Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/85BE09B8071911F1975E38B9DAE4EC9C.roa
File: 85BE09B8071911F1975E38B9DAE4EC9C.roa (raw, json)
Hash identifier: M+nGl5554pjAFjzO2qzo2v/nap7N9QFfkIo48C/kM/c=
Subject key identifier: FC:03:DC:78:AF:A2:95:65:74:12:AB:21:24:06:2D:69:3E:7D:6C:9A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019CCF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/85BE09B8071911F1975E38B9DAE4EC9C.roa
Signing time: Wed 11 Feb 2026 07:16:03 +0000
ROA not before: Wed 11 Feb 2026 07:15:57 +0000
ROA not after: Tue 17 Mar 2026 07:15:57 +0000
asID: 397423
IP address blocks: 45.194.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 25 Feb 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105679 (0x19ccf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 11 07:15:57 2026 GMT
Not After : Mar 17 07:15:57 2026 GMT
Subject: CN=698c2cb3-f9d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0c:ae:d8:86:8e:6f:6c:ba:08:2e:f9:62:26:
0c:11:12:07:e5:3c:c8:2a:1d:4d:7e:04:3a:98:48:
a6:28:f9:e3:93:2a:c5:39:4e:b9:7d:0d:10:c9:69:
a1:d9:09:8f:b6:ea:f6:02:7e:47:74:90:d1:e3:5e:
72:03:bd:d7:44:d2:7c:f5:f9:a6:61:28:13:50:9e:
1e:b8:7b:bc:2c:ff:c0:3d:4d:f9:7b:e6:b1:70:3d:
7c:91:72:ad:ff:be:c9:fa:75:a0:f6:4f:24:13:9a:
63:74:8c:68:70:32:55:2e:04:9c:91:a0:72:0e:c5:
3f:07:49:37:07:59:86:2e:90:51:1b:a6:f1:74:b9:
60:6c:43:dd:b6:f3:c0:54:c5:d7:a9:d3:9b:2b:ab:
e7:5a:b1:68:3c:1b:e7:2d:05:b5:8c:1b:d8:98:99:
7e:57:c7:08:fd:fd:1c:c1:c8:11:79:fd:9f:98:9e:
f8:7b:c1:35:5b:85:59:43:19:04:7d:9b:32:09:57:
4d:e6:9b:6e:50:4e:98:48:bb:92:44:0e:66:5c:d5:
43:e6:d0:18:d8:f5:60:db:ea:07:78:b3:50:23:67:
7b:66:06:ef:34:8b:f1:ef:60:20:19:77:4b:2b:e3:
37:4a:28:a1:2b:44:81:ef:cc:b2:2c:34:38:68:a3:
d5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:03:DC:78:AF:A2:95:65:74:12:AB:21:24:06:2D:69:3E:7D:6C:9A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/85BE09B8071911F1975E38B9DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.28.0/24
Signature Algorithm: sha256WithRSAEncryption
18:ef:aa:40:3e:61:f9:7a:e4:ef:98:44:10:02:82:e8:ac:ac:
6e:e1:c5:b9:d9:22:4d:0a:c4:4f:fd:e6:ab:e8:cf:40:52:f9:
b0:01:a0:12:9e:2b:cf:4e:b0:f0:1b:b8:59:13:30:be:ba:b6:
24:33:fd:06:ee:d3:58:1e:01:7f:cb:4a:ea:81:77:fd:7d:c4:
f0:e8:4e:cf:ea:46:07:d0:47:fe:c7:cc:c5:31:1f:65:4f:95:
db:cc:c8:4b:56:3b:bb:f2:78:8c:82:44:00:0b:48:ff:ca:84:
2c:b4:a4:71:07:89:eb:c2:39:65:bb:e4:76:01:a6:4b:b0:07:
4f:79:80:ff:11:29:81:b6:8b:05:09:74:43:75:29:1b:b0:b3:
c1:71:7e:bf:0a:f9:a8:60:ba:a1:5b:40:f0:c4:51:6c:89:84:
bb:b1:c4:f8:70:ab:3b:3a:0e:1c:f1:1c:b0:fe:9e:a2:31:59:
da:b9:be:af:28:0d:9d:46:44:6b:24:70:a0:48:53:39:0c:f3:
e2:b3:de:ef:40:b4:f6:36:01:d2:ac:48:92:fd:2d:7f:1c:13:
52:fd:c8:1b:8a:c6:7e:46:ff:26:cc:1b:a1:a1:1e:a2:f4:38:
1a:04:3b:60:b7:01:b3:4e:18:9d:b6:71:eb:aa:4f:16:73:7b:
c2:92:dd:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 03:58:33 2026 by rpki-client