Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FF73A2EA071E11F18D5900DADAE4EC9C.roa
File: FF73A2EA071E11F18D5900DADAE4EC9C.roa (raw, json)
Hash identifier: 7MPg7czansQnhwmd65vVgtt+TdXZmON0tEqpeA/87b0=
Subject key identifier: 32:57:13:FE:E8:B8:AA:50:74:64:90:C0:38:96:83:AB:4E:AB:FB:FB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019CE7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FF73A2EA071E11F18D5900DADAE4EC9C.roa
Signing time: Wed 11 Feb 2026 07:55:14 +0000
ROA not before: Wed 11 Feb 2026 07:55:09 +0000
ROA not after: Tue 17 Mar 2026 07:55:09 +0000
asID: 36137
IP address blocks: 45.200.192.0/18 maxlen: 24
45.200.192.0/19 maxlen: 24
45.200.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105703 (0x19ce7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 11 07:55:09 2026 GMT
Not After : Mar 17 07:55:09 2026 GMT
Subject: CN=698c35e2-3d3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:de:66:73:dc:82:76:32:2f:e6:c2:ab:0b:12:
71:2f:b0:16:47:aa:1f:ef:b5:2d:02:4e:8a:b4:3d:
7f:3d:59:f2:f1:5b:f8:ee:01:20:41:bc:89:ac:1f:
37:0f:b8:69:e4:64:c6:83:f4:fc:7e:be:4a:3b:6e:
a0:ed:76:70:da:56:a0:26:b0:b7:cf:31:3e:4d:b8:
78:d0:e7:94:ae:0f:45:f7:db:7c:4c:93:c6:3b:22:
7a:32:f5:65:0a:5a:23:4e:a3:d8:85:6a:f2:eb:37:
20:cd:58:a2:02:44:a7:80:8a:b7:07:c5:d7:3d:ef:
11:1c:e6:2f:28:f0:42:03:18:c0:20:9e:48:d8:27:
8e:c9:cd:bc:a7:88:e0:54:6f:1b:d3:f1:9c:18:54:
3b:a8:a2:5d:02:62:a9:80:a0:bd:c1:9f:28:c2:46:
a6:d5:0d:dc:b4:70:dc:5e:df:81:16:ab:e4:af:c0:
15:9c:88:80:4e:d8:ae:f3:e3:50:13:9a:88:53:0b:
08:9c:7a:06:19:0b:8b:36:f8:e2:2c:77:19:ea:4b:
ea:85:da:ed:63:ed:d8:15:a6:6e:09:7b:b9:b4:e8:
1d:fb:06:69:79:d6:b1:ff:cb:ef:50:9a:0a:34:7a:
6d:6a:c3:34:4b:8b:3a:11:dc:92:59:c6:b3:81:41:
85:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:57:13:FE:E8:B8:AA:50:74:64:90:C0:38:96:83:AB:4E:AB:FB:FB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FF73A2EA071E11F18D5900DADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.192.0/18
Signature Algorithm: sha256WithRSAEncryption
43:e4:bc:37:77:6c:e7:da:7b:45:a7:7f:26:c5:a7:ac:f5:0d:
18:83:b3:98:f5:43:bb:97:4c:1b:e5:70:95:46:28:5e:15:21:
52:79:8c:a5:bc:09:43:cb:07:f3:62:b9:6f:49:74:ac:0e:e3:
1f:a3:6a:a5:b7:eb:8e:b5:d9:da:08:3e:22:b5:63:62:78:ba:
7c:5d:cb:d8:c9:76:39:f0:6a:ee:a6:7a:44:bd:20:eb:c1:81:
13:b1:49:29:34:ec:79:06:1f:f5:72:43:96:e2:32:b0:3e:bf:
30:1c:76:f4:ae:4d:63:43:4e:82:4d:7a:48:f3:54:c5:7c:c0:
b7:56:5a:e6:cc:5f:78:b9:e0:f9:a1:ca:4e:a1:d3:4d:f4:eb:
07:73:2a:83:34:e8:fd:5e:44:37:7f:f4:af:a1:c2:a3:03:3b:
a7:ce:ac:7c:11:33:ef:39:89:3f:53:21:32:a9:d4:db:93:f8:
d2:79:47:64:02:9a:fa:a3:bb:6c:77:27:60:17:6f:c3:b7:2c:
af:73:bb:06:2d:11:01:52:11:18:1d:a7:9c:48:d9:3c:31:27:
32:05:0f:37:88:ad:b8:a9:ed:b8:ef:7e:2a:27:4e:22:45:ca:
67:d3:8d:63:6d:27:69:05:62:b8:2e:69:44:08:42:3c:04:72:
6f:5d:e2:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:56:27 2026 by rpki-client