Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/352CA8D8430511F18D3696E2CE1D38B0.roa
File: 352CA8D8430511F18D3696E2CE1D38B0.roa (raw, json)
Hash identifier: sp38169w5raeJILa2mxZjedk9ept7pquHs4pSwSr5+o=
Subject key identifier: F3:97:4E:3C:4D:B3:95:19:E9:82:D7:5B:E9:17:9A:95:8B:A6:70:D7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AFAC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/352CA8D8430511F18D3696E2CE1D38B0.roa
Signing time: Tue 28 Apr 2026 13:21:47 +0000
ROA not before: Tue 28 Apr 2026 13:21:43 +0000
ROA not after: Thu 04 Mar 2027 13:21:43 +0000
asID: 150293
IP address blocks: 45.196.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 04 May 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110508 (0x1afac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 28 13:21:43 2026 GMT
Not After : Mar 4 13:21:43 2027 GMT
Subject: CN=69f0b46b-958a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c7:1e:ac:31:6f:e3:b9:00:06:92:36:e6:f5:
2f:e9:ed:8c:97:51:a6:38:73:cb:cc:57:f9:04:18:
15:d1:36:90:a5:6a:9b:5a:c1:95:8d:d3:72:ae:06:
fc:3d:b4:2a:e2:42:f9:b3:60:51:a3:3a:c9:7f:94:
84:13:8d:b1:79:97:45:2f:3a:be:50:d9:93:49:4b:
d4:b1:33:a3:97:70:d4:a5:52:5e:ea:75:32:83:ba:
40:90:89:5c:95:04:cb:0e:41:b2:ca:4e:3e:8c:d3:
5e:40:6c:3f:54:75:33:93:10:48:fe:78:aa:3a:7f:
35:93:15:99:23:0e:8e:af:87:4f:e3:9f:14:14:4a:
c2:92:4e:a4:ad:8c:2d:03:49:6c:07:a9:63:a5:05:
a6:b4:a2:0f:d0:4a:b7:28:09:9f:97:fb:de:91:6d:
04:21:3d:af:2e:82:a6:4f:9d:0a:77:31:f7:59:44:
7f:8a:dd:e5:86:00:53:d8:8e:46:2e:ae:f5:e3:82:
7b:70:88:bf:30:68:77:30:67:00:05:b1:eb:cf:1f:
77:b0:0f:16:af:1b:0f:b3:ca:ce:48:de:b7:cb:64:
88:f4:dd:e0:88:b3:9c:f8:66:f0:ca:51:da:d3:72:
08:ba:69:ca:19:41:f7:59:f4:cf:5e:60:b4:a9:fe:
96:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:97:4E:3C:4D:B3:95:19:E9:82:D7:5B:E9:17:9A:95:8B:A6:70:D7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/352CA8D8430511F18D3696E2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.79.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:69:be:25:ae:b2:7d:24:ca:8b:b3:ca:d9:b4:fa:71:e6:0e:
e5:58:6c:1e:f3:eb:26:8e:ed:f4:fa:15:fe:c7:be:a3:f3:14:
b0:d8:28:03:87:3d:18:dd:86:a3:62:b0:9b:21:58:36:ca:e6:
00:b9:c6:67:e8:d0:d0:0f:34:0d:00:bb:63:eb:e6:6c:19:22:
36:f6:e2:5c:7c:d8:18:ef:c3:30:54:43:29:23:99:16:d7:cb:
7e:cb:fc:a5:39:f2:17:d4:1f:9b:4d:05:22:e1:2f:57:2a:27:
47:b8:b6:bd:84:ed:d1:33:46:22:9e:14:19:13:70:58:c1:50:
f7:8e:b0:0b:2e:00:e9:2d:41:03:bf:55:08:67:c8:8e:6c:1b:
90:67:8a:9a:8b:f1:d0:58:39:d0:11:cb:a3:28:af:46:dc:4a:
8c:88:de:16:72:5e:d3:46:1c:44:a0:ec:4a:d6:be:fb:56:a4:
bc:40:36:c4:36:c1:b8:af:0c:2d:80:f7:eb:db:d3:40:64:10:
36:b4:be:ae:70:80:7e:df:65:59:cf:18:1e:9a:d9:1f:88:c2:
aa:4a:04:eb:a0:44:3b:97:c1:b6:e4:a5:e5:85:aa:9d:ac:9e:
94:aa:db:2f:62:ab:e7:1e:61:65:24:6e:1e:2a:5b:b7:ad:92:
c1:b4:55:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 2 09:13:11 2026 by rpki-client