Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D587504E327A11F184D46DC9DAE4EC9C.roa
File: D587504E327A11F184D46DC9DAE4EC9C.roa (raw, json)
Hash identifier: qWsEun1zhWDEb6u3uqpt9UuWy4K7C10q+AHtKvdNyoE=
Subject key identifier: 1B:F0:3C:8F:F3:94:C4:78:9C:3E:99:9D:B3:DC:FA:2C:29:EB:5B:0C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AAB9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D587504E327A11F184D46DC9DAE4EC9C.roa
Signing time: Tue 07 Apr 2026 12:10:58 +0000
ROA not before: Tue 07 Apr 2026 12:10:53 +0000
ROA not after: Mon 15 Mar 2027 12:10:53 +0000
asID: 132839
IP address blocks: 45.207.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109241 (0x1aab9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 7 12:10:53 2026 GMT
Not After : Mar 15 12:10:53 2027 GMT
Subject: CN=69d4f452-da94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0b:8a:8c:a7:74:8f:79:dc:d1:48:6d:41:b5:
af:31:7f:56:1c:cd:0f:bf:73:e6:cb:36:7b:45:39:
00:32:50:38:96:75:b4:d3:be:ac:0d:bf:04:f7:57:
c2:7c:f4:82:d3:9f:aa:bc:69:fb:98:7d:bb:3a:45:
93:2c:5f:f1:83:83:37:9a:33:23:7f:25:44:ef:f3:
77:13:59:88:d4:aa:d2:38:a6:9d:8e:ef:8b:86:fc:
b0:a6:56:21:66:9b:51:fa:48:42:20:e2:6f:2d:20:
9c:d1:e7:b5:5b:73:50:39:91:db:9a:4b:0b:2b:8a:
cf:f7:7e:d7:7f:25:81:f5:3a:9c:68:40:c1:2a:3c:
8d:76:5e:85:fc:7b:6e:c9:91:d5:17:13:61:f4:ae:
aa:3f:cd:a5:fa:b8:95:b1:c4:2a:15:48:ae:1c:95:
48:f0:e0:62:f5:53:56:38:8e:f4:87:79:cb:c7:73:
c9:59:a8:1e:9d:85:81:a6:6e:b9:ed:15:8e:5f:8c:
b5:cd:d5:11:9a:5e:1e:ec:24:b9:23:26:03:4b:14:
2e:28:be:ed:52:7c:23:86:49:22:b5:35:c0:c8:e0:
bf:84:ad:f9:ec:ac:c7:f2:73:d0:f9:26:4a:81:3a:
39:27:1e:2a:db:84:db:62:62:06:12:7d:8e:ae:f8:
20:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F0:3C:8F:F3:94:C4:78:9C:3E:99:9D:B3:DC:FA:2C:29:EB:5B:0C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D587504E327A11F184D46DC9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.7.0/24
Signature Algorithm: sha256WithRSAEncryption
32:16:66:02:93:b3:0a:ed:c4:87:f0:b9:72:75:16:6b:34:24:
75:9f:ad:d5:c6:30:9b:c3:d7:8a:5d:3f:24:de:80:62:b3:a7:
8e:13:8d:2c:46:7e:e1:c0:0e:49:93:70:81:8d:c3:c5:b9:04:
9b:83:49:1b:64:d4:7a:96:da:aa:5a:2d:a4:51:bf:8f:ac:71:
4b:0e:02:84:7e:f7:23:4c:12:98:45:bf:05:f3:09:71:ef:0f:
f6:20:19:f1:32:ee:ea:07:f9:46:0b:c3:58:90:e0:b7:95:05:
c7:99:0f:59:0c:5b:5d:ab:35:88:33:9d:cd:38:ee:44:5f:ee:
28:5b:60:20:c1:80:b0:00:e8:46:2c:c9:b8:d4:72:2d:24:ec:
b1:ba:b3:78:37:fa:db:c2:ae:c3:e9:05:f4:8b:26:b2:bc:e1:
e6:57:06:c9:19:82:ef:8e:c4:3c:be:08:c1:9a:d1:85:54:24:
be:57:b6:30:02:00:ec:7c:ee:16:32:9a:06:a0:6b:5a:33:29:
98:f0:a3:ba:a8:ec:de:52:e4:0b:40:bc:97:9c:5f:11:db:ea:
6f:29:00:94:f1:c3:c3:5f:56:f2:e4:6c:ab:7e:04:c4:fb:4b:
70:5a:4c:d3:39:b1:bc:64:32:41:4c:c6:73:3f:be:95:a9:f0:
8f:61:76:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:25:52 2026 by rpki-client