Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/12F3FC7A29D911F1B99725CCDAE4EC9C.roa
File: 12F3FC7A29D911F1B99725CCDAE4EC9C.roa (raw, json)
Hash identifier: 7qHwlTXpsn7NIwwoHY5Y9180oHFAK82nn0anG2Qaxs0=
Subject key identifier: D3:80:2A:9B:53:B9:B8:FB:AC:86:95:78:FC:84:24:98:4C:B6:FA:22
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A7CF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/12F3FC7A29D911F1B99725CCDAE4EC9C.roa
Signing time: Fri 27 Mar 2026 12:32:53 +0000
ROA not before: Fri 27 Mar 2026 12:32:48 +0000
ROA not after: Sun 10 May 2026 12:32:48 +0000
asID: 2914
IP address blocks: 45.192.232.0/24 maxlen: 24
45.192.244.0/24 maxlen: 24
45.201.12.0/22 maxlen: 24
45.202.74.0/24 maxlen: 24
45.204.149.0/24 maxlen: 24
45.204.150.0/24 maxlen: 24
45.204.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 10 Apr 2026 00:26:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108495 (0x1a7cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 27 12:32:48 2026 GMT
Not After : May 10 12:32:48 2026 GMT
Subject: CN=69c678f5-fb45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:80:4b:6f:51:4f:a8:7b:5a:68:56:a1:41:9c:
65:94:f5:6e:ce:cf:27:6c:ed:b9:68:6d:a8:c1:5c:
90:d0:ad:81:ef:23:9e:70:f4:27:61:e2:0d:9b:81:
f0:61:b2:8f:10:f8:06:73:a8:37:45:ad:fa:ae:27:
63:50:22:db:2d:c3:ec:52:b6:a2:6b:93:55:c0:9b:
32:25:c5:2f:76:8b:df:bd:77:5f:3d:ab:f0:92:c9:
ec:53:65:9d:b5:17:eb:cc:e2:b4:2f:b5:00:c7:21:
3b:05:0a:47:ea:56:6c:bd:14:22:f6:27:ab:f7:38:
d7:69:37:8f:dd:c0:3b:28:65:61:1c:be:7b:c9:e1:
3d:9e:7f:70:8d:12:16:96:2a:3c:a9:6c:74:f5:6b:
aa:69:74:d2:fc:22:e5:c9:1c:66:c1:3c:f2:c3:c2:
01:e8:48:fd:be:d5:f9:cf:31:bd:3c:17:bc:d7:7e:
89:b7:01:f9:20:f2:2b:1d:18:a7:a2:d7:fa:8f:0e:
17:37:97:3b:18:c1:1e:10:dc:9c:09:c2:38:9c:44:
e6:07:66:31:93:e7:2c:80:99:28:9f:c0:43:0f:f7:
b3:9d:79:64:eb:76:9f:5c:39:6b:3b:d4:c1:00:dd:
9f:03:7a:1e:27:8e:56:ff:6b:af:e5:09:3b:83:4c:
b1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:80:2A:9B:53:B9:B8:FB:AC:86:95:78:FC:84:24:98:4C:B6:FA:22
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/12F3FC7A29D911F1B99725CCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.232.0/24
45.192.244.0/24
45.201.12.0/22
45.202.74.0/24
45.204.149.0-45.204.151.255
Signature Algorithm: sha256WithRSAEncryption
7a:83:24:23:c6:d6:0d:a6:20:9b:3f:2f:77:78:fc:45:f8:c0:
45:03:96:5d:2e:1c:0e:69:85:73:fe:ab:cf:ce:51:25:d8:d2:
2f:38:45:c8:82:cc:27:9c:86:e3:00:be:1a:2a:af:35:65:04:
a9:cb:f4:ca:b2:88:ea:29:f5:0f:d0:a5:29:fe:c0:86:2a:a8:
e6:9c:94:20:0a:c9:eb:49:c8:a9:7a:6d:03:23:30:91:32:6d:
3c:37:13:2a:28:df:00:4a:d2:eb:16:cf:0c:f8:e4:93:c2:63:
99:10:a2:9b:dd:bd:be:04:39:cd:4f:2d:d8:f5:02:92:89:e3:
69:b1:71:22:8f:fd:ec:22:a7:91:42:21:98:f5:c7:52:bd:99:
94:c0:bf:24:8f:07:80:7d:6c:77:de:74:cd:fc:7a:9b:ff:e5:
5a:4d:94:57:bc:4a:f3:30:a7:27:66:58:0c:af:30:a5:d3:12:
80:9d:a0:24:45:0d:85:50:4d:bb:17:35:62:6a:30:b4:c7:10:
2b:85:01:98:ff:0d:49:98:18:35:3d:f2:21:42:04:75:5b:3e:
25:74:23:35:bb:98:6e:57:4a:ae:7c:a3:a8:8e:d9:14:15:08:
cb:c1:1f:07:b3:b4:75:1f:a7:78:8a:17:4b:03:5a:5e:58:e8:
cd:30:4f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 14:50:12 2026 by rpki-client