Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9D86705A3B1511F19BA1A9D2CE1D38B0.roa
File: 9D86705A3B1511F19BA1A9D2CE1D38B0.roa (raw, json)
Hash identifier: JPIJc4W51oT4vdfsreJLPoBIFVHV4FdadRBEWR66QHQ=
Subject key identifier: 59:B7:9A:F0:62:63:1A:BD:FD:DC:8E:51:5D:82:0A:DC:27:FA:3A:8F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AD96
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9D86705A3B1511F19BA1A9D2CE1D38B0.roa
Signing time: Sat 18 Apr 2026 10:59:05 +0000
ROA not before: Sat 18 Apr 2026 10:59:00 +0000
ROA not after: Sat 23 May 2026 10:59:00 +0000
asID: 138910
IP address blocks: 45.195.240.0/24 maxlen: 24
45.195.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Apr 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109974 (0x1ad96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 18 10:59:00 2026 GMT
Not After : May 23 10:59:00 2026 GMT
Subject: CN=69e363f9-d96e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a4:50:91:38:e0:5a:02:aa:fc:32:bd:ee:37:
bc:0a:1e:8d:3b:c6:c3:12:0f:99:14:78:32:c1:5b:
fc:5e:ba:b3:8d:b3:b2:bd:33:0d:fd:02:3f:f3:c3:
de:56:fd:d1:64:09:7e:86:fb:7e:f6:15:75:c2:ae:
20:ab:74:57:cd:ab:35:a5:80:9e:db:68:b7:e2:b4:
80:ca:1f:52:b3:12:84:ba:00:2c:32:42:51:ef:37:
fa:79:8a:17:e3:9f:59:cc:b2:af:b6:d4:5c:e2:4c:
82:4a:f2:98:bb:b1:8f:dc:8d:ff:dd:f4:fa:82:a9:
43:f7:40:df:39:9b:bf:4a:01:c6:d4:1d:e7:c1:22:
8a:61:a0:bd:25:92:d3:dd:9b:47:5b:d3:29:0a:c5:
6a:ad:c3:e1:8e:93:dc:ad:2b:5d:7d:98:de:b3:e2:
72:c9:d1:d6:cd:b4:09:98:37:74:28:d1:c0:18:ad:
c8:48:06:5d:ab:47:58:f3:ab:6f:c0:db:ad:b6:e8:
33:fc:f1:38:02:5e:d7:db:36:ff:e0:ff:b0:c3:c4:
1e:8f:77:3f:5e:84:1d:e8:7f:76:4a:49:2f:4a:d7:
33:05:70:91:5f:05:ad:a3:6c:a2:02:af:54:33:1e:
cd:95:f0:c7:6e:af:03:c4:c3:c1:47:ce:32:63:bd:
f8:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:B7:9A:F0:62:63:1A:BD:FD:DC:8E:51:5D:82:0A:DC:27:FA:3A:8F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9D86705A3B1511F19BA1A9D2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.240.0/23
Signature Algorithm: sha256WithRSAEncryption
a7:5f:e1:48:fb:a1:92:f3:99:4e:fb:14:0a:0b:11:ca:b9:7e:
71:58:e5:4d:62:c6:93:16:56:c0:2e:c2:75:e8:9b:44:a3:e7:
d1:43:c8:f3:9d:0c:80:3b:6d:78:e3:89:f3:ee:84:0c:60:f6:
0d:dc:20:39:95:fc:53:3b:1a:ab:ef:45:c0:c2:c9:69:ea:79:
d5:cd:5c:df:7e:8d:3e:de:1c:13:bb:79:d7:cc:e5:b8:95:3d:
9a:8c:a6:17:7b:6e:42:3a:96:1d:22:6a:ac:ce:14:e7:60:f0:
7a:b0:2b:1b:c7:7b:25:55:56:5a:dd:84:8c:8b:25:09:15:e6:
71:8a:3e:b6:5e:65:55:db:e2:87:e5:da:6f:47:6d:7a:97:85:
b5:52:8f:a2:42:70:56:fe:3a:a5:c9:3e:38:90:0b:df:80:11:
85:51:7e:69:af:e6:2a:64:74:9f:48:8b:92:02:53:e3:fa:a0:
e3:c4:d4:13:51:f8:62:56:7c:92:15:f9:01:d9:c3:89:0b:61:
f5:fd:65:1b:fa:7e:5d:07:b8:cc:af:53:98:67:49:79:43:36:
62:91:56:ae:92:aa:a2:2a:3c:e8:99:53:04:e2:0a:57:b2:93:
25:23:4d:b3:7f:a4:ac:f4:42:74:ed:ca:c3:3d:a5:52:2d:09:
6d:aa:d2:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 14:29:29 2026 by rpki-client