Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8F1B04782EA811F185D36293DAE4EC9C.roa
File: 8F1B04782EA811F185D36293DAE4EC9C.roa (raw, json)
Hash identifier: Z2yIj/I4okbpn6hw4xfQdCfUeQq0KKfgclhZP9KyOj4=
Subject key identifier: BD:C4:58:7D:F2:58:91:83:C4:2E:4E:F1:86:C1:F9:CD:7C:FF:69:AB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A965
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8F1B04782EA811F185D36293DAE4EC9C.roa
Signing time: Thu 02 Apr 2026 15:28:12 +0000
ROA not before: Thu 02 Apr 2026 15:28:05 +0000
ROA not after: Sun 10 May 2026 15:28:05 +0000
asID: 63139
IP address blocks: 45.197.98.0/24 maxlen: 24
45.197.99.0/24 maxlen: 24
45.197.100.0/24 maxlen: 24
45.197.101.0/24 maxlen: 24
45.197.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 07 Apr 2026 00:28:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108901 (0x1a965)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 2 15:28:05 2026 GMT
Not After : May 10 15:28:05 2026 GMT
Subject: CN=69ce8b0c-7f14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ed:b5:a9:ab:37:e8:08:6e:fd:e2:01:63:ce:
8a:c0:f7:3e:e2:3a:22:6e:ea:97:cf:7f:95:e9:09:
c9:72:37:ae:53:36:88:0d:9b:80:7b:b8:b7:bc:fe:
7f:cc:46:60:f6:be:7f:e0:6c:4f:3b:57:16:ea:71:
7a:d2:ae:45:ba:26:13:fe:30:42:58:12:16:57:16:
78:48:b5:08:eb:64:4d:6f:b0:f3:84:1f:71:e1:81:
dc:a4:0e:a3:3a:d0:aa:8a:23:c7:e2:8c:fc:38:a3:
54:30:3e:fa:a6:d3:09:62:61:7f:ac:0c:69:3f:a3:
96:33:58:0b:05:09:64:82:fb:24:13:a0:42:8a:7f:
88:38:a3:44:b6:f2:65:0f:7a:6e:3f:f9:6a:e8:34:
d1:59:58:2d:9a:5a:db:21:ea:cf:f8:b3:3b:a2:9e:
08:5c:da:bf:51:b3:56:7a:eb:ce:a9:f6:9c:47:85:
f7:3a:57:82:ae:82:16:b7:85:f6:cb:13:83:a6:6f:
40:58:fd:1a:14:7c:b2:2e:5b:be:20:91:a2:2f:bb:
fb:88:dd:b7:fe:44:a1:2d:a5:0d:be:f4:fe:94:85:
d0:cd:2a:be:2c:35:f6:37:65:31:36:e8:85:75:56:
69:97:1b:aa:04:67:60:85:6b:42:af:b8:26:04:0b:
38:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C4:58:7D:F2:58:91:83:C4:2E:4E:F1:86:C1:F9:CD:7C:FF:69:AB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8F1B04782EA811F185D36293DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.98.0-45.197.102.255
Signature Algorithm: sha256WithRSAEncryption
a5:7c:62:b8:34:a2:61:4a:31:93:e4:a8:80:1f:ec:08:f2:b2:
25:ff:4e:4c:ed:f1:ac:9b:1a:10:81:88:e4:96:e3:51:4a:19:
df:d2:f5:86:7d:03:07:c5:02:07:b6:cb:88:c5:c0:f1:4f:9b:
af:26:ee:fb:fe:da:4b:46:69:30:71:72:d7:89:b9:72:21:be:
35:69:2a:36:d6:93:df:87:8f:33:13:b6:4c:76:81:9a:f4:62:
8b:22:f0:a7:cd:76:ca:96:f5:26:8a:d5:11:b2:32:08:1d:ad:
5f:a0:26:57:13:af:51:62:13:ac:f4:99:e3:75:c4:39:52:51:
2f:11:e2:7a:6e:23:67:f4:dd:e6:8c:b7:0b:49:e5:40:93:d2:
0b:6c:9a:61:70:e5:b5:1a:f2:c2:c1:f4:74:bc:88:58:40:22:
b4:ba:35:35:c9:31:53:d1:a8:86:1e:41:92:0f:ae:5a:40:ce:
a5:10:49:c7:3b:62:fd:47:68:44:a3:04:c8:ef:fa:f8:a8:82:
8f:4f:97:86:51:64:44:b7:55:59:ea:19:df:67:a6:ef:24:95:
24:11:12:87:c6:6f:75:fb:8b:37:c0:b4:fc:6f:13:e5:10:99:
53:f4:a0:f5:b6:ff:6e:1b:c5:2c:71:31:d7:2c:da:38:bd:3a:
b5:91:dc:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 02:19:15 2026 by rpki-client