Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/032905262D9711F19E2378E0DAE4EC9C.roa
File: 032905262D9711F19E2378E0DAE4EC9C.roa (raw, json)
Hash identifier: Xs3tU2ULXaVS+92BHXbCCfhT7FYj8PDtrAbBPJZUSRc=
Subject key identifier: 50:F7:91:EB:89:37:89:04:71:88:E0:28:B7:06:7F:5A:C7:BA:BE:BE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A8EE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/032905262D9711F19E2378E0DAE4EC9C.roa
Signing time: Wed 01 Apr 2026 06:50:04 +0000
ROA not before: Wed 01 Apr 2026 06:49:59 +0000
ROA not after: Sat 02 May 2026 06:49:59 +0000
asID: 11427
IP address blocks: 45.202.92.0/22 maxlen: 24
45.202.96.0/22 maxlen: 24
45.202.116.0/23 maxlen: 24
45.202.120.0/22 maxlen: 24
45.207.0.0/23 maxlen: 24
45.207.36.0/22 maxlen: 24
45.207.48.0/21 maxlen: 24
45.207.164.0/23 maxlen: 24
45.207.170.0/23 maxlen: 24
45.207.174.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Apr 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108782 (0x1a8ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 1 06:49:59 2026 GMT
Not After : May 2 06:49:59 2026 GMT
Subject: CN=69ccc01c-20d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:2b:f9:58:e3:c3:ae:5f:95:f5:c9:2a:ca:9a:
52:a6:4b:03:33:93:9c:e7:7e:81:8b:91:cb:e7:1b:
69:c2:35:10:86:1b:3a:38:69:e6:d3:98:24:3a:d5:
c6:a2:5c:b1:9a:19:2e:75:8a:53:82:24:62:c4:1e:
c6:4c:e4:d2:4b:d6:8f:fe:53:18:6d:dd:fd:e9:cd:
76:57:a7:e4:27:e6:8b:d0:26:e6:d8:44:4d:d2:d4:
1a:fb:bc:0f:ce:bc:26:86:73:16:5d:12:0f:23:6b:
2a:52:17:74:ee:73:6c:ec:33:3d:94:f4:bb:2e:b1:
d4:8d:bd:d9:82:f4:9c:b8:2e:89:05:95:9e:77:86:
b5:4d:24:ff:b7:89:1b:57:34:9f:eb:94:d5:9e:c3:
97:29:fd:cb:b7:cf:04:d5:4c:96:23:86:53:58:f1:
3b:16:29:32:eb:d1:74:08:ae:9f:d7:32:fb:37:43:
f0:c7:a8:e0:c0:9f:3e:e7:f7:91:5f:5f:d6:d1:08:
61:a9:99:fa:8f:1a:bd:cc:52:aa:b2:ac:65:40:ab:
01:16:6a:c5:b3:e5:35:21:17:fc:bf:74:77:3b:24:
2c:27:ba:6e:76:2c:09:1f:b9:52:dc:d7:61:c6:46:
9d:0f:e9:8a:c9:1f:d4:77:07:7f:0e:b4:59:63:c3:
da:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:F7:91:EB:89:37:89:04:71:88:E0:28:B7:06:7F:5A:C7:BA:BE:BE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/032905262D9711F19E2378E0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.92.0-45.202.99.255
45.202.116.0/23
45.202.120.0/22
45.207.0.0/23
45.207.36.0/22
45.207.48.0/21
45.207.164.0/23
45.207.170.0/23
45.207.174.0/23
Signature Algorithm: sha256WithRSAEncryption
b1:7a:a6:ab:f1:9f:b9:73:55:76:df:37:3d:f5:f6:de:91:f8:
13:a8:38:76:2f:58:20:79:63:53:f9:51:b1:e3:39:c4:86:73:
68:ba:b5:a0:1f:33:4f:91:18:ab:97:6b:cc:0d:e7:b4:30:4e:
01:00:54:a3:ca:aa:c6:4a:85:29:e0:ff:15:b6:89:8c:23:cf:
e7:37:ab:67:de:e3:fa:4c:69:23:48:d9:b1:e3:ae:96:d7:1b:
fe:0c:43:b8:99:6d:8c:e1:ae:75:83:1d:8f:89:8b:e4:71:f4:
75:42:42:6d:71:02:46:51:3a:76:75:6a:ba:fb:c8:b7:36:f4:
e9:29:a7:c0:d8:55:37:68:d7:10:af:94:f3:6f:be:f2:3c:76:
1d:48:58:4b:3f:11:21:31:9d:38:c2:4d:82:44:15:20:61:32:
08:20:2e:cb:fd:f2:d0:b9:6d:93:da:80:0e:5f:d4:02:3a:32:
f7:49:cb:72:ea:57:5b:dc:67:fb:cb:44:d2:eb:63:05:4e:c4:
77:80:4d:3e:28:74:02:41:29:9b:39:58:90:5a:1c:b5:db:83:
62:8c:5d:06:07:2c:de:7d:c8:6a:24:58:ed:77:c5:b2:a7:f9:
fe:f9:cc:4d:a1:a3:a9:19:7c:93:d8:39:43:f0:70:7a:49:08:
a9:cb:b8:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 14:30:28 2026 by rpki-client