Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0095961A161011F181F55CA4DAE4EC9C.roa
File: 0095961A161011F181F55CA4DAE4EC9C.roa (raw, json)
Hash identifier: DWUwhQKI7uCpuFtNnsG0XZK38MTo6YVhSJ+cvv3lfb4=
Subject key identifier: 7E:52:A3:16:0C:23:7F:88:12:1A:21:11:B7:CE:E1:66:C7:36:04:6C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A1B8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0095961A161011F181F55CA4DAE4EC9C.roa
Signing time: Mon 02 Mar 2026 08:15:41 +0000
ROA not before: Mon 02 Mar 2026 08:15:37 +0000
ROA not after: Thu 09 Apr 2026 08:15:37 +0000
asID: 63139
IP address blocks: 45.197.83.0/24 maxlen: 24
45.197.84.0/24 maxlen: 24
45.197.85.0/24 maxlen: 24
45.197.86.0/24 maxlen: 24
45.197.87.0/24 maxlen: 24
45.197.88.0/24 maxlen: 24
45.197.89.0/24 maxlen: 24
45.197.90.0/24 maxlen: 24
45.197.91.0/24 maxlen: 24
45.197.92.0/24 maxlen: 24
45.197.103.0/24 maxlen: 24
45.197.104.0/24 maxlen: 24
45.197.105.0/24 maxlen: 24
45.197.106.0/24 maxlen: 24
45.197.107.0/24 maxlen: 24
45.197.108.0/24 maxlen: 24
45.197.109.0/24 maxlen: 24
45.197.110.0/24 maxlen: 24
45.197.111.0/24 maxlen: 24
45.197.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 06 Mar 2026 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106936 (0x1a1b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 2 08:15:37 2026 GMT
Not After : Apr 9 08:15:37 2026 GMT
Subject: CN=69a5472d-f7fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:09:2e:65:ad:eb:65:a9:21:38:24:0e:a1:12:
f7:dc:38:c6:eb:95:2c:b9:05:e8:8a:69:0c:3e:16:
c1:0e:ea:aa:c5:83:5a:df:53:e0:6f:ce:d2:09:12:
08:d1:e4:e4:20:18:81:9d:52:3c:51:22:be:95:84:
6d:e9:49:d4:c5:4e:1f:6e:73:39:fb:3e:5d:7b:c6:
a3:da:f4:56:5a:9c:c6:25:2e:20:1a:e2:4c:08:1e:
5d:91:a2:68:6e:5c:ab:2d:ce:d9:aa:c4:83:9e:47:
1f:e4:55:39:28:21:d7:3d:61:68:f4:09:75:ed:7e:
30:56:ec:8e:8e:96:cb:d5:e5:22:ae:03:0a:55:45:
89:7f:53:83:1d:67:5e:b4:b9:79:b5:dd:e7:a8:84:
8d:5d:4a:48:ee:9f:bb:dd:56:ed:a7:ff:fb:b6:d0:
69:2b:f1:8a:8f:86:b7:40:43:83:56:5f:36:33:a0:
92:23:2b:03:fd:59:f5:f0:c9:c3:c2:bb:47:f0:6a:
ce:35:90:3e:c6:f0:16:05:2d:6c:6a:9d:6b:1f:81:
1b:9d:22:11:f6:f9:5f:f0:c1:d5:53:fb:aa:ed:e2:
4e:ce:47:95:ad:59:6b:70:dc:55:65:76:8f:b0:0b:
cb:3b:99:3c:b6:76:81:91:17:ea:b9:b7:2e:01:af:
1d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:52:A3:16:0C:23:7F:88:12:1A:21:11:B7:CE:E1:66:C7:36:04:6C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0095961A161011F181F55CA4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.83.0-45.197.92.255
45.197.103.0-45.197.112.255
Signature Algorithm: sha256WithRSAEncryption
20:68:49:06:3d:61:d2:33:76:a3:c6:63:83:4f:e7:53:1e:6e:
fe:6b:50:c6:53:c8:90:39:ee:9c:33:a1:7c:79:3a:f2:fc:13:
32:03:e8:39:24:e8:b8:91:f5:69:34:2f:ed:e4:9a:fe:c8:dd:
f3:ff:64:80:6a:6e:97:87:dc:b7:d8:37:0c:90:72:2b:1d:d1:
e2:44:41:1e:dd:4f:3c:a8:f3:87:10:1d:1e:18:0f:09:b4:cf:
81:eb:64:9e:40:87:56:4f:24:85:45:d6:73:e3:29:ac:61:74:
5d:1b:5a:1c:93:29:c4:56:d1:bb:ed:af:03:f2:13:06:2c:cc:
c7:67:95:01:76:a9:a4:29:43:1d:d9:1d:39:1c:23:5f:57:35:
42:83:6f:8c:12:ea:5e:7d:1c:5b:e9:ad:00:aa:bf:52:e9:4c:
0d:0b:44:76:1f:01:be:ce:c6:b4:c4:4e:dd:d6:0a:cc:e0:d5:
b6:9c:af:de:23:54:ac:55:80:86:cc:61:83:c3:06:fb:dc:30:
5c:2f:47:6e:6f:8d:c3:3d:06:6c:f0:61:9c:71:83:ec:62:04:
e8:cd:af:29:53:cf:ab:1b:f6:36:db:2b:c4:2e:8e:66:c2:07:
3d:b9:aa:22:87:48:27:5b:7a:44:54:80:6a:7e:66:f8:b7:b0:
d8:1a:90:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 11:15:48 2026 by rpki-client