Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF581AFE2AEC11F1944742F3DAE4EC9C.roa
File: CF581AFE2AEC11F1944742F3DAE4EC9C.roa (raw, json)
Hash identifier: JFhNoAIV++qzjY4SSYuvl5la/HcRuM7ZQLRwYhnke0M=
Subject key identifier: 82:E0:D8:D2:F8:3A:D6:C2:64:40:6D:63:BA:B0:69:1B:A1:E3:6E:7D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A898
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF581AFE2AEC11F1944742F3DAE4EC9C.roa
Signing time: Sat 28 Mar 2026 21:26:41 +0000
ROA not before: Sat 28 Mar 2026 21:26:35 +0000
ROA not after: Tue 12 May 2026 21:26:35 +0000
asID: 137899
IP address blocks: 45.207.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108696 (0x1a898)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 28 21:26:35 2026 GMT
Not After : May 12 21:26:35 2026 GMT
Subject: CN=69c84791-023c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:91:10:0a:c6:c3:d9:fc:db:3e:45:b6:1b:b6:
b4:26:e7:fd:68:d1:73:13:69:4a:b2:7c:ec:94:29:
e6:54:97:06:02:19:bb:84:e9:4c:89:a1:bc:cb:7f:
80:73:81:9b:48:3f:b1:5b:54:be:42:98:b7:00:57:
3f:ab:af:0d:d2:95:7e:6e:95:82:b3:2d:2b:55:38:
23:69:1a:eb:7f:a5:2f:a3:75:6c:73:48:23:d9:79:
9a:43:62:23:bf:61:03:be:d8:90:25:c1:b6:e5:6d:
ab:51:38:f5:ee:41:62:74:1d:90:53:e2:f3:0e:f4:
66:c2:55:7b:36:11:1b:1e:e4:b4:48:9f:fd:c9:9a:
c5:d5:08:60:e1:da:f7:7c:3d:48:66:3f:f7:83:0a:
03:ec:84:de:69:a1:71:b8:45:6f:56:14:90:6e:d8:
df:b6:30:42:c1:d3:ac:6f:da:ba:a7:ad:9b:b7:1d:
28:05:02:da:c5:62:18:77:a5:20:a9:eb:b3:d3:9d:
4c:59:5c:60:3d:2e:45:95:df:51:9d:b6:3a:07:c4:
95:8c:bf:38:52:f9:42:25:87:d6:74:2d:88:a3:e7:
3f:11:e9:4b:92:f8:87:79:e0:85:c3:20:c0:e1:9c:
34:91:cb:f2:61:d0:a0:55:1e:28:f5:32:f4:ee:a4:
b0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:E0:D8:D2:F8:3A:D6:C2:64:40:6D:63:BA:B0:69:1B:A1:E3:6E:7D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF581AFE2AEC11F1944742F3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.192.0/19
Signature Algorithm: sha256WithRSAEncryption
38:12:bd:fc:6a:a3:09:0e:4c:be:24:77:1c:5b:e2:b5:08:e5:
d4:16:cb:16:d8:ef:1e:9b:93:49:fb:18:14:98:57:a7:38:a8:
b6:51:87:f1:17:60:e2:c2:e2:7e:17:2b:9c:17:2f:7a:0e:76:
3f:da:18:80:48:e2:71:f6:71:fd:4d:1f:42:d2:7a:d4:ef:45:
76:c7:16:33:60:30:7b:69:c2:2d:47:de:1a:f7:c9:e1:47:23:
70:df:3f:f6:9d:18:9f:6b:b7:93:ee:b6:df:db:07:e1:ae:5f:
1c:28:d4:62:8d:25:ec:fc:fd:0b:4a:59:f8:dd:55:2c:a4:e6:
f8:57:4d:08:5b:6a:6b:6a:ab:a3:6b:a1:ff:48:52:83:f8:33:
d3:84:53:2a:6d:7e:d9:b3:7a:b2:87:f4:99:d1:4f:f9:8a:0f:
e3:42:96:38:94:81:f8:99:ea:a4:43:5d:a9:70:51:e4:ea:b1:
8a:9e:ec:bd:da:c3:6d:91:a5:65:ed:4d:4a:cc:83:99:30:52:
12:70:d0:ef:c1:fb:45:5b:79:d9:24:46:df:0b:f2:93:7e:43:
15:2f:09:4f:e9:56:c8:c4:3b:e8:27:20:cc:8c:dc:bd:4d:92:
cf:2b:07:85:f3:f2:b7:f6:94:e2:8a:44:4e:a6:84:c8:5c:f4:
e5:5b:29:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:54:23 2026 by rpki-client