Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C8372182000F11F1808D5FF6DAE4EC9C.roa
File: C8372182000F11F1808D5FF6DAE4EC9C.roa (raw, json)
Hash identifier: Wnyi7ubrLbtn02KIiHiNRSr/k29MFBdEKRzx1O7nkew=
Subject key identifier: D0:3E:B5:3B:1E:5B:2B:EA:B2:32:EA:9C:10:2F:2D:A0:80:3A:18:77
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019B7D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C8372182000F11F1808D5FF6DAE4EC9C.roa
Signing time: Mon 02 Feb 2026 08:18:41 +0000
ROA not before: Mon 02 Feb 2026 08:18:36 +0000
ROA not after: Tue 10 Mar 2026 08:18:36 +0000
asID: 401366
IP address blocks: 45.207.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105341 (0x19b7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 2 08:18:36 2026 GMT
Not After : Mar 10 08:18:36 2026 GMT
Subject: CN=69805de1-9e56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:64:46:0e:00:58:b2:7e:41:f1:bd:33:df:6b:
ff:eb:f4:24:02:f1:0a:70:5f:f3:67:b0:b6:ae:48:
54:3f:13:27:55:fa:05:dd:0b:8c:fd:16:73:d1:2f:
10:e6:ff:f9:b9:4e:23:fd:1c:6f:dc:79:b0:b7:78:
c6:d9:01:e4:9d:e8:d0:e6:af:c3:32:58:c8:78:f3:
32:ad:24:9d:2f:f9:04:5e:bb:8e:50:81:0b:25:e3:
ce:a8:c8:d9:f4:69:cf:70:28:77:db:71:85:df:a1:
51:10:2a:9c:cc:8e:02:c6:5f:89:c1:9a:60:ab:35:
8d:14:37:26:a8:a2:93:38:c4:f2:3c:a2:57:1e:7c:
33:67:57:a9:56:57:94:cb:3a:87:81:d6:a2:e8:e1:
da:af:13:8a:4b:9e:6c:ff:0a:0c:81:84:79:0b:d3:
34:14:1d:07:1e:c6:02:0a:fb:bc:3f:f8:be:0d:bb:
6f:e3:7f:e9:d0:da:ad:32:2e:35:75:5d:5f:ee:6b:
24:19:c1:7a:97:da:b9:d7:7d:dd:55:7b:c5:dd:3c:
32:25:ae:fe:f6:5c:73:65:d9:03:95:99:f2:93:b1:
41:a0:94:cc:a5:a7:e3:6d:5b:7c:b2:38:99:17:98:
a6:da:01:ac:bc:7e:8a:d4:7d:e4:4e:4c:16:b6:72:
1c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:3E:B5:3B:1E:5B:2B:EA:B2:32:EA:9C:10:2F:2D:A0:80:3A:18:77
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C8372182000F11F1808D5FF6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.46.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:59:ab:88:dc:da:ab:ca:a1:ca:14:16:a2:0b:72:de:41:45:
ff:39:34:7c:5a:a3:4a:62:00:d0:4a:2c:40:b5:f3:9e:16:8b:
d8:1c:c0:35:68:3e:91:bd:79:b5:12:80:6f:23:39:ef:b7:0f:
93:23:59:0c:17:34:a5:8c:38:b4:f9:30:85:7b:82:26:4e:62:
1f:9c:be:6b:67:4d:ae:39:74:a4:1d:bf:ba:57:2b:45:f1:ff:
c9:9a:3e:09:57:84:b8:bb:90:0c:bc:43:be:1c:3a:f3:18:f8:
5c:63:e2:83:ad:da:7f:70:0b:22:1e:68:0c:55:03:a3:19:90:
2e:f7:08:e4:44:e3:d1:53:06:50:9a:f2:c8:3b:1f:36:f7:be:
93:d1:58:bb:a0:a4:9b:b7:f4:d2:c2:5b:07:27:07:40:3a:fb:
8e:4b:bc:06:a6:00:b1:50:c9:3d:db:3b:e5:35:31:73:bf:92:
13:4d:55:f7:ce:af:e2:9a:26:5c:6a:95:35:7f:a9:e6:8d:e6:
e8:c2:89:9a:50:31:9d:d0:05:91:b3:15:4a:10:c1:29:59:e5:
4a:ba:30:be:4c:33:cc:c0:3c:89:46:d1:e0:5a:2a:0e:f8:4b:
08:fb:83:ea:50:a0:77:c4:53:ad:e6:ee:59:df:eb:40:29:af:
4e:e6:3b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:18:50 2026 by rpki-client