Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/24C75D4E170911F1B687E99ADAE4EC9C.roa
File: 24C75D4E170911F1B687E99ADAE4EC9C.roa (raw, json)
Hash identifier: TQc2nLpWHNM3d+cVz1dXthe1KW3i933ZPI5Olr2iKTk=
Subject key identifier: 6B:71:A6:F3:5A:72:83:4B:A8:CC:60:24:17:D4:C1:7C:CF:60:3F:50
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A20F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/24C75D4E170911F1B687E99ADAE4EC9C.roa
Signing time: Tue 03 Mar 2026 13:59:06 +0000
ROA not before: Tue 03 Mar 2026 13:59:02 +0000
ROA not after: Fri 13 Mar 2026 13:59:02 +0000
asID: 14315
IP address blocks: 45.196.114.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 06 Mar 2026 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107023 (0x1a20f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 3 13:59:02 2026 GMT
Not After : Mar 13 13:59:02 2026 GMT
Subject: CN=69a6e92a-6939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6d:37:2f:af:44:fe:6e:53:b2:a8:4c:c8:80:
07:81:55:28:fe:73:d4:b7:d9:74:98:9b:b4:6e:87:
4e:61:72:ab:2f:a4:82:4c:33:ba:50:c6:8f:e7:a8:
8e:17:35:70:2f:9a:29:36:3f:1c:91:68:fb:b1:16:
84:6c:d7:d9:25:35:e1:80:00:85:f5:77:04:dd:08:
bc:7a:67:df:35:7e:d0:9c:66:63:26:86:11:ed:45:
86:08:75:53:c2:4c:a2:a9:60:8f:23:33:82:a0:8a:
cd:f4:02:cf:ac:0f:c1:32:24:eb:ee:53:e8:01:f4:
f0:19:ef:86:17:1c:fe:3a:c9:2d:bf:9b:6e:19:42:
f8:f9:d7:5a:a1:5f:4b:0c:d9:40:c5:24:42:53:21:
80:37:e1:28:d0:a6:07:16:2f:71:02:a5:b2:81:c0:
b3:d6:13:a8:e7:d3:3d:d8:03:e0:dd:3c:ff:77:6d:
eb:d1:41:00:7a:9b:ed:57:60:a5:b1:bd:13:d5:f3:
e6:fc:06:62:14:58:4e:46:f8:91:5d:16:25:2f:c6:
9b:96:84:db:98:76:b5:ef:e2:7b:b5:73:a3:39:b8:
83:b9:03:53:c9:33:0b:c8:a9:2e:d7:3e:76:b5:62:
ea:2e:59:5e:28:8f:48:ee:4d:c0:dc:21:9d:ef:85:
da:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:71:A6:F3:5A:72:83:4B:A8:CC:60:24:17:D4:C1:7C:CF:60:3F:50
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/24C75D4E170911F1B687E99ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.114.0/23
Signature Algorithm: sha256WithRSAEncryption
02:15:e8:76:59:e3:04:07:d3:dc:42:24:82:54:78:d7:aa:26:
11:69:df:20:01:ad:a8:4a:ad:94:73:55:9c:35:67:2e:ab:87:
c4:a4:68:b8:ff:c6:dd:d0:e0:25:ac:e8:90:c5:dc:10:1c:7d:
21:31:f2:bc:a3:d5:47:ca:0a:92:6d:97:57:f0:fc:92:f4:fd:
eb:8d:d7:aa:44:1a:f1:61:4c:e6:0d:c9:83:bc:c3:c8:95:ca:
b7:01:6c:11:c1:54:02:cf:7e:1a:95:02:e2:08:76:f5:8d:a5:
84:65:80:4c:7c:7d:4e:21:b7:bf:fe:37:57:bc:6d:a7:4a:5b:
0d:2b:a5:cf:01:98:ca:5b:d5:71:e5:c9:d0:08:7a:9c:bf:85:
04:cf:59:35:dc:2d:4c:f0:06:fb:c3:7d:a1:b4:05:4d:8d:a8:
e4:e5:46:c4:09:61:9c:ed:b6:8a:86:9b:47:f5:d5:1d:fd:51:
50:9a:9e:46:b1:3f:a3:32:fd:b0:74:3e:af:0a:e6:55:dd:a2:
f0:82:81:c3:63:04:71:76:af:1f:3f:59:8d:94:1d:10:dc:83:
b3:eb:52:2d:2f:7e:ce:8b:82:30:0b:de:6c:b5:b8:c4:93:bc:
fb:d1:35:e1:c6:6a:50:c0:93:2e:c1:c7:52:82:44:f1:0c:ac:
bd:7a:df:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 11:15:36 2026 by rpki-client