Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E685767412DA11F1804609F3DAE4EC9C.roa
File: E685767412DA11F1804609F3DAE4EC9C.roa (raw, json)
Hash identifier: +0W0AnXyDGVQgpZuASSHlBFvy5hiWt3sz+DVY4cWSyo=
Subject key identifier: BA:65:25:20:9B:1B:84:19:31:70:B5:2C:F3:70:6B:A4:F2:F8:B7:87
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A091
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E685767412DA11F1804609F3DAE4EC9C.roa
Signing time: Thu 26 Feb 2026 06:18:01 +0000
ROA not before: Thu 26 Feb 2026 06:17:56 +0000
ROA not after: Sat 28 Mar 2026 06:17:56 +0000
asID: 154267
IP address blocks: 45.195.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106641 (0x1a091)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 26 06:17:56 2026 GMT
Not After : Mar 28 06:17:56 2026 GMT
Subject: CN=699fe598-f779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:8f:72:16:f2:3f:9c:ef:75:8f:d5:4d:9e:49:
7d:89:92:e9:49:12:22:51:cd:41:4d:a8:c5:04:5d:
9a:52:ae:d4:1a:15:33:ae:a8:5a:8a:b7:16:5d:42:
72:7e:55:aa:05:ba:80:cc:61:d1:f9:bc:56:e4:31:
b7:2e:58:03:a8:e0:c3:25:0d:83:80:ab:80:58:07:
c1:08:e4:9e:49:67:6a:46:0d:95:8a:31:60:48:83:
62:48:73:8a:05:ca:8e:15:88:e6:89:db:7f:17:22:
fd:f9:9c:e2:da:df:37:cb:d6:48:dd:f0:37:25:8d:
1f:a5:0d:e5:49:e0:8d:52:da:0b:5b:c7:14:35:d4:
e2:67:5b:88:32:0f:b4:8b:be:bc:0f:f7:a6:d5:31:
26:69:5a:53:c7:89:6c:11:8c:4a:61:32:fd:5e:a0:
df:4a:b6:9d:58:8d:0f:0f:74:b0:5a:28:2b:53:7f:
3a:f4:0c:8a:76:a8:81:1f:87:6b:cf:56:18:fc:81:
b1:21:56:1f:a2:04:8f:1f:80:2c:a5:df:bb:25:83:
7f:1f:d9:a3:9a:e5:e7:47:31:01:cd:13:1a:33:c5:
2d:d3:38:62:d1:f6:d9:cc:25:c1:1c:50:ca:49:18:
b8:23:f9:83:91:ca:46:ca:22:a4:47:fb:9c:57:db:
d4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:65:25:20:9B:1B:84:19:31:70:B5:2C:F3:70:6B:A4:F2:F8:B7:87
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E685767412DA11F1804609F3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.249.0/24
Signature Algorithm: sha256WithRSAEncryption
19:e4:e6:00:0f:34:c5:1e:4f:39:d7:e4:c3:7a:68:b8:95:89:
61:ab:91:d0:c9:01:b1:72:52:5d:3a:ec:bf:35:81:0e:d3:61:
81:04:b9:de:35:48:55:ca:88:f7:f6:7d:5c:e6:db:bf:14:6a:
ed:6a:1d:61:77:19:10:58:6e:36:b1:38:df:1a:81:46:87:e1:
ba:46:fc:bf:d9:94:de:e1:5e:12:b1:8f:ea:2b:04:b7:dc:e9:
b9:02:8f:f6:a7:9d:75:ee:08:ad:8b:b6:dc:3d:9e:f8:90:3a:
c6:3d:b7:0b:5e:fd:5f:f6:b8:ce:c1:6d:c3:65:0f:7e:8f:81:
ee:28:cd:5d:87:16:24:e4:e3:c9:be:84:64:7f:17:4a:72:bf:
ee:ce:e2:12:b4:2d:57:ac:24:19:4e:49:5e:58:79:c8:d4:bd:
ed:13:3d:e2:cb:d6:af:15:3f:54:9f:31:6b:6a:e5:f7:a3:07:
37:97:b1:0e:ce:82:19:9a:66:dd:49:b3:d6:eb:77:d7:71:60:
ce:dc:b4:45:68:9a:f9:74:bc:35:8d:4b:10:51:d6:7b:6b:69:
d2:b3:cf:e1:da:f7:e0:d7:2f:71:11:6e:64:89:83:e1:5d:31:
9c:4d:63:56:60:d3:ae:0f:7e:61:9a:e8:0e:07:39:78:37:f8:
42:de:ad:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:02:38 2026 by rpki-client