Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FFF6913212FE11F1BD03EBCDDAE4EC9C.roa
File: FFF6913212FE11F1BD03EBCDDAE4EC9C.roa (raw, json)
Hash identifier: R/JEPyUtQhJy9Telu+QZK429LNQ1F8cdQK0tc5T+ViU=
Subject key identifier: CF:65:9D:22:46:D3:78:03:01:54:57:B2:E9:88:E9:32:65:46:F1:2C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A0AD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FFF6913212FE11F1BD03EBCDDAE4EC9C.roa
Signing time: Thu 26 Feb 2026 10:36:25 +0000
ROA not before: Thu 26 Feb 2026 10:36:21 +0000
ROA not after: Thu 09 Apr 2026 10:36:21 +0000
asID: 401783
IP address blocks: 45.192.235.0/24 maxlen: 24
45.192.236.0/24 maxlen: 24
45.196.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106669 (0x1a0ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 26 10:36:21 2026 GMT
Not After : Apr 9 10:36:21 2026 GMT
Subject: CN=69a02229-07a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e7:58:c5:b9:94:12:55:50:b6:a2:9a:61:2e:
6f:8c:78:81:3f:44:ce:87:ea:1f:ad:dc:37:8f:dc:
d5:65:00:ba:9a:35:cb:f8:18:a7:57:d1:6f:42:35:
ef:7e:a3:a7:e8:ed:ca:99:4e:7d:54:44:bd:5f:ca:
2c:db:52:67:7d:a5:1f:4b:6a:d1:56:13:9f:a5:70:
71:32:36:be:dc:63:83:c1:18:aa:19:cc:8c:87:01:
0a:bd:f6:f1:1a:ba:3f:f5:56:6e:12:f2:fc:e7:01:
74:38:e7:fc:b1:7d:f9:7f:64:dc:30:ef:3f:79:18:
1a:4d:fb:a8:f4:61:78:4b:84:12:2f:5b:a7:63:72:
a7:37:f8:0e:31:4c:63:e1:83:aa:4d:46:70:a3:bc:
c8:7c:01:a6:9d:0a:78:49:ae:51:d7:d7:ac:05:c8:
8c:1b:5e:2b:e2:05:13:53:66:f6:27:24:17:22:f5:
12:d4:93:e5:45:7a:04:1a:38:66:2d:c1:9d:03:4a:
2e:4d:77:d6:29:93:16:a2:03:76:10:58:7d:2b:c3:
0a:24:a3:19:dc:0f:3c:8d:77:47:44:a2:94:61:c3:
d9:c4:6b:ab:21:6a:f9:7d:90:19:bf:ac:8e:f8:9f:
e8:35:8c:be:52:98:7b:6f:3e:18:90:6b:f9:48:52:
f3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:65:9D:22:46:D3:78:03:01:54:57:B2:E9:88:E9:32:65:46:F1:2C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FFF6913212FE11F1BD03EBCDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.235.0-45.192.236.255
45.196.194.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:26:63:e4:a7:a5:4d:3f:3c:de:0f:da:0b:9e:82:3d:22:11:
5f:b0:77:40:a3:03:40:be:2c:96:55:29:ed:65:f1:63:cc:33:
e6:08:e5:64:06:ed:14:52:de:40:25:f7:b5:d2:46:8b:a6:48:
94:a3:c4:d5:f4:93:0f:37:bb:a4:0b:4c:d7:be:ed:e8:60:ce:
22:ff:37:42:37:af:63:f1:53:86:f1:89:f7:32:63:3f:0c:05:
86:8e:53:ba:0c:83:af:cb:f7:12:ce:eb:53:ff:3d:9d:33:83:
1d:f3:fa:bc:b6:8b:a1:66:59:89:bc:8d:5b:8e:00:70:a6:8a:
4d:20:3d:ba:c5:6c:7b:d8:9b:22:c0:00:56:68:12:cf:42:b3:
ad:e5:c5:c9:d1:e8:7e:bc:83:a8:aa:84:e1:47:f7:a9:68:e9:
89:6c:51:db:f8:7a:3a:82:1c:85:06:2f:01:00:7b:84:8a:c3:
4d:ac:af:b9:75:f6:eb:87:e8:78:35:04:7b:2f:92:d2:88:76:
56:85:6e:93:dd:a9:80:6b:ab:05:9d:01:d5:a7:6a:3d:78:25:
c8:01:93:9d:6c:83:6d:99:fe:87:1d:ac:3b:c5:1b:bf:3d:89:
a0:b3:0e:3e:b6:bf:43:6d:bf:ea:ab:6b:b1:10:2d:6d:24:42:
f3:a6:3d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:42:25 2026 by rpki-client