Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C96591A2135511F1AA423DD6DAE4EC9C.roa
File: C96591A2135511F1AA423DD6DAE4EC9C.roa (raw, json)
Hash identifier: 6R5Qy4vhrMuncIRKczhuobTbokqC1av8o/hBXNdrPLQ=
Subject key identifier: 17:62:3B:25:B2:61:DF:0A:CB:EB:15:4A:53:7F:17:67:29:F0:64:DD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A0EB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C96591A2135511F1AA423DD6DAE4EC9C.roa
Signing time: Thu 26 Feb 2026 20:57:40 +0000
ROA not before: Thu 26 Feb 2026 20:57:35 +0000
ROA not after: Mon 30 Mar 2026 20:57:35 +0000
asID: 9304
IP address blocks: 45.198.16.0/24 maxlen: 24
45.198.17.0/24 maxlen: 24
45.198.18.0/24 maxlen: 24
45.204.48.0/24 maxlen: 24
45.204.49.0/24 maxlen: 24
45.204.50.0/24 maxlen: 24
45.204.51.0/24 maxlen: 24
45.204.52.0/24 maxlen: 24
45.204.53.0/24 maxlen: 24
45.204.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106731 (0x1a0eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 26 20:57:35 2026 GMT
Not After : Mar 30 20:57:35 2026 GMT
Subject: CN=69a0b3c4-d221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1c:4d:e0:06:33:dd:ca:f3:5b:83:68:5f:f1:
9d:11:bf:cc:cc:ca:16:9a:89:de:a5:a4:ec:8b:6b:
28:c5:7a:c4:0e:6d:dc:73:6c:d1:b2:7e:d2:89:5b:
15:1f:3c:04:74:a9:a1:ca:db:62:1d:33:72:9c:11:
6c:15:bf:65:eb:d8:01:33:26:6c:ab:ea:c3:ce:aa:
7e:63:03:0a:80:72:3c:c4:b9:36:f4:8a:b7:ef:30:
f4:e7:21:e5:fa:b4:e5:4d:39:85:08:ac:20:aa:39:
54:c6:72:87:9e:c5:3e:6c:74:3d:7e:b2:a6:d9:41:
17:34:8e:11:5d:54:19:20:0a:a3:c8:20:bd:f8:89:
43:36:80:34:c8:31:a6:83:dc:7d:92:7c:b8:77:f9:
20:1e:48:ef:98:a3:b4:da:0c:52:3d:ce:8d:3b:79:
80:dc:9c:81:81:c7:45:53:88:c0:93:53:b6:c5:3e:
77:e7:ee:14:c0:63:ad:00:37:2b:83:81:8d:0c:e1:
c7:de:bf:85:21:5d:c1:73:27:23:06:25:e8:28:0e:
6c:a3:8b:5e:be:7a:8a:fe:ca:e2:e3:36:59:dc:21:
05:6d:c6:ee:eb:cf:0b:bf:f2:4e:56:76:e4:99:9a:
a7:1a:f6:01:71:a2:eb:25:cc:1c:fe:81:8e:5d:9c:
91:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:62:3B:25:B2:61:DF:0A:CB:EB:15:4A:53:7F:17:67:29:F0:64:DD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C96591A2135511F1AA423DD6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.16.0-45.198.18.255
45.204.48.0-45.204.53.255
45.204.181.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:f0:87:1a:33:83:c9:70:39:3f:91:fc:ec:5b:3f:3e:e2:65:
f6:a9:60:26:8a:79:b6:2f:eb:4a:e8:e4:f4:2b:c8:15:85:bf:
22:0e:3f:25:35:0a:53:7a:10:f2:99:72:69:56:61:82:84:97:
ab:0c:59:e6:4c:51:c1:93:8b:b3:11:f7:4d:bc:ab:03:a5:b2:
31:77:e6:60:6e:a6:23:61:33:cf:f9:01:88:b3:10:db:c3:a0:
54:3f:32:b4:38:bc:55:2f:49:da:11:e2:f3:96:9b:13:af:21:
1e:a1:f2:08:dc:8d:a1:79:b1:54:f0:0f:44:0d:a4:97:f2:f0:
cc:93:77:40:ae:43:ea:1d:4d:23:b4:85:4e:2e:98:e9:27:7e:
dc:8b:9d:bc:82:d9:2a:04:c3:23:a8:7c:6d:6b:04:ce:cf:7c:
60:70:ef:fc:b8:6b:8b:1c:e8:38:69:b7:e9:14:af:b4:29:75:
f1:8f:d8:52:92:41:7f:13:c2:e5:9d:00:58:13:ad:6b:0a:6f:
19:4e:5b:0c:ec:93:bb:45:3c:78:5c:a4:f4:4b:23:8b:4b:fc:
f8:67:a4:c5:d4:7b:41:ca:f0:da:10:1e:3e:40:2c:07:61:8e:
31:fc:ca:c4:d0:87:dd:f6:fa:28:04:31:8f:27:c4:c1:e2:92:
c0:e0:80:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:43:32 2026 by rpki-client