Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C9EC6632071B11F1B093A5C5DAE4EC9C.roa
File: C9EC6632071B11F1B093A5C5DAE4EC9C.roa (raw, json)
Hash identifier: O2/EdOTgI9LAf/HnnHEW6pb0a/pEZ8CEcJVUnio5Wik=
Subject key identifier: 1C:B4:B5:EA:82:42:5F:73:49:1B:7D:E7:20:35:E2:97:BF:AD:36:08
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019CD9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C9EC6632071B11F1B093A5C5DAE4EC9C.roa
Signing time: Wed 11 Feb 2026 07:32:16 +0000
ROA not before: Wed 11 Feb 2026 07:32:10 +0000
ROA not after: Tue 17 Mar 2026 07:32:10 +0000
asID: 398993
IP address blocks: 45.200.192.0/18 maxlen: 24
45.200.192.0/19 maxlen: 24
45.200.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105689 (0x19cd9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 11 07:32:10 2026 GMT
Not After : Mar 17 07:32:10 2026 GMT
Subject: CN=698c3080-1663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:7b:d8:39:a9:7c:49:f2:72:72:35:5e:c6:46:
4e:c5:b3:ab:ff:1f:b4:70:e8:95:b8:54:3f:7a:d9:
a0:3b:8d:9d:56:6a:bd:a8:8f:04:4e:21:cf:8f:5a:
74:de:01:d3:eb:37:40:94:cd:26:1d:0c:49:f0:4e:
3f:67:cd:fc:b2:c8:b0:70:31:52:55:88:6e:b7:fa:
5b:37:ca:d4:fa:39:89:de:53:bb:1d:18:74:2e:51:
54:c6:5d:79:a1:4e:b1:d6:5b:9b:a6:ff:d4:14:8d:
3e:66:ed:b9:cf:f5:bb:d1:59:da:f2:c9:eb:be:8c:
39:0b:42:de:21:1e:33:68:ee:08:96:85:d4:cb:58:
1f:f2:92:bc:a4:66:ab:90:91:bb:b4:94:fe:4e:69:
3c:53:11:6d:45:c6:50:01:16:37:2d:77:63:71:7d:
54:0b:4f:92:e8:ad:c3:71:99:46:c3:65:dd:e5:c5:
f9:6b:90:04:83:54:3e:6f:85:0f:43:c6:07:a6:de:
99:74:af:fd:0e:a1:2f:3b:05:f4:ae:b1:fd:fa:e6:
87:ed:22:32:8b:d2:0a:d8:ee:f1:8f:44:b3:e6:7e:
db:70:7f:54:86:e0:8b:d4:f0:a7:c7:81:82:b9:41:
09:ee:8b:d8:13:92:cd:3b:59:49:07:c6:84:2b:1c:
63:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:B4:B5:EA:82:42:5F:73:49:1B:7D:E7:20:35:E2:97:BF:AD:36:08
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C9EC6632071B11F1B093A5C5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.192.0/18
Signature Algorithm: sha256WithRSAEncryption
67:25:b6:bf:38:70:f6:d1:d5:4b:b8:3d:e6:5f:dc:ac:53:33:
75:fa:2f:67:2b:d4:c3:51:66:64:89:c9:b0:de:cb:b4:08:37:
a7:30:00:ce:d0:84:30:68:cf:61:c6:65:d9:15:dc:9f:cc:0e:
1b:c6:b6:0c:fb:e2:59:03:00:d7:8f:e8:78:fb:23:68:a7:17:
f2:3e:37:8c:ce:3a:c2:e5:d5:16:b9:50:b6:22:76:11:43:d4:
a5:97:3e:12:f3:9a:fe:6a:63:d3:6f:b8:e9:da:b8:a7:00:ee:
f8:bc:1d:f1:b4:56:ff:a5:1b:32:84:5d:89:37:24:7f:a9:67:
39:da:3c:23:6a:4d:3b:91:0e:33:18:a4:64:b8:fe:38:a2:0e:
d1:e6:5f:fc:f7:46:7c:05:51:bc:8d:03:b3:01:68:9b:49:0c:
26:31:43:c9:63:33:39:cb:83:0f:d4:d7:60:85:4d:0a:53:9e:
aa:5c:d0:14:23:b3:e2:5a:81:91:7e:ed:84:9b:43:d3:34:32:
6b:6a:06:3e:ef:ee:72:ba:07:90:a7:ba:a8:3e:0d:0c:b0:40:
e8:3a:b9:de:ee:8b:f4:ad:ff:d3:a3:b3:50:c2:41:89:aa:2c:
86:be:8a:ba:99:0d:56:65:63:c1:6c:df:7d:60:df:6a:c6:07:
ca:40:f6:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:16:51 2026 by rpki-client