Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DD94D8720F2211F19CD5339DDAE4EC9C.roa
File: DD94D8720F2211F19CD5339DDAE4EC9C.roa (raw, json)
Hash identifier: GbN9H/yO/Pz56hPMbeChkZ7n4O+PPProJ0/2oCgjNZ0=
Subject key identifier: AF:E5:C2:B9:9D:D0:23:6D:81:34:D7:AC:9C:5A:C3:B2:7C:80:BF:53
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019F81
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DD94D8720F2211F19CD5339DDAE4EC9C.roa
Signing time: Sat 21 Feb 2026 12:43:05 +0000
ROA not before: Sat 21 Feb 2026 12:43:01 +0000
ROA not after: Sat 28 Mar 2026 12:43:01 +0000
asID: 273870
IP address blocks: 45.192.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106369 (0x19f81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 21 12:43:01 2026 GMT
Not After : Mar 28 12:43:01 2026 GMT
Subject: CN=6999a858-cbaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bc:0f:19:4f:62:f6:0e:3b:8c:ff:8d:db:9f:
e2:8d:47:ca:3a:f8:6b:99:99:46:09:53:f3:75:bc:
57:e9:df:e0:fd:86:9a:d8:5d:61:93:8e:11:c6:3d:
ce:18:32:13:fa:bc:b4:2e:fc:6e:12:57:97:fe:9b:
e1:11:68:ac:08:5d:b4:6c:10:1f:b4:45:4d:b9:d1:
b7:15:07:f6:79:c1:be:c9:7f:96:6f:2d:3c:af:89:
13:66:83:10:15:08:56:fb:89:a2:90:e5:6c:de:a1:
5c:b0:c1:99:db:fd:23:52:52:c4:f1:66:86:35:2d:
62:f1:b3:0d:6a:56:4e:9f:cb:15:c3:b5:73:46:cc:
d7:76:e4:af:0d:0c:69:18:1f:36:03:9a:1d:9f:6c:
a0:0b:59:45:89:90:9e:82:2d:48:06:47:bc:af:bd:
c5:24:85:1a:86:c6:c4:28:17:aa:fb:c9:c0:9b:da:
6e:3b:02:e3:1f:3c:b7:83:1e:07:0a:52:44:de:b2:
54:9c:6d:46:92:76:a7:7e:34:62:08:e5:f9:4f:48:
d4:b8:db:2d:3b:a5:bd:d1:42:45:03:c7:82:67:af:
14:9a:28:ff:94:6a:b4:37:8f:f2:f9:1f:1e:e4:48:
8e:16:39:8d:cf:d8:62:59:c1:f0:10:65:96:5c:48:
8d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:E5:C2:B9:9D:D0:23:6D:81:34:D7:AC:9C:5A:C3:B2:7C:80:BF:53
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DD94D8720F2211F19CD5339DDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.245.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:31:74:39:47:78:60:67:94:b5:1a:2d:7d:91:48:ea:b2:1f:
19:bf:f9:77:ec:8d:db:15:79:f0:cb:5d:8b:a9:ea:b6:33:78:
61:2f:be:09:8c:23:3b:dd:1a:8c:a1:0b:d2:36:43:70:5d:3a:
35:34:14:2f:36:37:40:a9:2a:b9:6b:6c:f3:be:7b:dc:ef:44:
b4:4b:0d:6b:17:6d:49:c0:9a:95:c8:d6:a6:e6:3d:96:85:87:
a4:ef:0a:16:44:73:ad:4f:21:cc:7b:fc:11:eb:67:91:57:a6:
d4:e3:dd:ea:e9:3b:0f:ae:f6:87:14:11:01:c0:81:2c:77:06:
ee:b2:55:ee:4c:7d:94:fa:2c:3b:ab:47:f8:37:0c:92:b4:15:
63:f4:bc:ca:d1:0c:e0:36:70:87:2a:1e:31:f9:6e:77:84:66:
df:01:3c:85:86:76:41:66:63:58:fa:51:22:a1:56:2c:4a:25:
d4:f7:d9:e0:69:5f:12:72:76:84:ae:a1:92:ab:8c:c5:d1:c1:
47:1c:87:d4:1b:bb:49:69:77:02:6d:f9:3e:20:b1:78:51:2f:
63:1d:79:66:bb:0e:4f:48:9e:a1:f6:54:15:eb:d1:20:ff:87:
ed:69:5e:fc:6f:1c:31:5b:20:c8:10:6b:b2:07:09:11:2e:09:
e1:5b:c8:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:17:07 2026 by rpki-client