Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EB9A28C6059C11F199AD4593DAE4EC9C.roa
File: EB9A28C6059C11F199AD4593DAE4EC9C.roa (raw, json)
Hash identifier: j6DQGRMLaL5YJkmPorXKRIHPQ4rRnspD+E2Sx8kg4FY=
Subject key identifier: D6:88:F1:6F:7F:E7:08:F2:6C:AD:26:37:C0:E7:FF:13:DC:92:72:4E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019C74
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EB9A28C6059C11F199AD4593DAE4EC9C.roa
Signing time: Mon 09 Feb 2026 09:51:36 +0000
ROA not before: Mon 09 Feb 2026 09:51:28 +0000
ROA not after: Mon 16 Mar 2026 09:51:28 +0000
asID: 211567
IP address blocks: 45.195.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105588 (0x19c74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 9 09:51:28 2026 GMT
Not After : Mar 16 09:51:28 2026 GMT
Subject: CN=6989ae27-3749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:9d:22:c2:46:ae:41:a0:a8:05:b4:96:fb:4b:
30:f8:e2:0f:a7:9c:8f:04:83:89:ce:70:6c:c1:00:
e3:2a:05:dd:9d:06:a4:93:51:77:5d:ea:92:66:53:
df:98:a8:fb:74:43:9a:0f:d1:2f:dc:ea:87:ae:88:
f1:f4:96:5b:d0:46:ac:12:e7:cf:80:40:3f:8a:68:
8a:a8:ec:44:03:9e:ca:96:ca:31:e3:33:d2:a5:b9:
dd:18:e9:2c:8d:d1:0e:3b:f5:fb:fc:df:80:71:24:
be:72:7c:a0:19:6e:ee:73:c7:96:f9:94:72:84:48:
b4:0c:b2:10:0c:51:5c:04:7c:62:6a:0e:43:db:44:
19:ef:1f:73:36:cd:c0:bc:ef:9c:ea:a0:e4:bb:f6:
7b:a9:77:17:65:21:d5:ce:c7:9e:79:27:ff:84:81:
8e:9b:0d:a3:20:fe:b5:ff:57:30:56:72:90:7c:2f:
61:f8:51:b3:e8:68:e3:e7:ed:0b:6b:48:b0:31:54:
11:d1:56:c4:31:6d:bc:fb:4c:c5:7d:1b:1b:96:e0:
44:d7:2c:d7:1b:26:fb:59:57:57:7a:ec:7a:d8:4b:
8b:02:6c:61:7d:6b:2a:0f:6b:69:95:7e:48:55:a1:
06:31:cd:b5:f4:b2:62:90:18:ba:29:8c:4e:11:71:
73:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:88:F1:6F:7F:E7:08:F2:6C:AD:26:37:C0:E7:FF:13:DC:92:72:4E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EB9A28C6059C11F199AD4593DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.75.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:e2:d4:2f:ca:a4:dc:45:e3:96:d1:a2:4a:f1:5e:04:15:84:
b2:37:1e:8d:98:a6:be:6f:b7:be:a5:f6:b5:d7:bc:c2:d5:38:
6a:f4:09:00:18:f8:1c:6a:39:60:ed:57:2c:43:94:cc:82:8c:
d7:2a:dc:d7:56:9f:2c:25:8a:7f:9b:da:f8:3f:31:53:ca:73:
d3:e2:0a:6a:65:90:2c:ab:a2:a5:5a:3f:76:00:23:5a:88:76:
3a:31:2a:fd:f7:28:59:08:8f:7c:18:c3:f7:a5:1a:eb:d3:1d:
b3:ce:37:b3:83:79:9c:ff:0c:70:29:b8:05:6a:dd:e6:a9:7b:
a1:73:1c:3a:31:eb:0b:27:6d:52:64:0f:6d:c5:1f:07:5c:d9:
7e:ba:bb:41:3b:69:09:db:a9:75:96:1a:a9:b3:c5:f9:18:5e:
7c:c3:12:bf:27:12:9c:af:89:a8:0a:bf:3f:4d:37:57:80:20:
5a:c4:db:96:1e:b8:60:dc:b3:a6:0b:de:74:24:96:e9:70:77:
cb:ef:90:81:fc:ea:f6:85:87:e6:cd:4f:0a:0c:0e:98:1a:c7:
38:10:5e:0e:28:27:c8:27:d5:52:34:ca:3f:35:c4:80:e0:4d:
8c:77:29:88:52:46:f0:0b:ff:95:dc:cb:7c:11:56:52:c9:2e:
ff:6e:0c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:25:46 2026 by rpki-client