Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CBF6E7CE19FC11F1914888CADAE4EC9C.roa
File: CBF6E7CE19FC11F1914888CADAE4EC9C.roa (raw, json)
Hash identifier: kQ4xsn7fo2yDUIG2xkRg0nRmRQ4zXJxNm0Q2D9a6O1w=
Subject key identifier: BC:0A:44:05:81:AD:95:83:0A:40:06:02:69:51:1A:F3:77:7B:15:2E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A324
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CBF6E7CE19FC11F1914888CADAE4EC9C.roa
Signing time: Sat 07 Mar 2026 08:08:17 +0000
ROA not before: Sat 07 Mar 2026 08:08:12 +0000
ROA not after: Wed 08 Apr 2026 08:08:12 +0000
asID: 147176
IP address blocks: 45.195.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 13 Mar 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107300 (0x1a324)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 7 08:08:12 2026 GMT
Not After : Apr 8 08:08:12 2026 GMT
Subject: CN=69abdcf1-aea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:f3:d2:5f:8f:c8:f6:7f:a1:db:77:67:02:6d:
bd:11:22:ac:65:47:4f:6f:3b:83:8f:2c:03:30:7f:
12:52:b3:54:3a:9d:67:62:64:eb:ef:a7:c1:27:d6:
74:f1:28:53:c8:d1:6b:49:fe:b6:be:ec:2e:26:02:
cf:90:93:9e:13:34:d9:c3:2d:3a:73:07:0d:a5:14:
db:3c:03:5a:07:a4:4f:53:c9:e8:f2:45:4c:59:4c:
1c:ef:23:5b:bc:ec:4b:ef:2f:86:f0:c3:6f:4f:6a:
3e:43:0c:13:96:b6:a6:83:2e:0a:97:b4:a7:f4:98:
c7:2d:13:f7:34:d2:4b:64:d1:05:23:1f:ac:d2:bf:
a4:b7:4f:9f:12:a7:6f:13:a5:07:f2:6d:d3:70:48:
b9:a1:57:12:34:d6:ec:98:cf:60:87:78:86:b6:e5:
47:6b:8f:11:46:fa:65:c3:70:48:b3:19:a8:c7:1c:
6b:7e:e9:83:b4:51:be:86:d2:52:53:fd:51:8a:0b:
4b:f6:44:ac:f8:a5:70:b3:be:44:68:5f:cf:7a:ff:
b0:b0:35:97:70:dd:3a:9c:a0:2a:a0:83:07:61:bb:
34:52:d0:b3:e0:80:51:73:76:1f:e3:e4:0e:af:24:
7d:55:27:66:98:2a:28:18:ba:4d:34:7f:70:fe:51:
33:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:0A:44:05:81:AD:95:83:0A:40:06:02:69:51:1A:F3:77:7B:15:2E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CBF6E7CE19FC11F1914888CADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.152.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:c6:0b:fb:13:46:fb:a5:55:6c:8a:c6:51:fa:ce:21:8b:b0:
34:99:ab:b5:12:1d:88:7e:ff:8a:55:56:43:60:11:58:52:04:
b7:fa:cc:be:68:73:25:a2:12:00:5c:5f:cc:7b:b6:4f:23:0a:
41:9e:a7:fe:45:db:97:1f:99:f3:f1:5f:40:4f:a8:1d:86:63:
06:19:7b:a3:a3:aa:e7:37:35:74:1f:c1:89:4a:09:90:c5:85:
4c:8e:5b:0e:3d:6b:20:9c:d1:c2:c9:46:2a:9d:ef:bb:9e:39:
a3:de:79:43:fc:5d:4f:19:fe:86:87:d6:b2:8d:0e:f7:6c:da:
9d:1f:d9:77:2f:30:99:81:5a:60:95:72:fc:a8:3c:e7:0d:a5:
43:fd:b1:3e:eb:81:28:13:00:36:24:53:74:8a:96:9f:68:e4:
4e:0f:19:e4:75:d4:c5:10:95:60:ce:6d:af:93:e7:82:ee:fa:
d6:74:42:7e:14:af:7e:bc:01:ff:41:aa:b1:12:8e:7c:3a:0b:
cb:71:0d:2f:7e:7a:f1:35:64:2a:d3:b3:fd:62:fb:8f:00:73:
3f:2e:20:10:85:c2:b3:95:b4:69:16:22:16:75:54:9b:8e:0b:
3d:91:87:fd:71:78:46:93:f3:94:6d:d1:a9:76:f9:a2:0f:58:
fe:ed:09:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 11 14:24:23 2026 by rpki-client