Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/048C085C029D11F1A79D31A0DAE4EC9C.roa
File: 048C085C029D11F1A79D31A0DAE4EC9C.roa (raw, json)
Hash identifier: fEdPg7T3OWbBjp0ZfuLWxK9IP82mmelPff0WzV9ib3U=
Subject key identifier: 34:E1:98:C6:6F:E8:A0:1B:B0:E3:1D:82:F8:6B:C9:4B:08:28:75:3A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019BE8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/048C085C029D11F1A79D31A0DAE4EC9C.roa
Signing time: Thu 05 Feb 2026 14:14:44 +0000
ROA not before: Thu 05 Feb 2026 14:14:38 +0000
ROA not after: Fri 13 Mar 2026 14:14:38 +0000
asID: 273133
IP address blocks: 45.194.8.0/23 maxlen: 24
45.194.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 21 Feb 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105448 (0x19be8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 5 14:14:38 2026 GMT
Not After : Mar 13 14:14:38 2026 GMT
Subject: CN=6984a5d4-09d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:0a:ee:ef:64:89:ca:cd:32:ea:95:c8:94:76:
f5:a4:01:b5:9b:25:09:76:99:52:81:0e:e6:7a:7f:
b7:f2:20:fb:47:7f:74:34:24:9a:86:9e:a2:09:b9:
f5:e0:d9:9b:1c:2c:e4:a9:53:f1:0e:05:b9:61:e5:
a0:78:89:ea:d6:01:58:2d:ed:d1:9e:78:7e:df:04:
1f:db:57:c1:6d:b8:56:9a:be:4b:79:87:fa:0e:bb:
4e:1e:8c:da:29:a7:51:c8:1c:88:5f:f7:64:1c:09:
2c:11:42:d4:e9:1a:c2:91:cf:b6:f4:4b:02:be:c1:
d9:c3:8d:f9:84:62:a3:a4:2f:d5:28:6e:6c:c3:a6:
5e:b4:ea:bd:f3:48:a7:8f:4a:ec:64:33:63:b1:b8:
26:da:a3:21:83:31:c1:c1:c4:66:f4:44:98:18:33:
97:50:72:82:31:f8:44:01:ca:9a:16:47:40:a2:c5:
a4:1c:54:07:cd:16:d1:eb:2a:ef:53:c0:98:6f:bb:
e5:8e:be:71:ea:f3:c4:9d:a3:ff:23:23:5f:58:df:
b4:1c:be:eb:02:b6:c9:4a:f1:63:78:f1:33:19:b9:
b7:d1:31:95:92:1e:c1:f7:fa:3e:89:1a:b4:0c:5c:
84:35:34:67:fd:6a:fe:57:f5:e3:6b:dc:08:b9:3e:
89:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:E1:98:C6:6F:E8:A0:1B:B0:E3:1D:82:F8:6B:C9:4B:08:28:75:3A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/048C085C029D11F1A79D31A0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.8.0-45.194.10.255
Signature Algorithm: sha256WithRSAEncryption
5f:1b:5a:7d:30:fe:4b:b7:ee:45:49:02:ec:2a:cc:b5:b8:13:
d4:ac:e8:f9:e7:92:ff:f6:83:49:6e:51:fe:35:a0:75:5a:70:
37:c2:c8:95:09:61:76:16:69:72:d4:64:40:b7:5f:bb:ff:a5:
33:a1:4b:78:d4:47:2e:5e:13:ef:f7:3a:40:86:95:85:a7:62:
aa:32:8a:f0:5a:66:a0:6e:b1:ee:2a:ea:3a:83:18:b7:79:70:
41:7e:9b:74:a8:84:58:6d:e6:7b:b9:cc:5a:21:ca:a8:83:9b:
b8:d0:72:85:97:72:0b:c6:ee:78:fd:69:91:dd:2c:28:4a:c6:
27:83:a2:86:b7:78:d1:60:13:fb:7f:58:76:e7:89:12:26:e9:
4d:9c:8c:d3:c3:45:0e:72:bb:5a:8f:65:0f:e9:f9:ee:8c:b4:
ff:cb:cc:8f:eb:81:90:f7:14:78:c7:70:d7:d1:6e:84:27:bf:
af:34:26:98:f2:b6:fb:39:70:4e:55:d8:38:e8:27:e5:25:f4:
16:b5:01:1d:21:97:f8:d7:12:4f:a8:0c:44:54:a8:1c:18:85:
19:d0:34:92:27:54:05:b1:77:d4:62:73:24:00:ec:f3:e7:95:
25:c8:54:42:6f:49:1d:6f:40:16:ce:3d:e4:61:bb:9c:23:29:
16:4e:d2:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 15:40:31 2026 by rpki-client