Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B0DD18901A0211F194EE51F0DAE4EC9C.roa
File: B0DD18901A0211F194EE51F0DAE4EC9C.roa (raw, json)
Hash identifier: 8sxGY/7bCcSq2ct1cRhGm0VltipQiHzFPGlbfE/NNio=
Subject key identifier: 3E:D2:9B:43:A7:86:AC:25:3F:6E:17:70:11:1C:18:96:60:2F:62:10
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A334
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B0DD18901A0211F194EE51F0DAE4EC9C.roa
Signing time: Sat 07 Mar 2026 08:50:29 +0000
ROA not before: Sat 07 Mar 2026 08:50:23 +0000
ROA not after: Wed 29 Apr 2026 08:50:23 +0000
asID: 133073
IP address blocks: 45.196.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 23 Mar 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107316 (0x1a334)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 7 08:50:23 2026 GMT
Not After : Apr 29 08:50:23 2026 GMT
Subject: CN=69abe6d5-9958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:bb:43:a0:6c:14:72:f4:3b:dd:a9:03:89:ae:
cb:b8:ad:07:26:41:0f:9e:cf:3c:55:1a:60:10:4c:
32:e0:9d:0c:a1:6a:0b:74:88:e9:f0:cc:c0:06:8f:
b4:a8:55:a8:08:83:db:07:6a:7f:13:72:7a:4b:5d:
52:b9:bc:97:e0:25:f2:50:41:e4:29:1e:71:52:00:
57:9d:19:0b:36:8b:63:6e:a4:e6:91:ce:55:01:26:
79:27:a0:27:60:4e:3f:e8:92:fe:e1:d8:0e:3d:5d:
73:6a:96:8d:5f:2d:f7:72:7d:4f:a4:8f:85:af:cb:
87:97:07:63:06:2f:50:7b:a2:58:a1:36:61:fe:c4:
aa:7a:fc:95:ba:b7:b9:63:ba:41:fa:b1:7f:ca:0b:
31:b4:c5:88:1e:04:73:be:e8:2b:10:b6:27:ee:8d:
55:5c:ce:27:5b:26:fe:4a:66:59:4b:2c:81:6a:b9:
44:87:e7:8a:c8:e5:36:cf:2b:0c:c0:7d:2c:1b:ea:
fc:92:14:9c:f8:07:39:2f:f6:bd:da:e2:a0:20:b5:
70:c2:75:06:e6:6a:2a:1d:57:12:7e:ac:36:0a:33:
ba:50:c8:28:b1:89:e3:24:ba:57:c3:c6:de:62:f3:
7b:62:66:e5:69:ad:31:fc:5b:f2:46:46:07:53:70:
85:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:D2:9B:43:A7:86:AC:25:3F:6E:17:70:11:1C:18:96:60:2F:62:10
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B0DD18901A0211F194EE51F0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.100.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:3a:2d:cf:72:3c:ee:03:db:ed:61:85:f0:fb:1f:f2:a2:42:
98:03:3f:1d:0e:e7:08:9c:77:71:cb:1e:a3:63:77:06:60:f0:
e1:35:38:1b:df:71:8e:42:bb:f3:84:e0:f6:30:14:60:01:66:
89:9e:25:cc:90:53:cf:de:9c:2b:84:95:8d:c6:86:99:55:a9:
a8:eb:61:23:4f:9a:77:70:0b:5f:ad:ae:9f:c6:84:9a:84:7b:
7f:97:a2:75:e0:65:5e:b7:ef:50:b2:89:12:11:17:be:ac:b9:
c7:72:a5:a7:45:25:2a:a9:09:d2:81:ac:83:60:b9:5f:e1:d8:
e0:23:97:2e:45:bb:35:61:ba:b8:67:46:84:05:28:82:14:59:
6f:a8:5e:f3:44:55:18:c9:c0:9d:75:69:3b:e9:38:2d:ee:9d:
03:be:2d:49:82:38:ae:66:10:0c:99:88:41:46:cf:46:9b:74:
d9:7e:06:44:30:20:77:96:d0:7e:63:b1:24:7e:ce:1c:fd:b9:
88:7d:53:02:4b:d8:f4:e0:a0:8a:44:00:bc:d6:b1:20:f9:3b:
08:29:e3:ae:e1:68:c9:95:11:fd:54:a0:16:e0:f6:7c:9b:00:
d6:b6:9e:d2:ba:ef:25:08:0d:87:d3:ac:bc:50:5d:22:dc:49:
6f:18:dc:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 22:42:57 2026 by rpki-client