Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/99D97E781B8C11F18FF1A7E2DAE4EC9C.roa
File: 99D97E781B8C11F18FF1A7E2DAE4EC9C.roa (raw, json)
Hash identifier: qph4h19//0e/2uFiQ3l0oQ5ThQ7ofG6XTH73gKVbalg=
Subject key identifier: AD:A1:24:75:3F:01:49:53:BC:95:04:0A:62:78:1D:F0:49:A1:07:BF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A35F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/99D97E781B8C11F18FF1A7E2DAE4EC9C.roa
Signing time: Mon 09 Mar 2026 07:50:11 +0000
ROA not before: Mon 09 Mar 2026 07:50:07 +0000
ROA not after: Tue 17 Mar 2026 07:50:07 +0000
asID: 139613
IP address blocks: 45.197.2.0/24 maxlen: 24
45.197.4.0/24 maxlen: 24
45.197.5.0/24 maxlen: 24
45.199.191.0/24 maxlen: 24
45.202.8.0/24 maxlen: 24
45.202.9.0/24 maxlen: 24
45.202.10.0/24 maxlen: 24
45.202.11.0/24 maxlen: 24
45.202.63.0/24 maxlen: 24
45.204.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 11 Mar 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107359 (0x1a35f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 9 07:50:07 2026 GMT
Not After : Mar 17 07:50:07 2026 GMT
Subject: CN=69ae7bb3-c718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:22:59:97:f0:a4:6b:6b:28:ef:4a:a3:ed:36:
93:57:b9:3a:0f:6f:b1:75:76:96:03:14:fa:78:73:
5e:5d:78:70:e9:6c:78:23:ff:95:82:7c:cb:fb:2f:
49:4b:48:e7:b3:69:35:b2:ba:4a:6e:ae:72:ec:6f:
c4:fe:5d:f8:d2:35:60:ed:ab:c2:96:91:71:c2:ac:
70:4c:27:ca:e8:f7:03:3d:e0:41:d8:7c:a8:ca:53:
93:8d:c5:b8:cf:5c:1a:ab:b0:5a:9e:90:35:c5:0a:
3f:31:17:62:3b:9f:9c:c2:99:57:6e:e1:4f:cb:49:
7d:b3:82:59:97:7f:af:e4:27:4b:ab:8c:b7:8e:61:
ed:f1:c4:ff:bc:a7:5b:d7:b0:b7:36:4a:28:e8:25:
c6:86:cf:0f:8a:52:50:51:63:61:ef:49:68:39:e3:
54:91:ef:9c:ac:1b:eb:d8:46:80:e3:65:5a:d0:2d:
ea:ed:6d:5d:5c:b1:2d:e0:82:93:d0:eb:4c:09:9a:
76:0e:f2:4b:af:d2:ca:14:e5:26:c5:9e:46:a7:d2:
9a:97:f2:7d:6d:4d:63:62:09:28:6a:b7:34:d1:c4:
91:c5:87:e3:cd:bb:20:9d:42:0d:09:54:ad:ca:57:
fd:ed:46:2d:7c:7f:bb:10:de:c5:3f:66:74:8a:cd:
57:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:A1:24:75:3F:01:49:53:BC:95:04:0A:62:78:1D:F0:49:A1:07:BF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/99D97E781B8C11F18FF1A7E2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.2.0/24
45.197.4.0/23
45.199.191.0/24
45.202.8.0/22
45.202.63.0/24
45.204.1.0/24
Signature Algorithm: sha256WithRSAEncryption
69:7f:24:72:c9:22:e3:7d:4a:6d:0a:a5:31:aa:66:3e:00:8d:
f3:45:9f:36:14:df:69:2c:6b:8f:b1:a6:17:07:ad:38:31:1a:
9f:2b:34:ec:f0:a6:04:bc:2b:c8:36:91:22:20:0a:8b:a9:55:
b5:49:d8:3f:84:af:42:ff:9a:64:a8:3a:96:27:9e:4f:27:74:
8a:11:9a:b3:1f:aa:fd:f8:cc:8a:63:26:e3:29:4d:39:57:c1:
ee:47:55:0f:72:06:5f:fa:b6:76:eb:71:75:61:9c:34:54:a0:
06:62:8c:02:00:10:9f:fe:a3:58:48:fb:4a:1d:1f:eb:cf:74:
ee:03:42:3c:06:c7:4f:f4:7d:83:ed:3e:a2:10:39:fa:fb:fa:
b5:4c:5d:ae:e2:16:43:f1:6f:41:3b:fb:35:ab:c9:87:b4:6a:
34:b5:7e:41:92:c4:2b:5d:9d:6d:37:53:c6:f9:e9:aa:53:24:
d9:d2:61:07:50:a7:c8:71:41:26:2b:59:4c:05:56:e5:40:26:
41:30:90:d0:74:bf:b4:fc:94:82:da:83:ab:48:c2:18:3d:18:
46:0b:d9:89:a6:18:e0:39:65:71:bd:20:90:f3:47:3c:79:cc:
94:fd:04:36:d6:ab:fa:bf:ff:07:19:52:9c:19:3b:2f:53:e8:
fc:00:32:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 9 14:05:42 2026 by rpki-client