Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1AB603661DE711F1921B03A6DAE4EC9C.roa
File: 1AB603661DE711F1921B03A6DAE4EC9C.roa (raw, json)
Hash identifier: aGMmccEyBHpEgkqsW5AXtOiW4V+cSUWeWQH3pUZwxsM=
Subject key identifier: 91:D6:4B:37:2B:09:50:DE:DD:96:32:05:D8:BD:F6:4C:20:E7:50:B3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A44E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1AB603661DE711F1921B03A6DAE4EC9C.roa
Signing time: Thu 12 Mar 2026 07:43:05 +0000
ROA not before: Thu 12 Mar 2026 07:43:00 +0000
ROA not after: Fri 05 Mar 2027 07:43:00 +0000
asID: 18229
IP address blocks: 45.195.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 16 Mar 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107598 (0x1a44e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 12 07:43:00 2026 GMT
Not After : Mar 5 07:43:00 2027 GMT
Subject: CN=69b26e89-7003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:95:58:dc:22:9b:01:e8:b8:60:c2:f2:eb:f8:
ac:d8:37:08:6b:8c:5a:1c:d1:e5:ea:83:d4:94:84:
c3:ad:ad:f6:f2:8c:af:ad:a9:d5:4d:16:08:28:81:
01:1e:f8:97:c8:58:97:33:83:68:d6:74:64:77:be:
93:df:cc:9e:24:04:6d:09:e0:7b:33:a3:da:24:4e:
8f:c7:0f:79:e6:e7:22:ec:23:69:2e:05:97:48:8a:
1f:14:3d:14:7a:a8:1c:47:20:3f:78:eb:67:a9:35:
ef:e9:1d:9b:c8:75:ce:ca:a2:7b:a6:1f:18:c4:3b:
56:b2:c7:8a:6b:71:1f:fb:89:21:e1:53:e6:c1:37:
76:4a:cf:5f:bb:28:ba:76:33:e9:21:ba:fd:91:4b:
50:dc:7a:4a:6b:af:33:ad:7d:4e:b4:9d:31:76:b5:
3e:9a:5e:ef:65:bd:6c:4e:a4:22:86:34:ef:4f:e3:
e4:95:bd:9a:f3:7b:fd:44:e7:dc:7a:09:78:4e:6c:
95:3d:e3:13:92:7a:3b:e0:76:d5:ec:18:80:3a:80:
27:c4:cc:4c:8a:75:e5:b8:83:28:87:f3:85:b5:4d:
59:cf:01:45:6f:1e:24:a3:9b:65:40:6b:98:8c:0c:
03:d5:73:03:80:cb:78:14:60:f7:44:f7:6d:94:43:
92:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:D6:4B:37:2B:09:50:DE:DD:96:32:05:D8:BD:F6:4C:20:E7:50:B3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1AB603661DE711F1921B03A6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.91.0/24
Signature Algorithm: sha256WithRSAEncryption
14:eb:e1:2c:fd:ac:1c:c5:e2:f0:44:06:09:ea:21:43:94:23:
b4:46:ec:34:6f:91:cf:7f:85:f2:6e:2f:64:6a:55:a2:fb:55:
4f:7f:c0:64:5b:97:b1:96:d2:c5:d2:8a:dc:e1:ab:5b:83:77:
06:cc:50:f4:e6:95:66:11:93:50:b7:98:c2:02:c3:f8:7b:fe:
b3:85:d9:06:73:bc:4a:a3:23:9e:1d:f9:fa:5d:27:1f:20:76:
6a:99:d1:58:e7:d7:c5:8f:86:57:3c:c6:df:a2:a8:6c:5f:18:
80:59:a3:e7:cb:5d:32:c8:8a:4c:f9:b5:4f:33:62:89:34:d3:
d0:5b:e0:0a:29:19:92:68:28:23:28:a3:fe:76:4d:f9:2b:c3:
ef:23:81:76:67:f9:bc:c3:10:fb:57:e4:ec:41:43:f3:15:bd:
ee:64:2e:ef:63:c7:ca:98:df:fe:50:54:f1:bc:12:3b:13:d0:
f5:bb:bf:38:71:00:29:be:e6:b6:01:3e:7b:0b:2f:f3:7a:e9:
b3:01:a3:d5:32:43:69:f7:59:b3:2d:e2:54:a3:72:0e:7a:5a:
b0:cd:42:74:39:c4:d0:f1:a1:79:42:35:e7:0a:bf:0d:29:db:
9f:5f:aa:68:b8:5b:b3:5b:6d:c8:f9:34:b1:bd:36:3d:9a:4b:
6e:8b:2c:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 14 20:54:38 2026 by rpki-client