Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C17A0280311D11F1BF16D1D6DAE4EC9C.roa
File: C17A0280311D11F1BF16D1D6DAE4EC9C.roa (raw, json)
Hash identifier: BguZyJ2wlvXxc3LJHctUbu8Ewg0pQQcWnDtQAN0uCCw=
Subject key identifier: D7:69:61:A6:80:2A:D9:E1:0E:45:81:E8:98:79:07:60:B9:AB:3A:4F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AA4C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C17A0280311D11F1BF16D1D6DAE4EC9C.roa
Signing time: Sun 05 Apr 2026 18:32:10 +0000
ROA not before: Sun 05 Apr 2026 18:32:05 +0000
ROA not after: Tue 05 May 2026 18:32:05 +0000
asID: 213800
IP address blocks: 45.207.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109132 (0x1aa4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 5 18:32:05 2026 GMT
Not After : May 5 18:32:05 2026 GMT
Subject: CN=69d2aaaa-a2fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:df:69:fc:96:34:4f:28:c3:f1:5f:e2:7d:8a:
82:c0:74:c3:64:7a:89:cd:b3:05:05:79:23:34:b5:
66:e2:cd:78:bb:3e:da:ef:1d:c3:e4:a3:df:27:f3:
e7:83:42:5a:9f:a3:93:1d:72:94:69:1b:e8:cb:36:
4a:d2:98:a8:58:2e:13:b1:2c:3b:1e:56:d4:b3:1b:
43:00:8e:6e:af:18:80:c1:b4:32:15:c8:35:bd:6d:
a4:7d:5a:78:21:b3:da:c2:29:2f:70:4e:16:da:53:
4e:9a:4a:cc:29:87:a2:92:36:37:6e:15:81:0c:e8:
2d:2e:8e:e2:aa:24:85:30:2b:86:f6:b4:97:96:68:
9b:c7:41:0d:36:eb:d1:5d:0e:38:88:43:24:0e:ff:
62:fa:b1:24:c6:2f:1d:39:b6:5d:21:be:a5:cd:42:
f6:81:63:a6:95:63:90:01:6a:86:df:80:7d:52:fb:
e0:db:17:db:00:61:b7:d0:f8:79:27:db:68:0e:1d:
1e:d5:e3:7d:1c:cd:86:55:77:b2:0c:29:2e:9a:cc:
cf:44:04:0a:e5:9d:5b:29:d3:3f:c8:a8:fc:94:53:
45:cf:cb:fb:a6:6a:62:a9:10:65:5c:58:bb:11:f1:
95:04:6e:dc:c2:68:6c:d7:b7:99:64:42:56:65:d6:
94:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:69:61:A6:80:2A:D9:E1:0E:45:81:E8:98:79:07:60:B9:AB:3A:4F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C17A0280311D11F1BF16D1D6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.58.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:e1:ed:11:5f:cf:b0:23:e9:e8:d4:38:fd:83:67:af:1c:d5:
bf:36:1c:7e:1f:ec:e3:b9:31:fc:b7:7c:4c:8c:32:c2:bb:73:
5b:44:6b:01:32:35:c1:1d:d1:10:30:12:21:58:c4:9f:77:44:
45:fe:a0:ae:47:e3:9f:b2:a2:ec:3f:bd:f1:35:5e:ef:5b:7b:
27:65:14:f5:f1:72:c4:82:5b:db:64:d3:f9:d8:1d:9d:fa:c4:
5c:91:43:f0:90:82:2b:a5:74:47:a7:e4:9d:fb:62:ea:53:62:
41:af:d9:94:d4:0f:a1:b5:fb:60:9e:56:88:f9:c1:ed:e0:b9:
5d:c7:61:11:56:49:b1:fc:be:70:57:75:4e:81:4d:7e:41:76:
8f:f7:29:0c:71:08:87:f6:4a:77:1b:88:ef:7e:9a:8e:e6:b1:
01:54:fe:3b:b0:67:98:20:03:ae:eb:60:a8:b9:e7:c4:db:1b:
24:d5:1c:da:79:8a:77:c3:42:d5:2b:bf:aa:30:33:6b:53:8e:
85:bb:b4:77:a9:6e:6b:6a:c2:12:d2:06:0d:97:e9:08:e4:d8:
b6:a3:e6:d6:18:b4:ef:f8:3e:e0:ae:17:a2:e2:1d:50:0a:f2:
e7:87:c6:ae:eb:3f:ad:d5:3c:af:c0:6c:22:61:7f:cc:19:4a:
42:72:e7:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:01:31 2026 by rpki-client