Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/441F76AA397711F199A226EBCE1D38B0.roa
File: 441F76AA397711F199A226EBCE1D38B0.roa (raw, json)
Hash identifier: mRDcsi97a82r7PsuZUWB5rvtROC+33XvzRwm1a7vz3c=
Subject key identifier: B8:69:A1:4E:C3:D6:8B:8B:C2:46:D3:BA:54:60:72:46:19:3A:6A:34
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AD0D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/441F76AA397711F199A226EBCE1D38B0.roa
Signing time: Thu 16 Apr 2026 09:33:04 +0000
ROA not before: Thu 16 Apr 2026 09:32:59 +0000
ROA not after: Thu 30 Apr 2026 09:32:59 +0000
asID: 401783
IP address blocks: 45.197.3.0/24 maxlen: 24
45.197.8.0/24 maxlen: 24
45.197.10.0/24 maxlen: 24
45.197.11.0/24 maxlen: 24
45.198.5.0/24 maxlen: 24
45.201.35.0/24 maxlen: 24
45.201.41.0/24 maxlen: 24
45.201.42.0/24 maxlen: 24
45.201.48.0/24 maxlen: 24
45.201.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Apr 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109837 (0x1ad0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 16 09:32:59 2026 GMT
Not After : Apr 30 09:32:59 2026 GMT
Subject: CN=69e0accf-3d57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:21:18:b2:1a:01:19:36:1a:9c:d6:b2:4d:27:
cf:16:9e:f6:05:a5:8c:cd:3b:79:0c:9d:0d:c3:6b:
7d:25:b6:8a:9b:33:d7:c5:7e:97:6f:27:cd:a1:fc:
77:7e:cc:67:2f:25:53:d3:05:7b:e5:8f:51:d7:a0:
9e:e3:f9:9b:81:01:33:6b:c6:a1:63:67:e1:e4:c7:
d4:70:ea:60:a0:b2:99:da:68:8f:28:b5:0f:91:bb:
08:54:a7:82:65:f6:b8:e4:09:bb:15:5e:ea:e1:66:
5c:90:50:ac:30:d1:08:42:6c:75:10:51:82:e8:8d:
98:3b:70:17:0b:1f:eb:07:d3:30:86:96:ac:7d:2b:
fc:d0:48:be:eb:09:61:9d:35:e6:07:82:02:82:8d:
b5:97:51:be:bc:58:55:e3:93:19:05:09:ed:2d:42:
aa:9f:08:bb:a8:d4:01:7e:26:98:0b:4e:cd:9d:bb:
a5:88:5a:8f:5f:42:b5:2d:97:54:75:9f:88:b1:45:
ff:87:13:dc:c2:89:18:78:d5:4f:27:6e:05:59:b7:
44:29:a7:71:d4:a6:13:06:c5:d9:5a:b7:18:14:20:
57:73:55:7f:c6:e2:35:34:99:31:6c:73:1c:43:89:
49:3d:bc:84:ce:f7:7c:d6:02:76:24:e4:0f:55:c8:
db:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:69:A1:4E:C3:D6:8B:8B:C2:46:D3:BA:54:60:72:46:19:3A:6A:34
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/441F76AA397711F199A226EBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.3.0/24
45.197.8.0/24
45.197.10.0/23
45.198.5.0/24
45.201.35.0/24
45.201.41.0-45.201.42.255
45.201.48.0/24
45.201.61.0/24
Signature Algorithm: sha256WithRSAEncryption
91:7f:77:c5:2b:aa:45:ae:39:f8:67:0c:7e:45:b3:ef:e1:c3:
7b:8f:b6:2f:9e:8a:27:e8:4d:f0:a1:a7:3a:55:1c:9c:c4:cb:
39:da:bf:76:9f:36:c5:66:ba:81:0b:15:23:1d:9f:7d:46:0e:
f7:4f:07:8c:d9:b0:f3:42:3b:46:f0:02:9c:ab:2d:92:72:64:
71:dc:5b:3c:60:80:39:4e:82:39:fc:39:79:3e:98:0e:7b:05:
8d:53:71:5d:70:ed:47:38:00:13:5f:fe:7e:68:1f:92:a1:03:
c8:65:41:c3:08:f2:f2:22:5d:6c:ae:59:c0:28:e8:d5:bf:d8:
13:d2:0e:31:ce:01:e2:39:ff:34:85:2b:85:3b:2d:95:cb:5f:
65:41:1c:8a:30:01:4b:44:62:04:a8:04:c7:ee:9c:ce:a6:8f:
65:ba:ee:3d:17:62:d5:42:dd:3f:54:96:c7:e3:a6:7b:04:99:
67:86:06:b5:b4:ce:a3:1e:78:ef:73:4e:a1:0c:78:20:73:ea:
69:1b:01:1b:45:46:bc:a1:f6:69:d7:7e:93:d8:15:e8:ba:f0:
9a:9e:ae:7f:1c:52:6b:53:af:2e:a7:1e:cb:1a:30:7e:14:01:
91:74:b3:9d:d6:fa:8d:ad:97:ac:6c:d5:be:23:48:84:37:a3:
9f:8e:11:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 14:30:53 2026 by rpki-client