Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F185548E118D11F194245AF0DAE4EC9C.roa
File: F185548E118D11F194245AF0DAE4EC9C.roa (raw, json)
Hash identifier: VBjVtHr+VB+vOe1KQYi80/gD56lUxZ2ZlLNOCylu3/s=
Subject key identifier: 6F:34:5F:58:25:EA:19:99:81:29:D2:08:9A:07:06:9C:35:6A:12:BD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A033
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F185548E118D11F194245AF0DAE4EC9C.roa
Signing time: Tue 24 Feb 2026 14:34:36 +0000
ROA not before: Tue 24 Feb 2026 14:34:33 +0000
ROA not after: Tue 31 Mar 2026 14:34:33 +0000
asID: 44559
IP address blocks: 45.196.122.0/24 maxlen: 24
45.196.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106547 (0x1a033)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 24 14:34:33 2026 GMT
Not After : Mar 31 14:34:33 2026 GMT
Subject: CN=699db6fc-8f22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d1:4a:1e:44:10:19:ba:ad:f1:df:59:34:af:
a4:bb:b5:cb:98:37:9c:fe:e1:2c:22:e2:a0:c9:5b:
fe:f7:3a:df:cb:7d:8f:17:9e:c9:1f:b7:99:1c:65:
ac:67:0e:cf:71:a9:09:af:e4:c0:26:bb:2c:44:69:
5c:eb:85:1f:5f:a9:e8:31:33:65:00:33:2d:b9:c2:
81:c5:78:67:d0:75:ca:d1:92:3d:06:f5:e0:b7:6a:
df:88:c3:82:23:44:8e:9f:09:d9:1f:b1:48:b9:1b:
d9:0a:66:ff:a9:63:e4:80:79:80:e5:9d:30:07:91:
7d:f9:51:5b:8b:8b:65:fa:68:a6:00:70:11:a0:5e:
ce:80:61:c8:9a:36:5d:d7:8a:37:e9:cd:35:cb:ed:
0e:1f:88:b4:bb:c4:ce:43:1c:f8:4c:71:51:e4:d9:
03:e8:34:ff:cc:66:cd:52:28:8f:2e:f5:a3:bd:db:
3e:68:57:d6:13:86:89:a6:85:de:99:11:0f:72:b0:
46:5d:a2:bd:79:96:4c:10:8b:1a:16:cd:61:04:38:
ad:63:e0:da:1f:7f:6e:d4:59:c4:98:59:fd:52:15:
95:aa:89:ff:76:40:28:36:59:bb:e7:5a:ea:2b:0a:
20:05:0a:b9:89:5e:0b:46:80:fb:08:0c:03:1a:a3:
5f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:34:5F:58:25:EA:19:99:81:29:D2:08:9A:07:06:9C:35:6A:12:BD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F185548E118D11F194245AF0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.122.0/23
Signature Algorithm: sha256WithRSAEncryption
59:59:f2:1a:e3:6b:e4:54:f9:1f:fb:ad:9b:ee:02:0e:49:6a:
72:ae:4e:cc:bb:69:f2:c4:de:df:92:ae:ee:49:58:48:71:6d:
bf:6e:8e:58:c6:42:d6:5a:a8:4a:65:12:e9:77:2c:41:6f:80:
9b:62:8b:be:53:52:30:7c:6c:0b:e4:42:af:79:fb:22:e4:26:
18:da:64:4e:b3:7e:2f:c9:ac:bb:9d:6d:53:38:1a:1c:c1:8e:
da:1c:24:12:e8:a0:f1:84:bd:dd:8e:e4:cf:fb:6f:b3:5a:cc:
fd:69:ac:70:06:ca:cb:b0:d9:ee:63:b1:c3:ec:bf:50:b3:0c:
72:d5:ab:ad:2e:4a:9b:40:4f:7e:e0:02:c8:6f:d2:82:4d:2f:
65:ea:7d:37:9b:81:da:98:3c:48:a9:7f:62:51:c1:0e:a3:a0:
df:ee:1f:d6:c6:d9:2f:36:93:01:6c:2f:26:7d:fe:e5:7a:0d:
d8:86:98:e1:62:87:62:af:9e:a1:56:92:ae:d8:c5:bb:30:b8:
14:90:c0:2d:3a:b9:62:e3:9b:54:61:1d:37:b7:dc:52:66:f4:
ac:33:fb:da:7a:84:2c:a1:b2:62:5e:94:2f:90:54:63:88:52:
48:d6:08:ca:83:31:7e:ba:b7:36:e7:a5:2f:37:8a:7e:3f:da:
74:65:b9:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:19:32 2026 by rpki-client