Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2CD21CB817D111F1897A94E8DAE4EC9C.roa
File: 2CD21CB817D111F1897A94E8DAE4EC9C.roa (raw, json)
Hash identifier: jyJZPoxXyk/7KIMrwcZ4lOk33XGt9tQsM0q9izNW9YE=
Subject key identifier: A3:F5:1D:ED:51:45:DE:63:A3:54:2A:BA:9F:6D:5A:B8:44:A4:D5:73
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A262
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2CD21CB817D111F1897A94E8DAE4EC9C.roa
Signing time: Wed 04 Mar 2026 13:50:59 +0000
ROA not before: Wed 04 Mar 2026 13:50:55 +0000
ROA not after: Fri 17 Apr 2026 13:50:55 +0000
asID: 273908
IP address blocks: 45.194.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 18 Mar 2026 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107106 (0x1a262)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 4 13:50:55 2026 GMT
Not After : Apr 17 13:50:55 2026 GMT
Subject: CN=69a838c3-f4a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c8:ad:85:46:9b:47:ca:cf:76:1d:b8:65:ba:
0e:75:7e:82:2c:b0:e0:08:1b:79:fc:d5:ac:f6:f8:
4a:32:f6:30:c6:62:a8:00:74:ba:10:15:dd:43:3d:
89:5c:be:c9:29:83:47:51:5b:a6:67:56:55:8a:73:
40:d0:a3:5e:96:86:fb:50:77:1b:f9:e1:38:1d:35:
ad:82:78:6f:a0:4a:10:2c:cb:99:9d:89:01:3a:97:
9f:9f:81:c6:6f:de:7e:f9:1d:ac:58:94:d6:a0:62:
ae:28:c3:dd:e6:d7:c9:61:31:d5:b0:bf:38:ff:de:
0c:c5:fa:67:a2:14:f8:5a:d7:e5:28:e9:a4:d7:e8:
7c:f3:e0:af:e3:45:d9:92:b7:2b:c7:51:4a:f3:df:
8f:bb:43:5d:25:67:ab:f9:e8:91:cd:2d:81:5c:c6:
15:f8:62:66:fc:ee:06:16:23:bf:60:65:f3:fb:de:
2e:13:ed:7d:84:7a:77:85:8a:64:54:f6:57:53:39:
3b:ba:de:f1:f0:ac:4d:28:48:76:89:ff:86:6a:65:
07:a5:ea:cf:2e:1a:e4:7f:ed:07:6d:9c:9d:c6:6c:
fb:c8:53:0e:bd:c3:f7:06:0d:66:82:36:ca:76:6c:
aa:aa:2d:a6:de:fc:68:18:92:e3:fe:92:dc:3b:3d:
84:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:F5:1D:ED:51:45:DE:63:A3:54:2A:BA:9F:6D:5A:B8:44:A4:D5:73
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2CD21CB817D111F1897A94E8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.69.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:b3:ed:49:c5:1f:19:9c:1d:ff:eb:b4:76:00:5d:c1:14:cb:
7a:b1:7a:1f:bd:11:ab:ff:96:21:29:c8:2f:00:33:4a:1d:ea:
e0:18:41:6b:30:3a:fe:94:a2:d7:82:f0:ef:a7:4d:94:b9:26:
01:6d:7f:a9:f4:02:fb:2a:43:49:cb:03:c9:cb:8a:8b:0c:f5:
6f:82:4f:6c:2f:60:20:9b:f4:81:85:1c:1e:5a:fb:3d:e2:1a:
92:87:a0:8a:74:7e:78:cc:31:b0:7e:31:ba:94:2d:ec:d0:88:
21:dd:59:b1:4e:4a:af:20:38:a3:f7:6f:71:70:43:0a:9e:10:
d6:fa:90:72:43:4f:12:80:2b:1d:00:70:2c:8c:bb:09:37:f3:
84:21:53:25:ab:2d:2c:b0:db:02:11:8e:5b:9a:c9:71:91:53:
20:b1:ce:54:a5:99:b3:a0:81:83:85:05:66:d9:0f:4a:db:8e:
fd:7f:9e:a5:bd:f5:63:21:ed:0a:c1:a5:37:5d:b6:10:a3:48:
7c:59:43:2e:30:c5:85:8b:b0:e0:bc:e6:3c:ab:12:4b:05:6a:
7a:05:47:2c:cc:99:af:63:08:59:d4:1a:fd:ac:d6:41:0e:ef:
ae:61:7d:08:9e:5e:90:b1:69:3d:b5:a4:a4:e3:ce:b3:17:7e:
b4:ea:fc:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 06:01:37 2026 by rpki-client