Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DA71157003FB11F18F7A2D94DAE4EC9C.roa
File: DA71157003FB11F18F7A2D94DAE4EC9C.roa (raw, json)
Hash identifier: fM3HZaMpCZyvfjBOnXDMhqwVxPGOAcOVxrqdGlDBnTs=
Subject key identifier: 05:FF:CB:46:04:BE:60:2D:47:3C:C9:CE:6C:9D:03:8D:DC:78:B1:25
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019C15
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DA71157003FB11F18F7A2D94DAE4EC9C.roa
Signing time: Sat 07 Feb 2026 08:06:07 +0000
ROA not before: Sat 07 Feb 2026 08:06:01 +0000
ROA not after: Thu 12 Mar 2026 08:06:01 +0000
asID: 51847
IP address blocks: 45.207.216.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105493 (0x19c15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 7 08:06:01 2026 GMT
Not After : Mar 12 08:06:01 2026 GMT
Subject: CN=6986f26e-56af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9c:89:05:2c:99:33:6b:e0:53:79:32:04:c1:
8f:e5:01:ed:63:9a:4f:a1:4c:76:50:3d:cf:9f:29:
be:fa:24:8f:81:83:88:9b:ee:7f:0a:6a:d3:9f:6f:
dc:3d:2e:c3:09:0a:0b:08:64:cb:2a:19:a7:0b:1e:
f5:b4:67:e8:8f:e0:e1:d4:df:a4:95:16:76:7a:c4:
00:db:a0:cd:9e:de:6d:9c:2b:21:8f:a5:a7:6e:f0:
00:da:dd:0a:d1:2a:30:04:4d:0f:0a:3a:f1:52:40:
a0:8c:dd:da:9b:55:90:9c:11:a2:34:73:6c:5f:73:
a5:ea:f0:5f:b6:fe:81:f0:8e:b8:86:80:77:90:74:
4f:2b:f0:ef:97:be:54:be:b3:12:25:6d:bd:fa:20:
9c:3a:6f:2e:c8:35:5b:de:0b:99:61:60:64:17:ca:
2b:d1:bd:03:91:ba:38:00:8c:65:ae:19:1f:ac:24:
72:df:df:b9:47:53:c2:b4:c0:28:e4:e4:b1:cf:95:
32:d9:e6:b7:7c:fe:72:69:07:3b:c1:0e:90:a9:26:
c2:98:0e:1a:b5:91:7f:19:c4:eb:35:2a:15:5d:f6:
9b:b7:b8:94:4d:ef:fa:ce:89:07:14:58:6b:a6:19:
5e:90:62:7d:db:e4:c4:16:58:f3:56:93:4b:80:ee:
a5:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:FF:CB:46:04:BE:60:2D:47:3C:C9:CE:6C:9D:03:8D:DC:78:B1:25
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DA71157003FB11F18F7A2D94DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.216.0/23
Signature Algorithm: sha256WithRSAEncryption
42:ad:27:1d:4d:fa:62:5a:a5:31:3f:cf:67:16:a1:e0:ca:a8:
d2:9d:b0:ed:50:8e:07:c0:34:f2:43:1c:88:34:66:af:cd:2a:
99:8d:07:a0:a1:9c:7d:86:1f:8c:c1:37:70:f8:b5:94:a8:bc:
5d:9f:07:54:cd:c8:68:b2:15:26:88:a1:9c:f8:b7:4f:3a:b8:
e3:fa:a7:5b:30:2b:ba:73:a9:e9:33:e6:c9:79:f2:03:40:1b:
e3:09:85:e4:71:1e:d5:be:14:fa:90:2b:f7:d9:fd:ab:6e:8e:
ac:7a:7c:9e:55:fd:52:55:bc:4f:f6:ca:50:ea:c1:79:46:ec:
be:f8:b8:9e:7a:62:2b:5e:4b:cc:32:4e:65:1d:cb:dc:fc:ab:
6c:b4:43:d3:3e:f6:fd:67:2b:11:56:e5:88:1e:51:c7:79:b0:
2d:e2:86:ec:83:c8:36:c0:30:ad:ee:a7:b9:f4:cc:00:a2:9c:
9b:0b:29:71:c1:9d:5a:a1:61:41:27:26:2e:a7:67:b0:db:81:
0a:23:c9:a7:6d:dd:e8:f2:85:bc:3d:b7:92:b9:f2:b5:ee:22:
07:28:fe:0d:99:5b:ae:09:f3:12:95:82:56:fa:5d:5e:a0:ac:
f1:ac:b3:a8:02:1a:ca:6b:62:98:06:a0:36:61:e3:90:0a:a9:
1b:e2:29:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:17:20 2026 by rpki-client