Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B8A7AFF61B8B11F1A717B2DCDAE4EC9C.roa
File: B8A7AFF61B8B11F1A717B2DCDAE4EC9C.roa (raw, json)
Hash identifier: coMeg44Jc3ZC3cgc3TjkNwv1t9y2E/UxKI2Ypq/2H54=
Subject key identifier: 05:6B:ED:05:FA:F5:6E:0A:93:25:3F:28:2F:85:46:27:5E:54:2E:81
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A35D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B8A7AFF61B8B11F1A717B2DCDAE4EC9C.roa
Signing time: Mon 09 Mar 2026 07:43:54 +0000
ROA not before: Mon 09 Mar 2026 07:43:50 +0000
ROA not after: Tue 17 Mar 2026 07:43:50 +0000
asID: 139613
IP address blocks: 45.195.62.0/24 maxlen: 24
45.195.199.0/24 maxlen: 24
45.197.20.0/24 maxlen: 24
45.199.130.0/24 maxlen: 24
45.199.131.0/24 maxlen: 24
45.199.134.0/24 maxlen: 24
45.199.137.0/24 maxlen: 24
45.204.64.0/24 maxlen: 24
45.204.71.0/24 maxlen: 24
45.207.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 11 Mar 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107357 (0x1a35d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 9 07:43:50 2026 GMT
Not After : Mar 17 07:43:50 2026 GMT
Subject: CN=69ae7a3a-af85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:49:9a:eb:4f:dd:67:fb:6f:1e:5d:8b:99:cf:
c4:22:cd:eb:4a:de:20:b1:06:c9:59:95:01:dc:6b:
21:af:6c:9a:55:d2:30:0a:6c:5a:62:85:9c:37:81:
6c:af:52:7f:9c:18:06:70:f3:41:99:f2:29:9b:bf:
bb:7e:8d:c1:50:f9:ed:ba:6b:6a:00:86:92:bc:e2:
8d:e7:d6:ab:27:ef:ed:20:ea:b1:45:0d:47:e1:49:
47:52:37:00:4f:47:ae:52:3b:89:00:fa:3f:67:1c:
fe:f6:6e:e4:24:8e:6d:27:ce:1e:ec:50:ae:c4:03:
18:f3:dd:f3:5e:0c:d0:88:20:f1:88:d9:56:8d:61:
cf:a8:82:88:e1:ad:03:52:45:9d:4f:5e:a5:fe:ad:
42:e7:b5:05:9f:03:65:6a:3c:3e:8b:01:40:a6:b2:
44:be:ba:64:77:72:90:8f:08:a7:13:12:c5:92:55:
2a:7b:9f:8d:d5:26:1c:b1:a0:1a:ae:f9:d7:26:48:
7b:38:45:d8:bd:92:43:21:8f:33:8b:66:7e:3c:cf:
ae:bd:c2:57:e8:09:c8:2f:90:2b:28:91:98:fe:2f:
8f:0e:4a:a4:95:ec:ab:a3:f3:77:6a:9b:68:82:7b:
a4:7d:fd:de:06:69:f6:ef:5b:e1:f0:f5:3a:d0:15:
e6:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:6B:ED:05:FA:F5:6E:0A:93:25:3F:28:2F:85:46:27:5E:54:2E:81
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B8A7AFF61B8B11F1A717B2DCDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.62.0/24
45.195.199.0/24
45.197.20.0/24
45.199.130.0/23
45.199.134.0/24
45.199.137.0/24
45.204.64.0/24
45.204.71.0/24
45.207.163.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:02:9b:6f:8b:c2:fe:09:04:9d:15:20:9d:b3:9e:aa:04:35:
b2:24:78:96:87:bd:b8:1c:a3:00:17:4f:92:88:2c:b8:87:58:
dc:1e:29:df:31:80:fc:03:7b:82:b2:b9:fe:71:a5:44:31:4b:
6d:86:74:2a:fe:0f:a2:1c:2a:70:da:ea:71:d8:ff:3c:f4:81:
aa:f8:f2:d6:b7:c2:a0:db:65:a7:7d:5e:ee:9b:35:ab:84:cc:
74:45:e2:d9:d6:1a:4d:d7:69:7b:04:eb:8f:a6:9c:2f:71:a2:
3e:03:2f:27:bb:6d:b5:01:39:a5:4d:8f:98:0b:cf:b6:37:bc:
3f:57:c3:76:11:41:03:ba:19:fb:31:bf:f7:43:53:c6:57:3d:
39:69:0b:b3:ff:d6:a9:96:0a:e9:5b:1f:30:dd:5b:0d:2e:86:
27:e5:8d:23:28:26:5a:08:5d:c2:fa:c4:5a:ad:ce:b7:5a:2e:
01:9d:03:fb:b5:48:4f:36:70:eb:24:23:20:70:5d:fb:a5:0d:
a1:f4:5e:7d:3d:dd:6d:ec:99:be:dd:a8:75:06:f3:01:68:28:
bf:ff:26:d2:6a:10:2f:13:40:60:1c:02:45:f9:4c:91:e3:04:
db:b4:d2:23:8a:54:f1:3e:b9:1a:87:69:2c:a3:2f:3c:fe:60:
88:f8:b0:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 9 14:08:47 2026 by rpki-client