Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D1EDFE9E121B11F1951749E3DAE4EC9C.roa
File: D1EDFE9E121B11F1951749E3DAE4EC9C.roa (raw, json)
Hash identifier: /74AePOp1pRnSyg5NbORZN+A5BCnf8Hkp6ebc1peCfA=
Subject key identifier: 42:D4:74:10:06:97:4E:19:FE:97:B9:A4:5B:3B:95:8D:9E:CA:64:89
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A05E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D1EDFE9E121B11F1951749E3DAE4EC9C.roa
Signing time: Wed 25 Feb 2026 07:30:12 +0000
ROA not before: Wed 25 Feb 2026 07:30:08 +0000
ROA not after: Sat 28 Mar 2026 07:30:08 +0000
asID: 152711
IP address blocks: 45.202.209.0/24 maxlen: 24
45.202.210.0/24 maxlen: 24
45.202.211.0/24 maxlen: 24
45.202.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106590 (0x1a05e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 25 07:30:08 2026 GMT
Not After : Mar 28 07:30:08 2026 GMT
Subject: CN=699ea504-988d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:16:47:89:12:e0:40:73:55:8a:e5:2d:1c:5f:
9e:ee:2b:09:12:72:67:c6:6f:b2:de:b6:90:5f:af:
a3:a2:2f:83:e9:05:1d:1b:01:2b:76:65:7a:2c:e9:
41:78:c9:6d:d4:24:ca:6f:76:93:5a:2a:a2:66:00:
56:0e:54:d7:0b:62:46:c3:cf:34:a1:75:f5:c9:82:
a4:da:68:c7:90:91:1a:96:6c:bb:ca:fc:f2:bc:42:
0e:bf:d4:31:9f:0c:a4:6c:c5:f4:86:ef:74:ea:cd:
1a:58:0d:f5:37:79:dd:d1:25:51:b9:3c:30:40:7a:
a8:d0:31:11:6f:5c:93:17:69:77:aa:92:8b:3c:d7:
29:70:0a:4a:e0:9e:90:cb:fc:5f:3f:dd:66:ae:22:
6c:bc:19:3e:8b:6b:39:ea:76:dd:47:c8:30:24:84:
c9:05:87:64:d9:dc:bb:03:f7:97:c2:94:59:b4:25:
8c:d8:ea:d5:e0:b6:23:5a:0f:84:ff:bf:95:9a:3a:
90:67:76:79:aa:de:79:31:bf:95:d6:97:98:6b:52:
3d:01:a2:c4:27:5e:7e:c3:06:fb:2c:a5:1e:8d:8d:
a3:44:f8:70:33:73:98:44:72:95:16:3f:fa:74:bd:
27:10:2f:dd:3d:79:83:98:75:61:de:e0:d9:6a:e2:
3c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:D4:74:10:06:97:4E:19:FE:97:B9:A4:5B:3B:95:8D:9E:CA:64:89
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D1EDFE9E121B11F1951749E3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.209.0-45.202.212.255
Signature Algorithm: sha256WithRSAEncryption
2a:be:04:35:f9:a0:f6:ae:b2:19:ee:3d:6c:89:c4:91:a6:01:
f7:98:3e:7a:02:1a:aa:00:6c:b8:b3:f3:fc:84:99:26:0e:97:
70:5f:b4:17:49:96:64:e9:fa:eb:19:8c:66:c9:28:7a:d1:d2:
fd:56:6c:b5:81:f3:a5:cb:97:42:6f:85:71:22:9a:a6:ea:ad:
94:f7:e5:11:64:42:93:0c:c1:2e:5a:78:94:52:35:c2:3b:a2:
cd:fa:f5:f3:d3:08:eb:1a:7a:80:ed:c6:46:31:0c:f2:16:98:
ce:5f:db:5c:39:88:f8:e1:59:e5:01:dc:64:86:0a:11:b5:a9:
b1:70:36:2a:3e:cd:dd:5c:fb:d2:21:34:ad:0d:ba:b7:df:79:
42:95:e1:0d:55:18:fe:3e:65:a1:c8:d5:76:8f:39:06:99:06:
18:ee:a6:54:d1:e9:6d:29:e3:75:d8:5b:19:cf:ba:a2:12:e1:
6d:70:57:12:b1:dc:cb:15:1b:62:f3:af:ea:d9:fc:81:29:e4:
aa:18:a8:5a:5c:20:21:8f:47:ff:c1:3e:0d:bf:5b:eb:0e:2d:
06:1c:b4:87:89:32:65:c5:6d:bc:71:20:26:c0:50:9f:0b:b1:
e3:7d:4b:8e:ff:b9:93:0a:e6:e6:bd:ad:48:e2:f6:08:cc:58:
e2:5b:c1:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:19:35 2026 by rpki-client