Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF0D526A07E911F188DE37B8DAE4EC9C.roa
File: CF0D526A07E911F188DE37B8DAE4EC9C.roa (raw, json)
Hash identifier: hP/+36aQisW5VLBSAgqgY+C3Wx8q/w7zH4TPSONKKpQ=
Subject key identifier: 84:55:D9:7F:E0:7E:37:F4:93:A0:68:FB:6B:79:72:DC:4B:BF:B1:15
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019D26
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF0D526A07E911F188DE37B8DAE4EC9C.roa
Signing time: Thu 12 Feb 2026 08:07:01 +0000
ROA not before: Thu 12 Feb 2026 08:06:54 +0000
ROA not after: Wed 06 May 2026 08:06:54 +0000
asID: 149440
IP address blocks: 45.194.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105766 (0x19d26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 12 08:06:54 2026 GMT
Not After : May 6 08:06:54 2026 GMT
Subject: CN=698d8a25-3a62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:99:ab:12:77:c5:45:38:6a:bf:9f:3b:27:4e:
d5:f2:f4:ab:41:09:b5:a8:cd:5e:4c:08:75:16:76:
b6:0a:94:cd:0a:65:6b:0e:51:dd:0d:bb:44:4a:31:
b9:ed:3c:e8:ac:c0:e2:f8:00:27:93:67:1b:bf:ce:
2c:7b:18:31:37:9f:03:3c:e2:b5:be:2b:a4:04:b8:
c6:dc:b8:01:17:c2:e9:da:48:a9:1f:63:66:dc:2b:
34:f9:c9:85:c0:07:bf:48:c1:fc:21:05:6c:31:92:
19:c9:02:d4:f6:91:ba:41:3b:1a:14:fe:0b:7e:2f:
0f:07:9b:42:63:1a:cd:92:ff:8c:be:f2:aa:39:83:
22:ac:85:80:00:18:87:e3:7c:c6:0a:07:da:df:93:
33:a1:84:fc:6d:c5:f6:ca:66:02:11:cb:a8:26:09:
85:8d:ff:50:95:29:6e:c1:13:81:ec:3e:5f:07:3c:
00:75:b0:00:88:68:1d:6c:70:ef:d0:ff:b2:c9:2f:
a1:8e:86:8c:54:de:cd:4b:9a:9a:e6:bd:4d:f1:1b:
68:63:6d:44:e6:2e:a7:74:1e:92:37:80:31:5f:da:
93:ed:b4:96:7d:1d:7f:e7:81:df:e2:e9:aa:e8:e2:
23:5d:ee:6a:c1:6c:68:40:e0:82:5f:c1:d0:3c:17:
c6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:55:D9:7F:E0:7E:37:F4:93:A0:68:FB:6B:79:72:DC:4B:BF:B1:15
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF0D526A07E911F188DE37B8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.27.0/24
Signature Algorithm: sha256WithRSAEncryption
36:1a:82:f1:6d:09:19:1e:54:6f:c8:51:3c:39:fd:3e:03:72:
87:00:bb:f3:0d:f5:d7:a2:98:d1:02:6f:92:c1:70:8a:8a:a9:
9d:2f:ed:74:19:94:47:e7:5c:d6:85:34:50:4d:92:e4:05:61:
06:75:7a:7d:7e:72:be:6d:4d:d0:bc:f7:86:eb:8b:ee:42:bf:
4b:1f:16:e9:5a:6e:c8:6f:d6:d3:37:33:66:b1:1c:1f:7b:ee:
85:3f:b6:c6:9f:7c:8f:eb:93:7e:cd:f5:a1:ee:8f:0f:16:87:
6f:88:a9:21:6b:b7:61:95:f2:4a:ee:57:39:db:34:e9:86:b5:
a0:e8:2f:24:23:3b:43:43:02:55:d7:fd:9b:d6:c1:58:78:42:
7a:01:0d:37:02:54:c7:bf:f9:0e:ac:25:5c:37:20:56:46:49:
d9:b3:eb:f0:c1:4d:8a:ae:4d:86:31:8b:2a:bb:7a:73:6b:b9:
8f:1d:85:87:11:89:f1:8f:2a:ba:97:d5:44:c2:a0:46:5c:69:
04:d1:90:01:c4:89:46:12:a1:84:fc:57:d0:58:a7:42:e7:1b:
5c:d5:1c:73:1a:af:f6:65:d0:91:d9:e2:23:24:10:8f:52:02:
55:30:d3:bc:38:90:9e:09:a1:86:fa:c3:bc:f1:a4:54:ff:cb:
40:cf:b5:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:50:24 2026 by rpki-client