Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8DFE0BA8187D11F1897D7C92DAE4EC9C.roa
File: 8DFE0BA8187D11F1897D7C92DAE4EC9C.roa (raw, json)
Hash identifier: dlcdZIZH3j9uJEb5jjm2Rb+ro25e0WM8jrzON5tt47Y=
Subject key identifier: 91:13:47:AD:1A:95:4D:9B:29:5E:AA:A8:99:74:F2:E6:41:A3:CC:E7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A2A7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8DFE0BA8187D11F1897D7C92DAE4EC9C.roa
Signing time: Thu 05 Mar 2026 10:24:56 +0000
ROA not before: Thu 05 Mar 2026 10:24:51 +0000
ROA not after: Wed 22 Apr 2026 10:24:51 +0000
asID: 401701
IP address blocks: 45.192.96.0/20 maxlen: 24
45.205.16.0/20 maxlen: 24
45.207.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 23 Mar 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107175 (0x1a2a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 5 10:24:51 2026 GMT
Not After : Apr 22 10:24:51 2026 GMT
Subject: CN=69a959f8-8a56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2c:48:a6:4a:0b:4a:3c:fe:cb:c0:8c:89:ff:
ff:04:1d:46:47:66:16:20:ea:59:9d:81:18:43:d1:
ca:6d:ad:95:a2:51:c9:ed:d2:8d:b1:f1:5b:63:83:
6a:c5:94:cd:20:6f:cd:e4:d6:e5:48:12:a9:b6:21:
f3:ff:51:53:43:8e:7c:c2:dd:50:67:e5:c8:4d:0a:
60:2f:49:de:c0:57:a5:48:be:6a:4d:76:a1:77:36:
dd:6e:d9:10:06:64:3d:85:62:8a:44:df:95:13:09:
e0:ff:b9:d1:49:8b:bc:ea:af:42:69:55:dd:51:b3:
f1:50:e7:ec:7f:93:a5:7a:21:98:b3:42:03:f7:4e:
39:f5:f3:c9:b8:f4:8d:df:d4:3f:e2:1e:04:e7:7b:
f4:39:5c:52:5b:59:79:24:40:c3:01:ab:7e:6a:6b:
f5:77:a1:6c:e0:c3:f5:f4:70:f4:96:36:b3:16:f1:
ea:7e:ef:53:43:23:6c:9e:74:58:83:44:02:26:1f:
64:9f:d1:cf:90:d5:ae:91:56:dc:0d:c9:39:e0:dc:
37:ce:b7:f5:a4:07:4d:bc:98:d0:36:12:3d:fe:89:
5d:f1:75:8b:52:00:3d:80:30:2c:91:ed:21:e2:25:
f3:50:0d:2c:30:7d:90:ad:b0:16:b0:35:48:06:97:
d0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:13:47:AD:1A:95:4D:9B:29:5E:AA:A8:99:74:F2:E6:41:A3:CC:E7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8DFE0BA8187D11F1897D7C92DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.96.0/20
45.205.16.0/20
45.207.192.0/19
Signature Algorithm: sha256WithRSAEncryption
54:01:57:b4:0b:c1:8a:45:12:cc:23:c5:af:64:d4:16:6f:59:
f3:0a:b6:51:2f:c1:4f:06:bb:f9:ce:93:0d:2e:10:e0:3c:74:
5a:01:dd:d1:15:36:72:cd:21:59:40:f9:dd:d1:79:7a:bd:14:
22:65:dc:67:94:bc:11:a6:ff:67:2e:f1:c6:19:eb:f1:bc:a2:
ce:25:b9:03:5d:9b:b5:2b:9d:c0:48:69:0d:0f:c8:c3:e5:e5:
53:1f:68:7e:7a:02:a9:38:3b:19:d5:ba:55:90:d8:78:b1:0d:
b6:f4:dd:9c:8d:7b:3e:17:8e:12:d8:05:99:64:1d:a3:6f:aa:
74:65:c3:74:ac:d4:24:87:7d:25:10:1d:68:10:b9:1c:52:22:
5e:cf:97:98:c1:12:13:29:30:ac:72:94:ea:b6:76:bd:52:9b:
c9:22:f7:58:62:54:78:e0:7d:c4:8e:2f:32:eb:eb:ed:f8:bc:
a3:a9:e5:85:94:b1:bb:93:73:e1:71:34:cb:31:2d:e5:db:08:
15:5a:70:58:6a:5e:8c:80:2e:0a:39:6c:d3:49:8b:f7:de:2c:
3c:d1:84:8e:42:75:51:75:d9:fe:92:22:5a:89:d3:d6:b3:3f:
5b:08:36:65:32:d6:3d:24:04:58:31:0a:2c:2f:1a:a5:fb:6c:
f0:c4:b3:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 17:17:26 2026 by rpki-client