Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1FFBA76E1D2311F1814F6BADDAE4EC9C.roa
File: 1FFBA76E1D2311F1814F6BADDAE4EC9C.roa (raw, json)
Hash identifier: zeIVOZ5lPP59bWB9baQDVzpgLtqz8IRxgMm2qqmZRjU=
Subject key identifier: 3A:DC:DA:12:39:53:83:E3:78:6D:6C:74:9D:1F:81:9D:00:F9:93:AC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A41B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1FFBA76E1D2311F1814F6BADDAE4EC9C.roa
Signing time: Wed 11 Mar 2026 08:20:13 +0000
ROA not before: Wed 11 Mar 2026 08:20:07 +0000
ROA not after: Sat 18 Apr 2026 08:20:07 +0000
asID: 395886
IP address blocks: 45.205.4.0/24 maxlen: 24
45.205.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 25 Mar 2026 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107547 (0x1a41b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 11 08:20:07 2026 GMT
Not After : Apr 18 08:20:07 2026 GMT
Subject: CN=69b125bd-98ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9e:70:3d:d5:78:81:c4:6f:da:5a:6a:cc:aa:
cc:5b:be:10:cd:7a:90:bf:93:90:2d:e8:18:89:4c:
52:be:b9:12:20:4d:ef:2f:d2:6b:b1:0c:3e:ae:6f:
b1:25:62:d9:14:f3:72:21:58:3f:8c:40:6a:00:ed:
ee:ab:3b:fe:91:2a:cb:35:46:ff:13:fd:64:d0:c5:
9d:81:cd:af:ea:98:30:91:69:c3:07:44:24:7c:dc:
e0:be:e5:c4:67:c0:e6:45:d8:1b:10:a2:3c:0f:b8:
e4:cf:51:1d:04:37:95:ca:a0:0c:c1:09:15:f6:1b:
69:09:9a:aa:37:6a:e5:50:41:ed:4f:80:67:bd:b1:
62:41:4d:76:20:bf:59:31:b7:87:6f:c2:f0:2b:cc:
ba:ca:4b:bd:63:ed:2e:a9:23:b7:eb:b3:00:56:47:
16:38:35:33:77:3b:d8:e3:38:95:2e:94:f7:8d:51:
32:f1:13:31:99:ce:46:11:20:4e:e9:19:e8:8a:9a:
96:a6:9f:77:65:25:bd:60:ad:98:91:0d:1c:69:38:
70:ae:a7:e5:f9:fd:be:4f:41:60:c9:3c:c6:88:09:
78:2a:6e:a1:3d:05:c5:a8:a1:b7:af:0f:f2:16:55:
f0:29:81:2c:dd:d6:31:ea:49:2f:38:64:c3:28:02:
86:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:DC:DA:12:39:53:83:E3:78:6D:6C:74:9D:1F:81:9D:00:F9:93:AC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1FFBA76E1D2311F1814F6BADDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.4.0/23
Signature Algorithm: sha256WithRSAEncryption
7a:d5:86:dc:a4:bd:37:01:e2:42:c7:4b:f0:b1:f9:0f:f7:9c:
c5:07:ac:b8:38:d7:51:7f:f1:53:93:d5:ab:dd:90:44:d5:2f:
50:87:d0:d1:db:fb:a7:f2:83:95:58:31:38:a3:fa:bc:6f:56:
26:cf:6a:36:c8:17:40:73:06:3a:57:41:f2:b4:d6:34:2a:ae:
6b:f1:4d:9e:13:17:2b:94:c8:e0:f9:7d:cc:b8:e0:c9:08:ab:
ae:07:ef:0c:b9:14:d5:3b:e9:ca:80:37:ae:73:2b:16:c4:58:
94:59:00:c3:c9:e8:4a:e2:15:b2:24:7a:21:c9:e6:03:d9:85:
5d:ff:c7:42:46:2f:b0:46:a2:b1:6a:e3:5b:38:76:c4:ca:e0:
85:ed:45:c6:24:52:32:9a:0c:c8:60:ab:09:de:44:9e:9e:8b:
d8:ae:a0:65:3b:3f:79:f9:7e:72:7f:0d:42:dc:10:50:bf:b3:
3c:8f:6a:7f:d9:3f:02:b4:3a:05:41:d6:cb:98:b9:61:6f:c2:
7c:99:0d:c6:88:a4:4a:ab:93:f1:64:cc:27:51:0c:8c:ed:b5:
6e:5a:a6:d3:d1:a7:cf:45:1a:4b:23:44:13:ae:5d:42:09:e8:
eb:e5:b0:26:0c:d1:a1:92:c6:f4:c0:90:e7:45:f5:de:f5:a4:
13:da:7c:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 23 20:17:48 2026 by rpki-client