Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/538CB27E1DE311F1BFF6B490DAE4EC9C.roa
File: 538CB27E1DE311F1BFF6B490DAE4EC9C.roa (raw, json)
Hash identifier: UmAH4woaFFlp8UQMT1enSL2O384YboD8uji/+I5Nswc=
Subject key identifier: 14:73:7B:37:93:75:24:37:54:7C:AD:A2:3E:AD:C6:1C:6E:24:AB:ED
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A448
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/538CB27E1DE311F1BFF6B490DAE4EC9C.roa
Signing time: Thu 12 Mar 2026 07:16:03 +0000
ROA not before: Thu 12 Mar 2026 07:15:57 +0000
ROA not after: Sun 22 Mar 2026 07:15:57 +0000
asID: 60609
IP address blocks: 45.200.136.0/24 maxlen: 24
45.200.137.0/24 maxlen: 24
45.200.138.0/24 maxlen: 24
45.200.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 15 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107592 (0x1a448)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 12 07:15:57 2026 GMT
Not After : Mar 22 07:15:57 2026 GMT
Subject: CN=69b26832-8928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:55:6d:78:d4:53:b1:99:f6:72:3e:bb:17:06:
4d:0a:9a:75:b7:31:f6:fb:15:61:84:b6:26:ac:e4:
8f:85:52:36:c8:c7:66:05:1d:16:3b:c5:11:a8:e3:
13:bd:86:83:e1:5d:3e:63:0f:b0:1a:e2:f0:f4:ba:
36:bb:6f:7e:82:d0:27:69:75:87:5e:80:8e:9c:f6:
a1:26:19:9b:07:50:45:54:0f:3e:59:71:13:68:1c:
d9:30:8a:49:d4:00:d9:18:7b:b1:48:84:01:3d:0e:
9e:c9:6b:05:9c:54:5a:b0:33:b2:32:97:31:72:88:
43:b6:c9:99:3b:87:ef:94:ea:ed:90:f9:a0:16:7e:
00:c4:f6:61:f2:3c:31:fd:8a:30:a6:1b:3d:cf:df:
64:94:0e:8c:90:aa:9f:d8:7c:9b:a4:3e:0a:3a:d7:
19:6f:50:74:1d:8e:1a:a6:99:47:22:c1:95:bf:84:
21:24:6c:4f:e1:b6:c5:1e:d4:3e:ce:94:d4:97:00:
39:5c:a9:61:40:30:03:75:4f:5c:ff:9a:6e:56:12:
a8:1f:f2:20:51:f7:2c:29:e7:89:70:8a:4d:b9:5d:
cb:42:2c:66:76:7c:d6:70:d4:89:e2:3a:ff:aa:37:
fd:19:d8:03:33:eb:ed:97:37:06:9b:48:78:6e:3a:
a8:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:73:7B:37:93:75:24:37:54:7C:AD:A2:3E:AD:C6:1C:6E:24:AB:ED
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/538CB27E1DE311F1BFF6B490DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.136.0/22
Signature Algorithm: sha256WithRSAEncryption
68:c4:70:a4:86:75:a0:a1:b4:57:f6:ad:e4:9b:9f:be:ec:27:
0d:38:d5:29:94:24:cd:3f:c0:8c:c8:f3:fd:d2:d2:1e:0f:a7:
47:b3:9c:87:5c:f6:7b:2a:9b:e1:6b:69:ea:2c:f5:19:87:fe:
f0:9f:17:eb:46:18:60:01:af:d2:53:c7:ad:8d:86:72:80:4e:
00:30:42:b2:c4:44:1e:41:18:13:4a:4e:63:42:c1:4f:fe:a8:
57:58:68:d2:69:8e:de:e2:95:0e:dc:54:ae:a3:7c:c7:7e:51:
1e:21:04:69:05:9e:28:4f:c7:34:b3:02:75:76:8b:eb:e4:51:
57:0a:71:ad:dd:2e:55:98:59:05:e2:a9:bf:7f:53:82:23:aa:
63:bf:b6:c4:0c:bd:38:69:41:61:26:13:c0:f3:94:73:7d:3e:
33:c0:2a:68:5d:58:ce:c1:22:0a:91:4e:81:29:aa:bb:c6:f8:
d4:1a:63:78:8a:a5:db:01:60:d8:ff:6c:37:8a:2a:77:60:6d:
74:fc:f5:22:12:1a:b3:4f:ec:53:f6:83:fd:16:e0:15:24:6c:
e5:2a:9a:6c:10:44:6a:16:42:4b:d6:3c:4b:bb:bc:ad:b8:9e:
03:f4:ee:f9:35:f4:c9:42:f4:2c:cd:a6:05:f3:37:de:6e:56:
0f:63:80:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 16:26:16 2026 by rpki-client