Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9263F0F228F111F1B0D41E88DAE4EC9C.roa
File: 9263F0F228F111F1B0D41E88DAE4EC9C.roa (raw, json)
Hash identifier: pX8mKmT/a0iUb9ANr7I0hcuC4c+FhfTm8Ij0U/m9ruA=
Subject key identifier: 8A:10:73:34:B7:B8:B0:F9:F8:4E:FD:73:78:3E:AD:3A:99:59:E0:11
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A778
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9263F0F228F111F1B0D41E88DAE4EC9C.roa
Signing time: Thu 26 Mar 2026 08:55:44 +0000
ROA not before: Thu 26 Mar 2026 08:55:37 +0000
ROA not after: Wed 03 Jun 2026 08:55:37 +0000
asID: 137535
IP address blocks: 45.194.16.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 07 Apr 2026 00:28:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108408 (0x1a778)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 26 08:55:37 2026 GMT
Not After : Jun 3 08:55:37 2026 GMT
Subject: CN=69c4f490-7c3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3b:d3:bc:04:32:63:7b:f9:af:f9:b1:76:4b:
9a:1e:32:9b:e1:86:45:29:77:9e:b7:e3:a5:c1:e0:
78:85:56:82:18:4c:44:07:25:32:95:2e:2f:15:d5:
91:6a:2e:df:db:bd:52:b0:73:ee:94:d7:69:f8:be:
64:8c:5d:fa:f5:14:f3:be:93:81:76:eb:32:1e:c7:
03:db:32:9d:11:e8:60:01:12:60:4e:20:0c:3f:2d:
a3:b5:c2:65:1f:e4:b6:cf:6f:cd:0a:66:6e:f2:7b:
45:64:3e:8d:52:cf:53:ce:71:64:83:c6:de:67:12:
f9:9a:77:e8:05:ec:d7:1c:09:f9:c0:6d:c1:e1:c0:
6c:ef:95:4c:5b:02:1d:1c:69:a7:87:5c:a5:dc:69:
52:24:69:8e:f6:b1:4a:51:70:d4:ea:a1:78:5e:84:
d2:fd:a1:6d:bb:d1:9a:5e:6e:a9:bf:62:8f:72:de:
7b:e9:3a:23:0d:92:68:f7:a3:ac:3a:b3:65:97:b2:
0b:07:f4:25:03:25:1d:62:02:c7:7e:ed:42:40:21:
3e:8a:d8:ec:12:f6:5e:b7:01:6c:ec:58:f0:07:80:
56:bd:9b:28:91:08:d3:11:4b:6e:a4:09:2d:35:07:
48:ad:89:58:e1:b5:97:5c:0f:2e:55:29:4e:0d:b3:
37:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:10:73:34:B7:B8:B0:F9:F8:4E:FD:73:78:3E:AD:3A:99:59:E0:11
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9263F0F228F111F1B0D41E88DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.16.0/21
Signature Algorithm: sha256WithRSAEncryption
73:ca:8e:5a:8a:fc:45:0a:c7:78:db:af:9d:ea:e7:5c:c7:89:
bb:0b:b7:1d:c8:51:18:d6:96:90:2d:48:99:ee:e7:e7:f5:f0:
ce:4b:d7:01:37:b6:33:cd:a4:96:6b:7c:b9:a3:58:1d:1d:af:
7b:47:fa:33:bc:a8:40:14:38:82:7c:6e:e4:3a:9c:f7:8c:fb:
66:09:ed:ad:4d:c5:30:3f:e3:ab:84:b9:15:7c:9e:84:78:95:
ee:93:6c:cb:ba:73:cd:e3:4d:d1:2e:bf:12:9a:0d:88:87:22:
69:db:9b:fe:97:a7:36:e2:fc:ec:fe:61:6b:c1:a3:3d:19:f9:
eb:4a:bd:41:36:94:a1:63:9f:af:8e:03:54:f1:d5:21:0d:2b:
77:95:87:36:5e:3a:e5:b5:ae:35:7d:fc:d4:b8:28:03:bb:a8:
5d:78:b5:17:73:33:da:13:0a:95:6c:10:1f:38:1f:30:73:31:
8b:40:f5:b3:62:9d:7d:a0:41:8a:14:d7:8c:40:df:8f:28:0f:
a1:c3:0a:b7:ba:0d:95:dd:cc:ba:d4:7a:92:ba:59:65:31:ea:
7a:34:71:49:36:ea:99:ee:04:21:1f:ac:df:69:d0:12:4b:11:
c2:79:ab:5c:ea:0f:b1:c0:48:fb:46:07:9b:08:bf:d4:cf:a9:
3d:ff:cd:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 23:46:54 2026 by rpki-client