Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DB13F7D6108A11F192E285C5DAE4EC9C.roa
File: DB13F7D6108A11F192E285C5DAE4EC9C.roa (raw, json)
Hash identifier: E/l5o/29VbbcKOvx8rNApK8oSDZ/ub8I6F5nEHHiteM=
Subject key identifier: FB:F6:96:74:27:06:4B:09:38:88:FA:24:3F:F5:0F:4E:FF:75:BD:F2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019FD8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DB13F7D6108A11F192E285C5DAE4EC9C.roa
Signing time: Mon 23 Feb 2026 07:39:59 +0000
ROA not before: Mon 23 Feb 2026 07:39:55 +0000
ROA not after: Mon 09 Mar 2026 07:39:55 +0000
asID: 401783
IP address blocks: 45.198.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106456 (0x19fd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 23 07:39:55 2026 GMT
Not After : Mar 9 07:39:55 2026 GMT
Subject: CN=699c044f-7c8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f2:d8:f9:19:b7:4c:78:fa:60:42:a9:22:1f:
50:fb:f1:bc:6e:96:1a:5e:cd:d1:e0:03:8e:c2:1d:
8b:dd:b4:fe:9b:49:04:f9:d4:72:1c:37:70:51:52:
3e:f9:a8:51:02:85:91:47:49:86:86:74:b7:93:66:
f9:c1:f8:11:4c:9e:f3:14:a2:0b:61:48:b3:d1:ab:
18:d8:e7:6a:87:67:7d:18:bd:be:80:6b:7e:a2:90:
c5:3f:88:84:fa:27:0d:53:04:3f:1f:bc:ee:a2:24:
76:2e:43:b3:05:ec:f1:ea:6c:09:50:75:ad:72:07:
dd:56:0d:07:7a:83:21:eb:78:a1:97:d9:20:be:77:
c1:7a:6b:4f:3d:8b:f8:c0:01:3f:2b:55:06:fc:a6:
88:03:ef:57:2d:18:63:24:5b:45:7c:00:37:d6:a0:
24:de:23:99:a0:7f:b8:e3:ec:0d:42:df:6c:83:93:
f7:0a:d1:48:0f:c3:34:ac:21:9e:cd:c2:d5:32:65:
a6:b7:20:e6:f7:ff:4b:72:4f:2a:d1:c3:06:f3:75:
d7:c3:71:60:52:d8:e9:43:53:d4:0c:88:d3:62:a1:
1a:7b:b7:4f:a8:7e:e4:84:72:45:02:f2:a9:bd:6d:
55:a2:65:bc:22:aa:23:06:b7:58:e3:eb:7b:bf:8d:
9e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:F6:96:74:27:06:4B:09:38:88:FA:24:3F:F5:0F:4E:FF:75:BD:F2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DB13F7D6108A11F192E285C5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.227.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:06:4e:ff:a1:6b:c0:c6:c8:5e:28:b0:63:e4:58:ec:ac:26:
d6:9f:05:0f:cf:04:8c:d2:71:5c:d7:6f:d0:9d:2d:43:ff:18:
31:87:af:be:49:2a:e3:e6:14:b6:17:84:4c:17:88:28:12:6a:
68:88:19:75:28:7a:09:20:6c:95:26:15:2a:bf:ad:3e:cb:4f:
30:80:28:b1:3b:26:37:2f:b8:e2:42:9f:d9:12:f9:5c:49:88:
0b:44:38:47:c0:08:48:6e:f7:77:ef:1a:9f:fb:d7:3a:b8:39:
3a:60:33:1b:68:1c:0f:49:91:5e:4e:61:66:71:08:c4:ee:88:
13:15:72:22:a5:f9:ed:cb:cc:a8:e7:95:29:c5:96:39:7b:b8:
8c:44:fc:4d:bd:6f:06:78:a3:cb:0e:92:72:63:03:2c:70:47:
ce:5b:4d:c3:69:3d:32:2e:44:a0:93:b9:17:3f:f3:54:aa:83:
8f:ee:80:c3:c9:ff:c2:d5:19:74:89:da:79:33:e7:b7:ca:29:
6f:4a:be:c5:69:39:c4:e5:78:9c:24:08:a6:2c:e6:37:97:72:
d7:c8:2e:04:90:e6:1f:0a:ee:e0:6c:ed:dd:90:26:e7:bb:4e:
c4:2a:32:72:8d:75:69:16:a9:68:0c:f7:ca:e6:60:09:d1:78:
0b:0e:e0:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:18:27 2026 by rpki-client