Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0461FE2E1B9B11F18723B2B6DAE4EC9C.roa
File: 0461FE2E1B9B11F18723B2B6DAE4EC9C.roa (raw, json)
Hash identifier: jkliu7IRV/JUZJ+KtfN92Uosj9b/8s0XECjIsLSrRxM=
Subject key identifier: 0D:C6:B8:EF:FA:5A:E8:5A:0F:CD:82:E7:86:A5:A1:F9:DB:6B:1B:CF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A37F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0461FE2E1B9B11F18723B2B6DAE4EC9C.roa
Signing time: Mon 09 Mar 2026 09:33:24 +0000
ROA not before: Mon 09 Mar 2026 09:33:18 +0000
ROA not after: Wed 18 Mar 2026 09:33:18 +0000
asID: 138985
IP address blocks: 45.199.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 15 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107391 (0x1a37f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 9 09:33:18 2026 GMT
Not After : Mar 18 09:33:18 2026 GMT
Subject: CN=69ae93e4-9bce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:91:c2:eb:9e:12:c1:01:86:a5:3d:e8:9e:75:
6e:05:0b:7c:ba:f7:8d:4f:c0:42:47:c1:2c:8a:37:
74:ec:12:ee:7d:8b:ce:29:25:f1:3f:15:66:e1:01:
29:93:45:c6:b1:7c:89:f7:df:dd:43:8b:ed:da:32:
24:7d:97:96:de:9e:74:9d:92:24:02:fc:d3:4b:4e:
e2:04:54:1e:c2:6c:e5:25:f9:55:14:1a:16:ff:d2:
29:78:80:c0:43:7c:f0:3d:46:ea:34:d0:0c:7b:5b:
28:24:be:86:f8:ec:e8:54:1a:ee:a2:c2:60:e8:be:
09:81:d4:bd:94:3f:1d:62:8a:49:95:f0:df:d9:00:
73:5b:1c:1b:f4:3a:fd:13:bd:93:a1:26:e5:b2:99:
57:16:22:ea:e4:a3:6a:e0:b8:f4:26:6b:e1:a9:28:
11:57:9d:f5:64:22:55:42:e3:de:34:24:f8:a5:1c:
95:b2:2d:cb:06:ff:24:02:e2:4c:20:5d:de:b8:ee:
94:2c:97:63:43:2c:af:37:50:e9:1b:61:62:6a:4d:
62:18:a6:66:3d:75:64:a4:bf:e0:f0:43:82:e9:61:
0b:bd:29:91:5b:74:79:fa:d3:29:52:a4:48:ae:2a:
29:c4:64:d9:68:de:ba:02:a7:56:98:c4:56:9e:2b:
62:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:C6:B8:EF:FA:5A:E8:5A:0F:CD:82:E7:86:A5:A1:F9:DB:6B:1B:CF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0461FE2E1B9B11F18723B2B6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.187.0/24
Signature Algorithm: sha256WithRSAEncryption
18:ed:6f:1c:15:0e:c8:80:18:d9:40:2d:ad:0d:b5:e5:b3:aa:
ad:19:c8:f1:6b:de:0c:b6:c2:38:92:ca:99:5a:c7:02:b4:5f:
63:95:29:28:d5:92:6e:c9:2b:ee:29:37:41:e6:12:1c:08:07:
2c:b9:4a:62:32:24:b4:3b:3d:e4:d5:22:fd:21:71:25:aa:ff:
a7:94:de:87:78:74:ea:60:82:30:50:f4:12:b2:94:41:28:2f:
a0:11:26:1c:d9:07:e0:f5:e4:67:98:ce:22:c5:78:9a:f7:e0:
9a:79:41:54:a4:f9:40:8c:a9:ba:78:20:d1:52:a0:f3:74:89:
b3:2b:33:fb:97:ac:f4:d1:41:ed:f7:78:2e:16:92:84:3f:cf:
62:6c:bd:3f:f5:ee:a3:65:70:aa:34:5c:45:7b:12:e2:d1:5f:
04:67:fd:dd:29:1c:ea:ec:86:5f:0c:6a:93:5e:8a:9e:b3:5d:
51:8a:ad:08:6c:19:7f:90:96:14:54:86:44:a7:e6:50:24:5c:
ad:d1:69:71:bd:fc:88:bd:de:3e:bb:d9:d7:e7:1b:5e:bc:87:
86:47:b0:6b:65:2d:d5:32:bd:55:2b:b5:5a:a6:1c:24:26:33:
00:2b:d7:e4:b3:d4:16:93:41:44:94:e3:69:21:83:21:bf:48:
da:eb:f3:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 19:32:08 2026 by rpki-client