Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A7633362AA911F183F6A989DAE4EC9C.roa
File: 9A7633362AA911F183F6A989DAE4EC9C.roa (raw, json)
Hash identifier: zAFazB4o4K/Nx7NPRv8eaHlBss9HhdB1pauXIuG1Lyg=
Subject key identifier: C0:DF:D4:17:F2:D2:27:4E:13:1E:F6:74:2A:80:C2:10:19:EA:FC:30
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A805
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A7633362AA911F183F6A989DAE4EC9C.roa
Signing time: Sat 28 Mar 2026 13:25:36 +0000
ROA not before: Sat 28 Mar 2026 13:25:31 +0000
ROA not after: Fri 22 May 2026 13:25:31 +0000
asID: 141159
IP address blocks: 45.205.16.0/21 maxlen: 24
45.205.16.0/24 maxlen: 24
45.205.17.0/24 maxlen: 24
45.205.18.0/24 maxlen: 24
45.205.19.0/24 maxlen: 24
45.205.20.0/24 maxlen: 24
45.205.21.0/24 maxlen: 24
45.205.22.0/24 maxlen: 24
45.205.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 09 Apr 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108549 (0x1a805)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 28 13:25:31 2026 GMT
Not After : May 22 13:25:31 2026 GMT
Subject: CN=69c7d6d0-6bda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c0:b2:90:ac:da:2d:b4:b6:fa:80:41:59:7a:
88:5e:e8:be:f1:1c:ad:b5:ec:2b:46:9f:b9:1b:2e:
95:da:47:f6:da:ca:5e:31:87:92:fd:a1:ab:85:c7:
e7:af:c0:8f:4d:c7:83:8a:c4:a2:94:5f:3b:4e:e0:
59:3f:06:cf:e0:85:20:1b:70:f0:f1:fe:1c:a4:12:
56:0a:e4:62:2e:03:56:98:88:5b:69:d5:f0:fc:08:
86:0e:85:5f:2e:83:3d:00:66:5e:0e:b2:31:bd:b7:
ad:d2:6a:f7:10:30:0a:de:25:19:30:10:f9:1f:e3:
8f:74:e8:63:6c:fd:d5:61:bb:96:ac:0d:40:e0:b9:
cb:be:85:a4:f1:fd:76:31:97:94:aa:a7:38:17:6b:
e6:02:91:8f:05:1d:fb:1b:19:08:21:cf:88:ea:fa:
b6:6b:23:ba:25:0c:b3:31:b1:e6:85:e7:fa:1b:7e:
d4:27:8c:a5:68:41:34:f0:71:b4:20:1a:e9:a4:38:
bd:3b:d1:34:fb:3a:a1:7f:8a:b3:65:c9:14:f9:7a:
2b:96:65:b1:97:f4:e7:2a:94:e3:88:16:c7:6d:23:
01:e8:ad:4c:0a:f7:cf:8e:3a:82:84:41:61:1b:16:
e9:6d:1e:b6:3d:82:a0:3e:21:1e:47:fc:16:70:1e:
11:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:DF:D4:17:F2:D2:27:4E:13:1E:F6:74:2A:80:C2:10:19:EA:FC:30
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9A7633362AA911F183F6A989DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.16.0/21
Signature Algorithm: sha256WithRSAEncryption
8d:f4:0a:be:c1:c3:f3:e9:4b:13:56:f9:fd:4e:b6:fc:4f:3c:
4f:50:5e:7c:30:36:bc:14:9b:d6:28:20:74:8c:e1:1c:18:f0:
ba:7a:96:3a:ba:f4:65:5b:d2:15:18:c6:eb:30:68:b4:09:4c:
cd:2f:f0:4b:ef:ab:e2:af:54:4f:0c:87:7c:88:d6:12:02:04:
9e:5e:9e:80:03:42:19:26:d0:0c:63:d1:d5:ce:c6:66:a9:5e:
50:56:a9:d5:61:69:82:36:7f:cb:6f:ca:12:c9:7b:f3:48:4a:
1d:98:57:20:f9:19:76:dc:65:67:a2:b3:ff:7d:8e:02:28:b9:
85:0f:d9:d6:b4:d3:16:1c:6a:11:d4:40:7c:c7:a2:f9:da:a2:
30:52:c9:7b:1e:3f:4a:b5:1a:89:f4:07:c7:47:91:95:2c:33:
1c:cc:9d:3d:94:e4:dc:2b:01:bb:db:8d:78:7f:ce:20:0b:cd:
55:d1:eb:40:14:9d:0d:f8:f4:26:4e:a3:bc:15:f3:02:c7:64:
04:c6:cf:99:7c:c8:84:15:89:c5:e1:c9:d1:2b:c0:14:20:cd:
cf:c6:05:d4:4b:ff:b0:c3:a7:d0:fe:03:9c:ef:a6:66:f1:4c:
47:2e:ec:9d:92:a8:3a:ad:da:bf:4c:48:2f:5b:6e:ab:a1:1e:
1e:04:49:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 21:41:23 2026 by rpki-client