Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD7A79482ADF11F1AB5E56C0DAE4EC9C.roa
File: AD7A79482ADF11F1AB5E56C0DAE4EC9C.roa (raw, json)
Hash identifier: snDeH9tcXSco9fmRvM6LMuczR0Aqf14zBTtcVgn9C8M=
Subject key identifier: 5A:BF:FD:5A:9C:28:66:7B:82:E2:F7:55:9E:B7:31:05:D8:B0:69:9D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A85C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD7A79482ADF11F1AB5E56C0DAE4EC9C.roa
Signing time: Sat 28 Mar 2026 19:52:41 +0000
ROA not before: Sat 28 Mar 2026 19:52:35 +0000
ROA not after: Tue 12 May 2026 19:52:35 +0000
asID: 53808
IP address blocks: 45.207.216.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Apr 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108636 (0x1a85c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 28 19:52:35 2026 GMT
Not After : May 12 19:52:35 2026 GMT
Subject: CN=69c83189-e050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c8:a5:a2:25:72:76:e1:ec:84:07:7a:a5:9f:
30:ac:c4:f0:aa:13:d1:f2:84:13:18:0e:cb:6e:54:
4f:21:03:a0:63:33:2a:08:79:07:49:2c:79:4b:45:
95:4c:39:99:53:fc:87:67:0c:bd:0d:ac:9f:48:24:
23:06:1b:19:19:30:40:d1:af:90:d4:78:e4:9a:74:
f9:9d:14:9a:88:e5:ca:61:5f:2d:c1:76:73:15:22:
d3:5b:fa:03:1a:fd:28:ed:4b:2b:92:c4:d3:6d:d0:
7a:e8:2b:ff:39:ef:ad:62:97:66:d7:10:44:6d:5e:
86:a1:f5:59:04:19:1f:50:74:eb:47:41:10:61:72:
12:0e:b0:bf:27:88:18:d7:77:2e:e3:d1:d1:00:62:
50:71:51:00:f3:68:e8:40:e6:e0:3a:17:2a:3f:1c:
66:fe:64:2b:18:70:7c:af:d3:49:55:ea:c5:99:d1:
48:2e:67:85:97:f1:7a:b5:7b:6e:e3:bb:47:4d:ca:
1e:61:cb:f5:1d:c9:ff:32:fc:4b:89:c1:31:a1:4c:
bd:8c:c7:de:86:32:68:23:e3:d9:8e:f2:17:8e:20:
2c:17:1e:b8:33:95:7d:f3:b3:4b:1d:48:66:c8:4f:
b3:6e:55:eb:51:93:b1:a5:e7:42:7d:3f:4c:ae:d2:
f9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:BF:FD:5A:9C:28:66:7B:82:E2:F7:55:9E:B7:31:05:D8:B0:69:9D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD7A79482ADF11F1AB5E56C0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.216.0/21
Signature Algorithm: sha256WithRSAEncryption
97:14:18:b2:b8:8c:45:29:37:cc:f2:78:32:3f:f2:b7:1c:79:
e8:eb:f2:eb:d1:da:8b:6e:44:38:24:2f:d2:eb:11:ae:cd:98:
15:e5:90:5b:01:b3:59:fc:0a:92:ee:42:9b:0c:c1:23:a1:e2:
80:14:8e:7b:7e:25:9f:b1:19:38:d3:04:06:71:04:e6:2c:ac:
bd:87:4a:32:d7:6b:70:2d:2e:de:e3:60:f0:73:8c:ab:72:70:
f5:d4:83:ba:f1:09:6e:a3:dc:95:1e:61:a1:1b:4a:bf:3f:84:
f2:4b:50:1c:b3:77:62:60:b2:22:e7:bb:80:af:37:bf:1f:5b:
94:74:60:11:d0:d5:da:ad:18:66:11:4e:7d:62:4e:cc:c6:35:
0e:b5:51:fd:1b:31:be:ed:c8:bc:7a:b6:65:cb:86:b9:dc:8a:
14:22:86:58:c8:48:55:0a:63:e8:22:a1:46:dd:fb:47:5a:59:
67:48:ce:f7:19:46:78:3c:d8:97:49:2e:a6:10:aa:6f:ed:68:
8a:b5:db:5c:4f:5e:42:8e:b9:d5:07:7d:37:60:51:55:9c:e8:
12:7c:50:e7:6b:89:8c:65:c8:a8:96:2a:63:95:f3:ff:56:27:
e8:95:95:a4:9d:3c:25:ec:b5:26:3d:99:ba:c2:3b:ec:d3:28:
18:db:58:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 14:28:34 2026 by rpki-client