Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/820CFA982EE411F188BEB8E7DAE4EC9C.roa
File: 820CFA982EE411F188BEB8E7DAE4EC9C.roa (raw, json)
Hash identifier: UrS56mTG51m1lM7n9dIX2js2TcThh0F/PG5pGvUi7II=
Subject key identifier: 03:9E:FF:46:30:41:85:0A:13:B2:AF:26:57:62:9D:B8:0E:EC:6F:A9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A983
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/820CFA982EE411F188BEB8E7DAE4EC9C.roa
Signing time: Thu 02 Apr 2026 22:37:20 +0000
ROA not before: Fri 03 Apr 2026 22:37:14 +0000
ROA not after: Wed 13 May 2026 22:37:14 +0000
asID: 272854
IP address blocks: 45.195.12.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Apr 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108931 (0x1a983)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 3 22:37:14 2026 GMT
Not After : May 13 22:37:14 2026 GMT
Subject: CN=69ceefa0-0e11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:fe:8c:a3:07:99:14:eb:a4:bb:f7:7d:9a:c1:
d5:4b:5e:5a:9b:87:96:29:fc:b5:34:20:0c:b5:4d:
6f:75:03:4e:ed:a3:79:99:98:80:f8:3b:9b:0f:f7:
b8:2e:69:53:47:c1:e1:40:17:21:a9:b3:d9:ad:a3:
31:53:e2:af:5a:85:ba:66:7e:be:ef:af:a8:46:57:
12:9e:28:36:4b:c6:c4:15:ab:6a:67:16:af:c0:15:
2e:99:74:d6:4a:ec:47:c8:e5:dc:de:38:f1:fd:5d:
e1:3e:8a:f8:9f:1e:fd:e9:4d:a9:31:6b:18:67:86:
49:f0:57:5a:df:0c:53:79:a1:91:0c:4a:70:ef:b1:
ce:d4:27:ab:66:63:60:0c:17:e6:5d:7e:1b:20:bc:
0a:3c:5d:f5:f6:2a:0a:f1:82:04:e7:bb:37:08:29:
51:50:f2:2f:6c:3a:8e:34:aa:7b:63:ff:bb:6d:ed:
01:88:4a:a5:d5:cd:69:fb:ac:a0:21:f3:95:c5:d7:
ef:3a:72:93:9f:b7:c7:65:99:90:0e:9e:ce:a6:b4:
d8:6b:bf:1f:14:05:c8:49:87:0d:91:2c:5e:14:17:
05:73:cc:51:e2:f5:8d:39:e3:aa:58:2e:5e:96:d7:
32:ea:fc:6b:e5:0e:b6:c3:dd:0a:f6:58:92:2a:61:
64:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:9E:FF:46:30:41:85:0A:13:B2:AF:26:57:62:9D:B8:0E:EC:6F:A9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/820CFA982EE411F188BEB8E7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.12.0/23
Signature Algorithm: sha256WithRSAEncryption
b5:13:e5:b9:2e:f1:ff:35:0a:19:3b:6f:21:3b:e5:19:eb:bd:
03:50:29:5d:7b:95:4c:f1:36:7d:62:fe:ef:5e:46:95:95:b9:
fd:fd:a6:e2:61:73:6d:37:27:a6:ed:cd:95:28:fa:ae:a1:d4:
f1:ef:a2:a5:4e:c3:ba:d2:b0:a6:2b:bf:ff:66:51:84:a0:04:
1f:0d:b7:b5:ca:19:bd:20:3e:ce:e8:cf:5f:03:19:d7:0a:0e:
0a:4f:94:08:8a:26:90:0a:19:6b:35:de:d6:91:fd:09:59:c8:
22:87:56:41:68:73:a3:52:8f:f5:a1:a2:ad:ac:74:82:69:26:
33:b3:90:07:85:40:e4:c8:ee:7e:95:1f:aa:0e:7f:fb:a1:eb:
1e:47:be:87:31:11:ad:4c:3c:ce:9b:f4:ee:6e:40:42:51:03:
b9:30:fc:1f:ff:7e:09:5e:19:29:96:d2:14:6c:a7:40:8b:23:
cd:df:77:6f:17:53:1b:26:7c:91:4b:cc:83:5e:41:ae:4b:46:
5c:a9:c0:81:d1:72:56:60:c4:75:1e:2f:05:3b:10:7f:ca:ed:
5b:b8:5f:af:bc:76:21:54:95:6c:9c:d0:9d:b1:78:95:9b:47:
7c:85:f5:10:c0:d9:f4:0c:6d:1f:ee:b4:ae:71:0f:8a:27:9b:
25:e4:b5:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 14:30:00 2026 by rpki-client