Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5B94FF1A15D911F1BF47EFC4DAE4EC9C.roa
File: 5B94FF1A15D911F1BF47EFC4DAE4EC9C.roa (raw, json)
Hash identifier: ShFdtCWV+LaoL/3CnAuvP1CsSTz66CTDdjmnlL3yGSg=
Subject key identifier: 25:2A:8A:0E:75:63:14:7F:28:A7:D8:A1:6E:43:2B:10:D9:E8:BC:02
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A199
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5B94FF1A15D911F1BF47EFC4DAE4EC9C.roa
Signing time: Mon 02 Mar 2026 01:44:31 +0000
ROA not before: Mon 02 Mar 2026 01:44:26 +0000
ROA not after: Wed 08 Apr 2026 01:44:26 +0000
asID: 20326
IP address blocks: 45.200.0.0/22 maxlen: 24
45.200.128.0/22 maxlen: 24
45.205.68.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 06 Mar 2026 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106905 (0x1a199)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 2 01:44:26 2026 GMT
Not After : Apr 8 01:44:26 2026 GMT
Subject: CN=69a4eb7f-a966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ea:2d:bd:fa:8f:99:a8:95:bb:4d:32:f0:bb:
c6:aa:6a:df:b6:11:bb:07:b3:4b:03:77:7a:a9:d2:
38:e4:95:4a:5b:13:cd:5a:fc:d4:72:59:63:25:b3:
31:7c:f7:7b:2f:fd:f9:00:1c:60:97:5a:92:3b:13:
87:a4:42:68:ea:84:b7:b0:70:97:e0:0c:90:db:74:
90:d2:55:91:09:7e:47:da:2a:b2:c3:d2:ff:ac:68:
4f:94:c0:21:4d:ca:20:54:37:01:6e:97:cc:e6:09:
35:9e:93:05:05:99:a4:10:42:a9:0e:63:ca:bd:a0:
0b:c3:20:d3:ac:e0:82:65:d8:dc:f3:b1:40:38:66:
82:6a:17:7d:bc:65:c7:7b:5d:53:0a:b6:20:b2:eb:
a1:94:df:41:6d:61:f4:83:ea:99:4b:2c:6d:0c:0d:
2d:6c:9a:80:55:f9:6d:4c:b3:cf:31:7c:52:63:da:
da:f0:f5:23:8c:ad:c5:4b:ac:33:6c:08:14:82:1f:
60:0f:9e:c4:6c:ef:36:91:f4:1d:1a:86:5a:d4:88:
e5:e5:78:33:f1:d1:84:39:ed:d0:9a:44:cb:dc:7c:
8c:2d:32:8b:d7:fa:dc:13:73:c3:d4:ec:7a:0d:25:
23:09:78:43:2f:3a:44:42:ca:5d:70:ea:29:5f:e0:
ac:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:2A:8A:0E:75:63:14:7F:28:A7:D8:A1:6E:43:2B:10:D9:E8:BC:02
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5B94FF1A15D911F1BF47EFC4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.0.0/22
45.200.128.0/22
45.205.68.0/22
Signature Algorithm: sha256WithRSAEncryption
b7:d3:3c:f9:54:fb:35:5a:31:f6:dd:4a:cb:9b:b9:88:04:6e:
20:92:c5:e5:08:0d:f5:90:71:0d:72:e9:9a:25:52:e9:ed:80:
ad:4d:3d:b9:8e:3b:2b:96:21:41:98:70:59:3b:d6:23:1f:25:
0c:60:ab:e3:29:db:b1:c2:32:92:0e:d0:43:58:5f:8d:32:ab:
26:ca:e1:24:18:37:9b:b5:12:31:78:81:67:9f:50:4a:30:e7:
91:9d:14:c3:31:4d:6b:fe:a1:75:df:10:9a:ab:64:ae:71:48:
e9:43:f2:a9:08:67:0d:46:7a:af:c9:fb:b8:6f:e1:71:74:1b:
7b:c4:a1:47:31:90:be:97:5a:c3:d4:31:1d:72:54:fa:3b:5b:
84:f5:e0:92:8a:25:d3:9f:b1:15:41:2b:55:a7:9d:cc:2c:ce:
91:5e:09:40:6d:6c:c0:df:aa:89:d3:9e:d4:78:5f:be:a8:fb:
8b:bf:b6:9f:29:49:76:56:5f:39:56:2e:cd:31:d7:b1:fb:50:
b1:d5:8a:b1:e7:c1:2a:3c:90:fd:65:71:dd:60:c7:ba:3c:63:
d8:c3:6f:55:e0:42:2a:99:bc:c6:73:36:9d:3a:ff:90:ca:b4:
e7:bd:b9:01:8c:e1:3f:91:af:13:19:1b:0f:7b:c0:8a:fa:d5:
c0:00:3f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 11:15:43 2026 by rpki-client