpyxCZgDp9l9q3oC74GIInN5/unkbavJvLAov6M=
Subject key identifier: 7B:26:4F:C6:BC:C1:0B:94:A5:E9:91:B9:3F:3D:36:17:F3:64:27:26
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019BF7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C0A59260032E11F1B47CF1A6DAE4EC9C.roa
Signing time: Fri 06 Feb 2026 07:37:57 +0000
ROA not before: Fri 06 Feb 2026 07:37:52 +0000
ROA not after: Tue 10 Mar 2026 07:37:52 +0000
asID: 38136
IP address blocks: 45.196.98.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105463 (0x19bf7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 6 07:37:52 2026 GMT
Not After : Mar 10 07:37:52 2026 GMT
Subject: CN=69859a55-0293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c9:30:64:9c:14:a3:6e:96:c9:c3:f0:e8:9f:
a6:af:02:b3:29:e0:2f:bc:71:8f:bb:2b:63:f8:04:
59:b9:7f:12:8f:fb:d0:b6:eb:1d:1b:9f:a1:93:75:
be:52:52:08:da:c1:41:8f:e7:17:06:b7:7e:64:9a:
c0:69:9d:96:9c:e7:88:f4:9c:bc:8c:d0:70:55:c0:
e2:58:ee:2f:aa:4f:95:0a:fe:d0:e6:d0:a6:4a:26:
ef:9e:78:85:49:cb:f4:db:ab:19:05:f0:40:6d:8a:
06:ba:1a:ce:61:fa:f4:47:ad:b9:22:ac:17:93:99:
b1:0c:25:b1:dd:ca:cf:8e:a4:a3:d9:b1:7e:91:74:
72:e2:11:5d:9e:0b:b1:77:58:7e:1f:11:cb:cf:c6:
31:94:8c:af:3f:5c:b6:0d:7e:f3:3c:ec:2c:c8:f5:
47:03:61:85:21:a7:ab:39:62:8d:fc:27:17:2a:aa:
79:d7:7c:f3:d2:c8:47:cc:7b:47:5f:e6:11:18:3e:
9e:07:1f:89:24:b7:3b:95:52:3f:a5:2b:bf:58:18:
bc:8c:6f:f1:70:9b:c2:7d:38:86:09:c3:c9:f0:fb:
82:ea:e5:54:8c:8a:91:b1:92:52:37:23:d7:7d:61:
84:0c:99:f3:61:37:73:1d:f9:23:41:9c:0c:5f:22:
43:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:26:4F:C6:BC:C1:0B:94:A5:E9:91:B9:3F:3D:36:17:F3:64:27:26
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C0A59260032E11F1B47CF1A6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.98.0/23
Signature Algorithm: sha256WithRSAEncryption
67:56:39:e9:5c:ae:d5:5f:f0:72:bf:7a:ed:c4:19:78:b0:63:
4b:62:e0:7a:24:b1:cb:a9:e9:96:a7:c0:6a:8d:63:44:4a:02:
ae:53:7b:d9:b9:44:46:ea:67:00:33:a2:3b:1e:25:3d:fb:1b:
27:4d:f5:21:f8:5a:25:a4:8e:07:5e:b0:81:d3:88:c8:4f:e0:
25:d4:9e:8f:63:87:18:0a:87:45:55:1d:c2:a4:7a:8e:c9:93:
3c:b6:53:6c:3e:d4:70:41:43:6c:e8:14:79:41:2d:79:c5:d2:
34:a6:19:f5:22:d1:e8:d1:e9:a6:6d:09:13:1f:ec:8c:3a:74:
f8:67:5d:4d:2f:3b:6e:ff:ae:8c:7f:33:f1:54:76:31:15:fe:
05:c2:15:b1:a2:62:6c:16:e2:0c:6e:3a:ef:07:c1:c9:a9:c4:
36:1a:36:63:6e:06:06:01:3d:33:f8:6d:ed:ef:ff:6b:13:7c:
d2:ae:43:a2:70:2c:6b:1e:29:54:c9:49:c9:25:4e:33:5a:7e:
99:ef:63:30:f0:d2:68:59:c3:42:11:46:f9:e5:55:de:34:c4:
48:2a:71:f4:0c:9e:ed:f0:7e:3e:49:a6:88:06:6c:36:38:4a:
f9:cb:67:53:cb:9a:b6:a1:99:be:5c:a5:ab:bf:74:e2:ca:a0:
90:89:21:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:21:59 2026 by rpki-client