Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/932A89BA17DF11F1BB68E5BDDAE4EC9C.roa
File: 932A89BA17DF11F1BB68E5BDDAE4EC9C.roa (raw, json)
Hash identifier: g0MvliP01I/ceEfQayn3oX1mQAKeccDjkvLMnAOLmF8=
Subject key identifier: 3F:F0:2A:02:86:CF:07:E4:95:D4:67:02:91:25:2E:F0:7E:EA:45:91
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A276
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/932A89BA17DF11F1BB68E5BDDAE4EC9C.roa
Signing time: Wed 04 Mar 2026 15:34:04 +0000
ROA not before: Wed 04 Mar 2026 15:34:00 +0000
ROA not after: Fri 13 Mar 2026 15:34:00 +0000
asID: 14315
IP address blocks: 45.196.114.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 09 Mar 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107126 (0x1a276)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 4 15:34:00 2026 GMT
Not After : Mar 13 15:34:00 2026 GMT
Subject: CN=69a850ec-9574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:83:e9:c9:0f:aa:1c:2d:12:f4:04:fe:5d:70:
b1:d4:10:ac:16:30:5c:e7:50:22:3d:b7:b8:ae:2a:
16:97:63:c9:03:76:50:93:95:c5:db:83:e3:61:66:
7d:a9:5e:ea:37:e9:98:a0:47:19:be:6c:5e:1c:0f:
ca:e8:52:6f:2e:0e:45:ae:eb:27:3a:dd:72:71:12:
20:f6:0c:af:5f:21:3c:d8:50:7b:cd:27:42:b8:ee:
5b:87:d5:b6:83:55:d1:4b:38:6d:28:0d:9e:a2:6c:
f8:c0:53:b9:4d:69:e0:3f:c8:01:1c:9f:ac:2b:27:
1a:99:f4:07:d9:24:d2:6f:b1:15:f3:65:ed:fd:1f:
cc:0c:36:42:e8:93:70:69:c5:cf:76:11:1c:37:fb:
a7:fc:81:7f:05:d9:2f:fd:6c:8e:ce:80:ff:1c:8b:
de:30:15:42:3c:f8:89:3f:b9:5c:94:b9:85:b2:73:
6c:91:60:18:8c:1c:bf:d7:d2:65:8b:02:4b:06:30:
9b:a8:78:1c:c3:53:cb:d9:30:9d:28:e5:16:0b:d6:
75:80:fc:d6:9a:cc:5f:75:7d:93:9f:e9:1d:a2:4c:
07:1e:7d:06:c8:29:93:1d:30:f3:a4:62:1c:50:86:
9e:84:3e:e7:6a:3d:85:75:f6:a7:7d:0c:65:e1:cd:
8c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:F0:2A:02:86:CF:07:E4:95:D4:67:02:91:25:2E:F0:7E:EA:45:91
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/932A89BA17DF11F1BB68E5BDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.114.0/23
Signature Algorithm: sha256WithRSAEncryption
63:e2:14:33:e8:1d:95:93:f9:7f:4e:11:a0:96:1f:91:df:96:
e6:ae:b6:3c:6c:ed:88:0d:13:60:46:d9:26:5b:32:1c:39:b0:
d2:99:f6:51:c9:0c:86:26:bb:83:30:0f:bd:ae:71:dd:e2:b3:
e1:1f:8a:7a:a3:39:85:e8:49:9a:e2:73:c9:55:2e:7e:13:de:
a5:c2:35:f0:dc:a2:98:38:c4:56:fe:a3:64:78:42:42:e4:8e:
fe:5b:ca:50:1c:0e:6e:35:75:91:46:a9:f6:75:14:a1:07:bf:
8d:0b:0e:2a:59:ec:c9:9b:09:4f:58:72:18:fa:d8:69:24:96:
ef:8d:6b:0e:65:3b:7b:f4:0e:a8:1f:14:82:79:cd:cd:88:33:
94:48:06:d6:8f:ac:9d:ba:02:13:96:a0:8d:c5:03:9a:49:c3:
47:7b:ab:18:e0:0b:5c:f9:dd:0a:14:78:56:dd:14:03:a1:25:
0c:94:43:ce:79:1b:d3:6f:94:70:3c:53:fe:b3:5e:6a:46:32:
30:ae:87:18:df:63:b8:10:63:1c:0b:ce:8a:78:a7:b9:82:6a:
96:d0:c4:3e:d1:c8:2e:d8:f3:e7:be:ee:31:d1:3d:d7:fd:3d:
db:a1:4c:db:60:31:bc:63:87:0b:7f:f2:94:9d:28:23:a3:68:
d4:80:5e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 18:59:33 2026 by rpki-client