Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9C21FE06440111F1ADCEB7D9CE1D38B0.roa
File: 9C21FE06440111F1ADCEB7D9CE1D38B0.roa (raw, json)
Hash identifier: ybxlhc77b7ErSvV0SvzKLIv97C3susTW5c0xo4mPyLg=
Subject key identifier: 12:C2:A1:5E:F3:9B:3C:12:D8:66:4D:CA:55:7D:30:54:88:BD:5C:AE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AFEB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9C21FE06440111F1ADCEB7D9CE1D38B0.roa
Signing time: Wed 29 Apr 2026 19:28:33 +0000
ROA not before: Wed 29 Apr 2026 19:28:27 +0000
ROA not after: Thu 21 May 2026 19:28:27 +0000
asID: 198474
IP address blocks: 45.202.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 03 May 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110571 (0x1afeb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 29 19:28:27 2026 GMT
Not After : May 21 19:28:27 2026 GMT
Subject: CN=69f25be1-9558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b7:20:1a:a9:e4:7b:8d:cc:f7:f9:47:69:fc:
17:bb:8b:c0:b5:da:a7:b9:98:11:f2:9e:16:72:80:
1b:63:7c:ff:3d:e7:7b:a7:d0:0e:88:6f:32:e0:fc:
9c:af:5b:54:52:4c:38:a5:8e:33:df:56:2a:92:0b:
91:c3:c3:1f:14:30:2e:9e:ee:ef:6b:ec:8f:46:19:
36:40:67:66:9e:61:b4:43:37:35:9d:88:e8:d6:cb:
86:7d:67:d7:6f:39:0a:d5:c1:b6:ac:99:a4:0e:92:
f3:1b:26:46:03:a8:22:6b:39:d8:37:97:4a:b8:d2:
29:b3:1b:50:2c:bf:7b:ec:77:31:14:ef:2c:4d:98:
f4:32:c2:f4:31:92:b0:68:0a:71:c0:cd:52:fa:40:
44:97:65:b6:c6:45:a5:d0:8b:f8:ac:c9:98:25:78:
8a:21:18:dd:5a:ab:57:62:58:f4:82:2e:61:f0:37:
1f:4d:a1:a2:dc:72:74:ce:a8:55:86:d4:83:1b:d0:
35:f1:c0:9a:f0:ea:75:2f:e8:40:b1:c9:49:24:41:
16:8e:66:b8:48:bd:1a:46:2c:f3:35:72:1f:90:dc:
37:d0:9a:c8:e9:1c:bc:9c:59:18:c5:d8:a5:51:80:
14:23:83:bc:5c:99:2f:df:ae:b6:39:0d:22:e3:51:
ab:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C2:A1:5E:F3:9B:3C:12:D8:66:4D:CA:55:7D:30:54:88:BD:5C:AE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9C21FE06440111F1ADCEB7D9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.46.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:2c:3f:c1:ac:ba:51:d7:a9:4e:07:d2:04:e4:a2:a0:19:f3:
df:7e:7c:99:d9:71:5d:cb:a1:dc:10:10:fb:94:8a:2e:07:27:
8d:ae:97:b8:30:60:44:1f:54:8f:71:ab:9e:0f:7b:d7:42:17:
16:dd:65:73:10:e0:c3:5b:0a:e5:21:55:1c:d4:b3:35:48:df:
df:30:ce:d5:d6:96:65:e5:5f:6b:b5:b1:cc:9d:10:ec:84:c9:
99:89:bd:1c:24:97:6c:9c:33:81:6c:68:9d:bd:6c:d6:ee:90:
7c:0c:db:3b:36:42:f9:a1:94:99:d5:be:44:7c:8f:7b:5c:9d:
92:3d:63:b8:d4:83:12:55:83:5a:d2:d3:1f:58:3d:ab:29:f0:
8f:3c:84:8e:97:90:7d:65:0a:80:15:30:3c:a8:60:46:44:b6:
aa:32:e1:89:87:49:20:c8:3d:60:7c:77:fc:e6:39:4b:a2:c6:
75:3d:7b:ac:7d:31:22:ab:94:e4:06:04:81:12:b5:0e:9d:9b:
8f:db:d8:40:07:e2:f4:93:69:6f:1c:6a:b1:a4:a6:6f:35:e1:
0b:1c:ee:02:cf:50:bb:15:1d:a2:69:50:21:5c:db:02:82:ea:
bf:d8:52:26:de:d9:d1:f2:fc:8c:df:b9:0a:2c:0c:6e:86:3c:
f2:a3:ef:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 1 16:16:55 2026 by rpki-client