Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4C09B1B430CB11F184A5C485DAE4EC9C.roa
File: 4C09B1B430CB11F184A5C485DAE4EC9C.roa (raw, json)
Hash identifier: I5kFzR6Js4t9991lwQQRtEveJduMPGjwoXqrBra6nwc=
Subject key identifier: CA:A8:E2:57:BD:C1:FF:2B:30:90:CC:9D:FB:DB:B4:9F:9F:B4:64:D0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AA0B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4C09B1B430CB11F184A5C485DAE4EC9C.roa
Signing time: Sun 05 Apr 2026 08:41:54 +0000
ROA not before: Sun 05 Apr 2026 08:41:50 +0000
ROA not after: Tue 28 Apr 2026 08:41:50 +0000
asID: 44509
IP address blocks: 45.207.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Apr 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109067 (0x1aa0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 5 08:41:50 2026 GMT
Not After : Apr 28 08:41:50 2026 GMT
Subject: CN=69d22052-e822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e0:b6:6c:bf:99:a7:97:00:2b:a0:97:81:f1:
09:41:2e:91:d0:2d:41:35:be:e7:0c:12:ed:e6:69:
64:92:77:46:d4:2a:17:7c:13:64:7b:d4:d0:24:d8:
a4:61:23:03:73:ab:12:91:61:3c:83:36:27:81:8b:
c6:89:a1:7c:7c:5f:ad:98:81:bf:1e:7e:eb:e5:ba:
6c:c7:0a:93:29:57:dd:89:69:9d:8d:b8:e2:4d:76:
b5:c6:f5:34:a0:4b:43:be:5c:44:f3:34:3e:d8:ee:
ef:cb:51:ac:aa:7d:b5:d5:97:97:90:f7:e1:24:f9:
23:b9:54:82:01:3c:5a:bd:fb:0d:25:3b:d9:6d:54:
87:82:e4:2a:cc:11:2d:32:c7:0e:1e:af:e4:14:ba:
36:da:6e:66:23:6c:68:1c:39:4b:ac:b5:d1:03:33:
cb:ea:a4:75:13:ce:76:74:74:38:4a:0a:c6:7e:7a:
59:c6:10:0b:83:16:4c:b2:c1:4c:98:3c:93:2d:64:
91:a3:f4:97:f9:f7:32:6f:c8:0f:f8:11:4b:b7:44:
14:35:a1:ed:05:c7:f9:d5:14:f1:75:8a:55:9a:a3:
40:cc:88:2f:cb:4b:bf:d3:ea:03:e7:2a:9c:0f:ab:
50:f4:52:ff:de:da:ed:a1:fe:56:01:59:ae:09:f9:
c5:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:A8:E2:57:BD:C1:FF:2B:30:90:CC:9D:FB:DB:B4:9F:9F:B4:64:D0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4C09B1B430CB11F184A5C485DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.40.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:e5:90:82:6c:41:b5:5c:ab:64:a6:23:0a:e4:b9:95:1c:15:
b4:10:4f:c6:fa:3c:04:85:15:a2:85:2b:51:c5:96:a7:e8:8f:
5d:22:5a:7e:a8:fc:ba:67:5a:d3:ea:6f:9c:20:f5:68:73:5c:
30:29:ba:4a:b8:85:97:4c:ad:18:d7:d0:69:70:8b:31:67:fe:
ac:8e:58:88:d1:b3:49:35:af:87:c8:e8:aa:97:95:af:54:82:
b4:65:90:0f:4e:9b:0c:90:46:b7:25:b6:0e:6e:d8:fb:de:7d:
8c:98:0c:ad:df:3a:1d:e1:f2:85:d3:0a:f1:86:50:9f:0f:4f:
e9:9f:68:24:71:fd:a6:26:aa:ef:4c:ff:f9:76:9d:84:8f:7a:
df:49:ae:9c:e4:f2:17:2c:62:59:8f:91:79:ab:d6:b1:f7:9d:
74:01:95:e2:5e:01:2a:4a:83:b4:b9:17:89:72:90:cf:d1:33:
b1:f1:17:ff:73:e6:78:c3:80:3e:9c:ab:1e:29:f9:f7:3c:87:
ae:dc:d8:1a:a5:0d:bc:5e:21:b0:88:d2:ba:0a:79:8e:2d:89:
f5:4c:8a:26:ee:e8:d1:27:af:a5:92:d7:8f:bb:4d:f9:f8:57:
15:98:cc:82:fb:fe:a0:8f:8b:cc:83:1d:f5:d5:dd:5d:25:39:
92:e5:ad:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 14:30:32 2026 by rpki-client