Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/90CE22721E2311F18E736780DAE4EC9C.roa
File: 90CE22721E2311F18E736780DAE4EC9C.roa (raw, json)
Hash identifier: c+hRYnrdMxQMVFSB4qB2tOMADUsT0ki9s0EyP0H5bgs=
Subject key identifier: DD:25:C8:C0:C1:AC:2F:15:E4:85:D9:71:55:33:38:88:24:DD:C1:FE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A4B6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/90CE22721E2311F18E736780DAE4EC9C.roa
Signing time: Thu 12 Mar 2026 14:55:53 +0000
ROA not before: Thu 12 Mar 2026 14:55:49 +0000
ROA not after: Sat 13 Jun 2026 14:55:49 +0000
asID: 135097
IP address blocks: 45.207.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 14 Mar 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107702 (0x1a4b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 12 14:55:49 2026 GMT
Not After : Jun 13 14:55:49 2026 GMT
Subject: CN=69b2d3f9-63eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ab:08:69:cf:22:31:00:d8:1c:e7:9b:66:1c:
22:ea:10:40:cc:f3:a0:35:5c:7e:5b:40:40:fb:93:
77:e7:69:1f:92:93:66:b2:d4:34:8c:44:31:93:1b:
e0:01:30:85:83:f3:2f:aa:2a:fb:e2:08:a3:f5:a1:
bb:23:01:a6:5e:c2:3e:b3:28:37:7b:2a:82:10:de:
d3:a0:9b:24:ce:e4:b4:19:d1:bf:19:3b:96:a1:96:
c3:86:4e:46:4f:10:27:29:e3:2c:7c:68:34:b8:ed:
72:1d:e5:86:10:95:c0:89:32:db:d4:5c:71:75:5c:
4c:84:88:cb:a3:73:ed:5c:6b:a4:da:78:26:e0:f1:
6c:ab:70:23:68:ab:32:82:dd:b9:9f:6e:bf:91:96:
30:df:e1:11:de:1e:7d:c9:34:71:3d:81:35:a0:81:
d2:82:81:47:bc:b9:84:f8:2f:69:60:e7:0d:62:60:
16:88:18:4f:e9:7c:0e:2d:d1:92:7c:cd:a6:10:aa:
3b:ba:45:a2:60:6f:df:82:6f:2b:02:77:22:59:45:
0e:db:3c:52:12:c8:7a:d9:1a:74:78:d0:dc:a3:34:
e3:ce:b6:d2:70:74:1c:16:92:46:30:ae:1f:f8:9f:
66:3c:6e:31:9b:0d:72:f6:34:3b:a0:76:da:dd:d9:
6f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:25:C8:C0:C1:AC:2F:15:E4:85:D9:71:55:33:38:88:24:DD:C1:FE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/90CE22721E2311F18E736780DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.64.0/18
Signature Algorithm: sha256WithRSAEncryption
79:5a:99:3d:53:b6:af:4f:e8:1d:a3:b4:95:e1:32:e3:17:02:
2f:91:56:ae:b9:9a:4a:95:fb:6f:55:e6:bf:bb:1c:9f:3c:4a:
d1:3c:40:03:de:dc:27:5a:45:32:ef:c2:2e:a7:ac:89:75:c4:
69:f0:21:74:bc:04:83:4c:30:72:dc:08:e4:56:66:d5:03:cc:
96:83:e4:c8:4b:b9:ad:86:f0:5e:1e:05:81:2c:77:6d:08:0a:
9d:d7:cc:a7:29:78:72:7f:7e:bc:bb:2f:ee:fa:18:7b:df:d7:
51:2b:ae:74:f9:d4:10:93:8b:aa:95:76:db:69:ed:b7:56:4b:
da:bc:24:c3:bd:82:62:f0:b8:25:a7:17:9c:c0:fb:38:b3:25:
39:6c:9b:d6:b0:68:4e:27:07:80:1f:fb:6c:ab:21:ac:92:07:
7c:57:7f:02:ba:ef:46:b5:c4:c0:35:93:6e:0e:18:c0:e1:0c:
91:b9:54:71:37:72:b9:fb:0b:4a:49:7b:94:1d:c9:0c:1f:c9:
97:44:92:00:d5:cb:ef:e1:f9:8f:96:1a:3a:03:8d:06:00:54:
fd:d8:f6:d7:79:47:db:28:88:07:b5:aa:ae:69:6e:c3:18:a3:
d9:51:79:48:b2:db:f3:b6:cd:11:e8:1a:60:54:cc:cf:fa:c8:
c7:25:f4:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 01:26:27 2026 by rpki-client