Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/235335CA1FA911F1AD707EE3DAE4EC9C.roa
File: 235335CA1FA911F1AD707EE3DAE4EC9C.roa (raw, json)
Hash identifier: cRjnWGIPCl2fEjR4kfgJg8Rl9StHwQBkiO0JvFK4LgI=
Subject key identifier: 89:E4:5B:A5:CE:D2:8F:CB:D9:82:B8:EF:11:29:FD:E0:60:41:97:C3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A530
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/235335CA1FA911F1AD707EE3DAE4EC9C.roa
Signing time: Sat 14 Mar 2026 13:24:33 +0000
ROA not before: Sat 14 Mar 2026 13:24:28 +0000
ROA not after: Thu 16 Apr 2026 13:24:28 +0000
asID: 271916
IP address blocks: 45.207.16.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 18 Mar 2026 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107824 (0x1a530)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 14 13:24:28 2026 GMT
Not After : Apr 16 13:24:28 2026 GMT
Subject: CN=69b56191-6dd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e9:2b:e2:2f:c7:a9:ae:33:56:80:cc:9f:9e:
4a:f8:3d:f5:bf:11:b4:20:45:6c:62:a5:6f:13:f8:
d1:77:92:d2:d0:4b:10:b3:2b:4e:57:15:a1:b5:cd:
b4:e3:05:fd:29:55:cc:e3:55:60:69:4c:ec:4d:b9:
fc:c1:01:28:0f:ae:58:30:98:87:ce:e5:63:6a:61:
ef:ce:3c:6f:9a:83:bb:00:76:fe:2d:c7:bd:da:83:
04:7e:93:22:a4:dc:51:f1:d7:43:b6:37:d8:b8:5a:
e7:93:aa:19:f2:c4:ba:32:31:10:f2:b1:56:8d:f9:
a2:d9:e7:07:37:52:d7:8e:8a:30:a4:d1:82:52:63:
a0:a1:d9:c5:f5:af:59:74:5e:9e:55:29:b0:91:84:
b0:a9:4e:0f:d1:e5:9e:e5:e7:12:4e:bd:75:d5:fe:
7b:da:74:79:b7:79:4b:3c:0c:98:3f:61:e6:ba:89:
c2:b3:88:b3:18:a6:62:24:da:ce:07:a8:8b:6e:63:
b0:92:35:2e:99:bd:09:bf:13:3b:ec:91:70:4b:93:
9b:a8:35:a7:a0:d4:4c:ee:f0:c1:53:59:98:b3:7b:
d5:d1:75:7c:ff:c4:59:3a:87:5b:4d:9a:2c:6f:85:
88:8d:b5:c7:eb:9b:51:84:13:95:e6:b9:69:76:95:
bc:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:E4:5B:A5:CE:D2:8F:CB:D9:82:B8:EF:11:29:FD:E0:60:41:97:C3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/235335CA1FA911F1AD707EE3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.16.0/22
Signature Algorithm: sha256WithRSAEncryption
37:b7:cf:ad:f1:97:09:1d:3c:3f:84:94:19:da:0f:9e:bc:9a:
6e:11:66:f2:58:18:50:13:1b:9f:04:81:4b:a2:fb:a1:75:3c:
8a:82:77:6d:78:05:c5:02:b6:4b:9b:21:0e:9f:ab:2c:1c:35:
59:0d:55:74:b5:68:51:f6:dd:00:de:da:2d:fb:63:03:23:d7:
fb:cf:b1:0f:fb:28:f5:81:c8:0e:76:62:e0:c0:60:2b:21:5e:
f5:7e:3c:63:e8:80:8c:6d:d9:bc:60:d3:53:3e:6e:3f:21:6a:
dc:fc:82:44:fa:ae:2b:0c:d2:a2:d5:3d:a0:4f:c7:00:d9:5b:
e2:9d:01:e4:4b:13:14:5c:9a:f8:ed:80:07:a5:84:1b:b8:69:
7b:e7:19:b2:50:2f:c7:5f:f7:3f:83:cd:18:e0:82:b6:62:8c:
3f:a0:46:dc:5a:4c:ed:98:b9:c7:5f:51:af:91:be:c6:d7:2c:
35:bc:4d:be:69:66:bc:9e:af:48:41:53:cc:38:41:e8:23:87:
44:60:30:c8:df:f9:24:ae:ce:20:58:88:44:88:f5:bc:76:2f:
04:3a:3e:4a:00:68:56:a1:f3:d4:d7:11:7e:6e:0a:c0:26:18:
ee:90:04:d1:c6:4d:c5:59:b1:ff:e4:f1:ff:cd:a5:d8:6f:45:
ff:6d:20:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 05:47:43 2026 by rpki-client