Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7DB88DBE2E8911F1A7D013DFDAE4EC9C.roa
File: 7DB88DBE2E8911F1A7D013DFDAE4EC9C.roa (raw, json)
Hash identifier: 6xc3kfKA9X7LmrHqK7+zVfL1c1owQ5+PV/XVHpsx4Ac=
Subject key identifier: 60:43:65:1F:38:1A:7D:0E:A6:90:48:3E:75:BE:7F:42:50:97:16:44
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A935
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7DB88DBE2E8911F1A7D013DFDAE4EC9C.roa
Signing time: Thu 02 Apr 2026 11:45:48 +0000
ROA not before: Thu 02 Apr 2026 11:45:44 +0000
ROA not after: Fri 08 May 2026 11:45:44 +0000
asID: 215691
IP address blocks: 45.198.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Apr 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108853 (0x1a935)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 2 11:45:44 2026 GMT
Not After : May 8 11:45:44 2026 GMT
Subject: CN=69ce56ec-2c55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:10:43:26:ed:fd:74:30:d3:0a:54:80:28:4e:
8e:8d:bd:e9:d3:aa:a8:e3:8e:6c:35:b2:62:2b:08:
f5:cd:f1:85:06:97:81:5d:7c:f5:85:bd:33:3e:49:
4c:92:c5:6f:1c:03:06:ce:4a:8f:4a:9b:0c:01:a2:
f5:27:ab:a2:be:2a:44:69:8c:eb:1d:5b:a1:06:32:
99:c9:d4:e5:94:ef:fc:3a:3b:ab:75:aa:d9:fc:e1:
ab:0e:06:34:ff:3e:63:5b:11:c0:41:c6:81:3b:13:
9b:5b:12:04:9e:48:ab:45:d1:bd:e0:aa:50:03:bc:
b6:c7:97:f3:2a:86:9e:6c:e5:f5:8b:24:40:56:b6:
af:c1:42:61:a3:56:05:e5:1a:71:d7:b2:40:dd:dd:
aa:2c:0a:41:0a:78:39:7b:f7:0a:80:89:b8:ef:b4:
66:f0:1a:1a:a8:c7:e2:5a:27:5d:52:65:2a:93:42:
36:fb:ac:73:b6:35:41:c2:b3:3a:48:de:ea:96:a8:
57:8b:0f:79:56:10:87:1a:93:87:e6:71:17:15:3b:
e7:9f:29:ff:19:bc:a6:c0:c3:b9:e1:81:9f:55:e5:
75:05:05:c6:a8:89:21:00:7b:54:8c:6d:f6:ec:f0:
8b:42:74:f9:cb:8b:71:79:34:6c:31:bb:58:22:69:
9a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:43:65:1F:38:1A:7D:0E:A6:90:48:3E:75:BE:7F:42:50:97:16:44
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7DB88DBE2E8911F1A7D013DFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.54.0/24
Signature Algorithm: sha256WithRSAEncryption
22:15:42:cb:c9:cd:53:a1:27:f8:f5:2c:b0:ac:05:b8:bf:8f:
e4:25:ca:bb:fb:d9:01:96:e6:ac:eb:5f:32:1a:e7:3f:e4:2f:
ad:e9:1f:a9:6b:80:31:28:5a:c4:6f:42:cd:86:c6:58:a2:2f:
88:61:da:32:94:9f:ec:b5:e0:e6:61:7e:9a:f3:50:84:07:a9:
de:88:b3:1d:9f:40:5d:7a:ba:0a:96:01:18:5d:7a:25:4e:75:
5a:45:be:72:95:87:dc:98:05:2c:1f:cf:96:bb:fd:e9:19:b2:
a8:3a:90:f8:e3:d9:b9:7b:d4:ef:cd:a0:71:0e:9f:af:19:37:
83:d4:f9:a2:c4:b9:9a:68:9d:df:eb:b5:ab:1c:5d:c6:ae:31:
4f:cc:4e:cf:78:02:e8:ea:bd:92:e6:d1:19:91:40:2c:94:f6:
c2:ae:ec:50:81:7f:1f:6a:90:7a:b5:b7:90:d6:af:f3:03:2f:
ff:e7:4f:38:85:ed:f6:6c:b6:d1:ae:4f:ac:8a:61:df:c4:6a:
d0:b7:9d:42:0e:a2:59:94:d4:3f:88:f7:f3:bb:45:59:e0:55:
4a:02:5c:b9:dc:00:69:d7:7f:94:85:9a:6c:64:27:24:fd:27:
dc:9a:29:16:28:5d:c4:d6:a8:36:97:12:98:b6:bf:7d:62:28:
90:9c:12:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 14:28:42 2026 by rpki-client