Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D0C91792160D11F186D1A497DAE4EC9C.roa
File: D0C91792160D11F186D1A497DAE4EC9C.roa (raw, json)
Hash identifier: apUlQlpownoHSADZdGLOiq8xuAV7EzxLqcrvijHchEU=
Subject key identifier: E7:55:6C:CF:7D:EA:5F:70:3D:88:9D:04:25:60:91:AD:35:73:D5:40
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A1B4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D0C91792160D11F186D1A497DAE4EC9C.roa
Signing time: Mon 02 Mar 2026 08:00:02 +0000
ROA not before: Mon 02 Mar 2026 07:59:58 +0000
ROA not after: Thu 09 Apr 2026 07:59:58 +0000
asID: 138915
IP address blocks: 45.197.64.0/24 maxlen: 24
45.197.74.0/24 maxlen: 24
45.197.75.0/24 maxlen: 24
45.197.96.0/24 maxlen: 24
45.197.97.0/24 maxlen: 24
45.197.106.0/24 maxlen: 24
45.197.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 06 Mar 2026 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106932 (0x1a1b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 2 07:59:58 2026 GMT
Not After : Apr 9 07:59:58 2026 GMT
Subject: CN=69a54382-a626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:3e:29:d2:7c:87:ea:7f:8d:82:cd:6b:ed:51:
2a:ba:d2:05:3f:64:b8:bd:98:d2:ed:b5:f3:09:6c:
75:cc:b4:11:85:09:7f:09:0a:af:f6:66:f1:65:23:
df:6f:1d:9a:20:90:ca:81:37:cb:4b:10:dc:06:e0:
76:98:12:8c:14:75:ca:7c:a0:34:a6:07:d3:72:55:
3c:65:fd:8f:5a:ad:5f:10:b3:a2:30:20:70:1b:5d:
2a:c4:08:5a:c8:20:90:e2:9f:ef:71:4c:0e:01:0a:
99:22:a1:b8:a4:fb:3d:61:59:5d:0c:c7:e0:3e:39:
a9:4c:e5:be:d0:72:5f:dd:82:34:64:c3:87:91:3f:
3f:cb:c1:cc:0b:f8:25:ec:d4:58:be:3a:e8:af:b2:
0f:e8:46:63:8d:64:95:79:8c:9d:70:b7:ab:f6:88:
75:0b:24:7b:f6:ee:54:73:b5:27:41:63:cd:1e:f0:
c1:4e:24:aa:b2:b0:67:a0:85:dd:f4:fd:68:89:7f:
30:fd:f1:2d:97:19:33:04:fc:80:b3:54:17:eb:ce:
dd:fd:b7:13:48:e7:e5:ca:4c:3f:ab:11:ae:ff:37:
65:95:5e:a9:ab:8e:7a:fe:3c:69:09:63:49:e8:d3:
e6:be:3b:4f:c0:04:26:27:03:4b:26:c3:2e:69:e9:
e5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:55:6C:CF:7D:EA:5F:70:3D:88:9D:04:25:60:91:AD:35:73:D5:40
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D0C91792160D11F186D1A497DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.64.0/24
45.197.74.0/23
45.197.96.0/23
45.197.106.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:c1:83:e4:d1:be:8a:f7:64:f6:8c:f3:43:c1:d8:13:85:b7:
b9:6f:e1:ed:1f:dd:ee:8b:9e:0e:7f:28:dd:d2:9a:e4:8f:fc:
99:53:ae:da:78:53:d0:98:ca:2c:17:ae:d9:2c:3c:b1:9e:59:
b2:7f:f6:98:5c:73:c7:63:f0:1d:c5:c1:f5:8a:97:bd:dc:61:
d1:99:1f:7f:47:6b:7a:59:8c:f4:3a:a1:c1:c9:ad:9f:67:9a:
1e:c9:61:93:c0:34:7a:5f:ec:f1:69:a7:cb:68:d7:7f:ae:56:
60:3c:8e:e2:96:b1:d6:1d:62:8f:b9:f5:6f:c6:ae:8a:53:f2:
15:aa:ec:f2:9e:21:fe:7d:da:a0:cc:e4:47:2b:d4:8f:5c:e6:
74:9a:53:b3:a2:90:4b:e4:48:59:30:52:bc:26:c7:c7:9b:21:
90:e5:f0:08:7b:94:e5:9f:6c:e5:cd:f2:c5:89:67:19:59:94:
f0:9c:f2:d5:4f:6b:d8:f8:40:7d:d6:aa:3d:ea:cc:ef:6c:ce:
b2:1c:53:ac:de:f1:01:53:19:1b:79:71:6d:3e:da:db:08:8c:
ca:1a:1e:db:73:80:e0:d3:d9:36:b7:1e:05:d6:ee:e7:ed:79:
e1:f6:e4:23:f3:5b:59:04:b6:e4:16:91:ad:e0:51:df:e6:5b:
8d:76:00:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 11:16:32 2026 by rpki-client