Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D2CB8CD0149811F1A297F1A1DAE4EC9C.roa
File: D2CB8CD0149811F1A297F1A1DAE4EC9C.roa (raw, json)
Hash identifier: wBN/AAmW3xb2SvOVFLvA1i5xNoyHiNAD7+qDO7DKEwk=
Subject key identifier: 61:B4:7D:AD:52:DA:31:42:72:94:91:B5:B6:C0:1F:48:07:27:B2:39
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A167
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D2CB8CD0149811F1A297F1A1DAE4EC9C.roa
Signing time: Sat 28 Feb 2026 11:30:03 +0000
ROA not before: Sat 28 Feb 2026 11:29:59 +0000
ROA not after: Fri 10 Apr 2026 11:29:59 +0000
asID: 215691
IP address blocks: 45.198.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106855 (0x1a167)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 28 11:29:59 2026 GMT
Not After : Apr 10 11:29:59 2026 GMT
Subject: CN=69a2d1bb-aa44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d1:c8:25:57:4f:9b:26:a2:41:65:6c:87:50:
3d:2c:eb:14:64:be:ab:94:39:3c:61:ae:6c:b5:42:
42:e3:20:c5:bb:b9:03:de:83:b9:ca:54:80:3c:b2:
f9:ef:7b:1d:ac:39:9b:12:07:31:2d:59:67:d7:36:
1e:e8:9b:7d:5e:f9:bb:4a:73:f6:f3:c6:d5:aa:b2:
a6:28:63:9b:ab:da:da:40:24:ae:36:a3:7c:a5:83:
fe:4f:32:68:73:cd:8f:0a:8a:8f:05:80:7c:2a:2b:
ca:3b:97:d0:40:ee:6b:f0:5e:51:a4:ee:1e:c3:56:
e0:a7:6b:de:03:72:39:11:ad:0b:c2:38:5d:64:f4:
4f:7a:fe:3e:1b:0b:4d:42:c2:6a:6d:5b:8b:8e:eb:
3d:36:bb:a3:fa:20:ad:68:17:41:67:dc:bc:ae:ce:
78:89:09:2a:c2:3c:b3:02:e5:a4:00:d4:33:0b:a5:
6b:74:ef:95:2d:e5:1c:89:c3:b5:91:fe:b7:b1:69:
dc:e4:8b:47:cb:81:15:75:23:17:47:f5:30:bd:e5:
0d:7b:63:de:a5:d7:b7:20:df:c4:e3:52:d5:91:64:
12:d1:9d:1d:3a:90:76:68:ad:9f:20:6b:dc:bd:fd:
c8:fb:21:1a:4e:d4:8c:d7:9e:86:ba:4b:9e:c3:d3:
4b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:B4:7D:AD:52:DA:31:42:72:94:91:B5:B6:C0:1F:48:07:27:B2:39
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D2CB8CD0149811F1A297F1A1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.55.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:06:38:69:8f:de:93:68:34:cb:97:31:93:ec:b0:2d:7d:31:
2a:79:a6:d3:68:fa:3e:2b:c4:0f:24:b4:ce:cd:32:b6:c1:50:
62:e9:03:da:b9:67:da:2f:5f:9c:a2:36:f3:fb:51:35:9a:36:
52:a6:9e:e8:f2:95:e7:a4:7f:fa:ee:dc:88:56:d8:d3:e8:b1:
19:44:51:eb:f9:c6:14:c7:44:87:79:26:d1:b4:b2:17:d2:62:
0b:d7:88:71:fd:be:b3:61:dc:fe:26:8f:64:22:36:b2:ac:19:
f9:a4:93:64:07:09:fd:cc:ea:e8:d1:ab:e8:e7:d0:51:9d:60:
4c:ca:32:1b:c7:05:7d:12:d3:7b:55:4b:1e:2f:f6:f4:dd:f2:
38:b2:ec:7f:f4:25:08:0d:8e:ff:24:44:5b:a4:f7:1d:c3:e4:
fd:4a:ef:4f:73:c0:18:04:f4:a9:d4:f8:9c:dd:58:a6:a4:22:
22:be:29:5b:2d:fe:41:76:46:ea:d6:e1:7e:58:d6:6b:85:6f:
53:51:28:b9:39:5c:ae:ef:48:2a:df:25:be:32:e0:db:ea:f1:
06:a6:72:b8:f4:88:0e:ed:53:59:f5:5c:13:92:5d:09:77:7f:
3b:22:51:f6:55:05:d2:57:79:32:fc:b3:cf:b5:33:f4:37:9d:
1f:d3:ab:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:17:11 2026 by rpki-client