Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EA35F9FC0AA511F1A23EBFF4DAE4EC9C.roa
File: EA35F9FC0AA511F1A23EBFF4DAE4EC9C.roa (raw, json)
Hash identifier: CEnP5dTErnVULm9LUbEpCo0nd2E42kz1mhZNEs6p1GQ=
Subject key identifier: 88:05:82:46:1F:0C:11:1C:C8:BD:E2:BE:82:B7:BF:60:B1:59:0E:5D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019E03
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EA35F9FC0AA511F1A23EBFF4DAE4EC9C.roa
Signing time: Sun 15 Feb 2026 19:38:34 +0000
ROA not before: Sun 15 Feb 2026 19:38:29 +0000
ROA not after: Mon 02 Mar 2026 19:38:29 +0000
asID: 401783
IP address blocks: 45.198.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 02 Mar 2026 19:38:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105987 (0x19e03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 15 19:38:29 2026 GMT
Not After : Mar 2 19:38:29 2026 GMT
Subject: CN=699220ba-345b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:10:bd:00:c5:d3:0a:a0:45:f9:17:8b:f6:2c:
d2:a2:55:90:b0:e4:92:05:f5:11:bd:81:9b:fe:eb:
ad:13:ff:85:3b:02:c4:25:3e:14:ec:53:66:b7:37:
12:2c:a8:93:bb:5b:02:f6:b6:f2:20:c6:ed:e3:13:
c0:b9:f9:60:ef:b1:8c:6f:d2:9f:fc:d7:7e:09:57:
b6:73:21:c6:0e:84:f5:1a:79:db:26:90:f3:53:c3:
23:a3:80:dd:3f:41:2a:85:2a:e3:3a:d8:37:5f:03:
5e:17:6a:c5:63:21:15:3d:a4:93:27:37:7e:b9:b9:
71:f1:08:87:2d:54:c0:db:55:0b:11:69:81:aa:59:
a8:66:0c:cc:3f:e9:6e:f7:cb:2e:49:89:76:03:43:
c4:b1:a4:21:7c:e2:c5:ab:a2:d7:09:f7:29:48:02:
19:c6:cf:3d:fe:54:de:92:25:85:f3:5a:ac:ad:1a:
a6:a0:5e:39:a6:59:9f:5e:f0:84:03:e0:74:6e:1f:
be:45:c1:eb:74:c5:f4:63:ce:bd:52:a2:18:76:43:
ec:56:7f:c6:d8:e2:29:8a:71:4e:01:62:e8:82:40:
e7:39:9e:bf:64:16:4a:e8:ad:09:3c:28:9f:82:7b:
b4:ac:d5:9a:ad:94:59:ec:4e:26:6c:fe:23:83:bd:
03:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:05:82:46:1F:0C:11:1C:C8:BD:E2:BE:82:B7:BF:60:B1:59:0E:5D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EA35F9FC0AA511F1A23EBFF4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.227.0/24
Signature Algorithm: sha256WithRSAEncryption
35:33:8b:1f:3f:78:6a:9e:79:c7:17:cd:47:2a:7b:79:26:60:
f5:dd:c8:20:9f:09:b9:4b:0c:ef:f9:88:22:7d:f5:41:15:ea:
6b:a6:d0:3f:a2:20:9f:7b:1a:bb:12:a2:9f:15:63:36:a9:22:
c2:33:2c:23:63:ce:5f:5c:d6:24:56:da:ca:89:1b:aa:11:0b:
09:1c:db:26:73:c5:58:4c:d2:0c:0e:0f:90:61:fa:e7:32:70:
51:87:86:19:28:c6:ec:1b:f4:4d:70:12:60:60:e5:a0:eb:8a:
fc:7d:4d:a4:8e:c2:6e:95:e9:96:36:42:ae:fe:f8:56:9d:72:
5a:b6:b9:cc:b5:59:eb:b4:38:48:03:32:7b:b6:dd:d3:47:71:
1b:17:60:59:35:77:d2:7e:ec:ab:91:4f:0e:0e:ff:21:82:3c:
26:d5:14:75:9c:fe:33:ac:95:99:26:fe:be:0a:24:16:19:a8:
96:6c:64:a2:12:9e:6d:eb:4c:b7:4b:e1:13:e2:15:b2:22:16:
16:d6:ef:38:04:15:3b:39:36:3d:77:4e:67:8f:d0:31:cb:03:
7e:8f:fc:8c:9e:67:65:d0:f4:b2:02:a7:8c:c7:63:6f:ea:b5:
7e:1c:d1:e8:89:46:25:95:cf:ae:04:25:bf:4f:41:1e:bc:e4:
7b:86:0a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:11:29 2026 by rpki-client