Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DB3595FE07E211F1955E3F8FDAE4EC9C.roa
File: DB3595FE07E211F1955E3F8FDAE4EC9C.roa (raw, json)
Hash identifier: o3W917CQ+XppU2rs8+llw9VgM/vRToi3C6kpU1DMNJY=
Subject key identifier: C5:86:80:70:17:AB:30:F7:AF:0B:F1:A3:9C:B5:0A:C1:10:A8:B6:B7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019D1E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DB3595FE07E211F1955E3F8FDAE4EC9C.roa
Signing time: Thu 12 Feb 2026 07:17:15 +0000
ROA not before: Thu 12 Feb 2026 07:17:10 +0000
ROA not after: Mon 23 Mar 2026 07:17:10 +0000
asID: 272951
IP address blocks: 45.195.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 20 Feb 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105758 (0x19d1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 12 07:17:10 2026 GMT
Not After : Mar 23 07:17:10 2026 GMT
Subject: CN=698d7e7b-4bd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:12:33:a0:2f:a4:4b:40:b2:bc:cc:9b:db:33:
3f:31:df:9b:32:ad:b8:b4:b7:cf:1a:6d:bb:e8:e3:
96:57:be:e7:34:71:50:24:9f:04:c7:5f:e0:05:f2:
7b:33:39:18:4c:ab:01:43:89:87:a7:68:b0:35:45:
7e:dc:fd:32:4f:cf:20:49:4f:a1:42:55:e9:5f:09:
62:ff:3f:06:a2:64:a8:3d:78:3a:6d:a2:2f:06:99:
b7:17:65:5a:90:bc:ae:c8:1a:40:92:c2:6d:d7:e6:
dd:16:2c:c1:8a:ab:70:ad:77:4b:fc:83:ff:4f:f9:
bb:e1:8a:4e:4d:fc:c5:8e:76:3e:27:c4:94:d1:79:
1d:4b:86:27:c8:b4:d9:31:cf:cc:cf:f8:6d:f8:06:
ad:9f:15:bb:6e:e3:9f:67:09:10:27:8a:b2:71:ba:
e8:5a:92:28:25:1f:9f:ea:97:37:a2:ba:1c:54:94:
13:ab:52:28:e3:b3:fd:7c:37:fa:87:27:78:ad:a4:
3a:2e:16:19:7a:de:49:7c:1c:78:bb:24:c2:7d:5f:
13:d6:be:3c:eb:4e:3e:c4:01:1c:01:50:64:f3:40:
3b:b1:de:ba:1e:e1:e0:f9:1f:40:10:30:0e:fb:8e:
ca:a5:08:15:77:1a:7d:18:4a:6e:6f:92:fc:55:60:
65:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:86:80:70:17:AB:30:F7:AF:0B:F1:A3:9C:B5:0A:C1:10:A8:B6:B7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DB3595FE07E211F1955E3F8FDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.94.0/24
Signature Algorithm: sha256WithRSAEncryption
30:d5:72:c3:2d:2b:54:b0:f0:b9:0d:b9:01:8a:47:e1:57:ec:
6d:da:6a:01:70:7d:4e:8c:c9:6c:49:85:71:03:93:80:90:25:
b3:b2:18:52:09:c9:ae:20:48:a7:bd:34:8f:ce:43:87:06:bb:
f2:ad:18:13:e7:18:b3:c4:74:56:4b:80:a7:2a:90:09:a2:bc:
07:6f:67:79:4b:08:d7:04:24:67:1d:7f:a8:6b:9c:38:20:12:
77:3a:c0:9f:c5:6a:d7:7f:08:a6:16:f8:b3:db:97:73:ae:91:
0c:db:a3:ad:e0:8d:32:49:b7:b3:64:ef:1d:ed:67:48:ed:2f:
f3:b8:b0:c1:92:2e:b6:b8:3f:c0:06:cf:15:52:52:f3:e8:0c:
9b:41:f2:01:de:a7:32:64:fc:a5:33:37:23:27:02:b7:a3:eb:
f9:07:8f:44:62:ef:59:77:69:37:6e:63:b1:10:fa:9f:2b:92:
7b:ef:ec:c6:68:dc:30:61:e3:ed:0d:24:b1:75:52:af:e3:3e:
b7:ae:ae:98:cf:07:5d:15:3a:61:cd:28:04:a0:f4:66:6d:27:
1a:fb:98:6a:82:97:1b:0b:3e:ed:5d:84:80:29:9a:4d:3d:c4:
dd:ba:d5:d8:7d:5d:90:14:ce:4c:4b:fb:30:4f:07:65:43:50:
6e:18:a8:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 18 21:34:32 2026 by rpki-client