Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9ED6297829D611F1874A06BDDAE4EC9C.roa
File: 9ED6297829D611F1874A06BDDAE4EC9C.roa (raw, json)
Hash identifier: JLUlvIkF2SpaJ5cOi2QS297NcM8H0LRZ3yqNcaYqCqA=
Subject key identifier: D6:E4:FF:6A:E1:49:68:ED:5D:91:60:2F:46:8D:8A:62:DB:F2:73:37
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A7CD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9ED6297829D611F1874A06BDDAE4EC9C.roa
Signing time: Fri 27 Mar 2026 12:15:19 +0000
ROA not before: Fri 27 Mar 2026 12:15:14 +0000
ROA not after: Fri 01 May 2026 12:15:14 +0000
asID: 174
IP address blocks: 45.195.244.0/23 maxlen: 24
45.197.6.0/23 maxlen: 24
45.202.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 15 Apr 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108493 (0x1a7cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 27 12:15:14 2026 GMT
Not After : May 1 12:15:14 2026 GMT
Subject: CN=69c674d7-2e85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:16:68:f4:ce:06:fd:03:34:10:9a:7b:fc:31:
ab:1a:bf:cf:e6:23:84:d3:e9:bc:fe:73:04:37:3e:
3b:4c:18:bb:a2:49:4c:44:85:69:ca:2d:07:05:5f:
50:c8:eb:8d:4b:3a:a5:3f:de:fa:f1:5f:b4:3e:e1:
17:2e:2d:62:a1:f9:13:fe:46:c3:65:4d:bd:11:71:
82:17:7b:41:6b:77:50:74:4b:41:6c:57:80:6a:ea:
65:bc:54:49:b1:79:47:6a:42:b4:e5:5d:99:15:77:
77:99:6d:eb:ce:2b:44:1f:73:e5:a7:cf:bd:2f:3a:
88:2e:72:14:4a:79:d8:07:cf:8b:a4:98:0f:e3:ed:
34:74:22:9f:e4:75:f8:6f:7d:db:f9:ea:94:33:03:
2a:1a:8b:98:ef:5a:68:30:f1:ce:3a:33:2b:39:c6:
0a:ac:26:f0:07:13:8f:0c:91:26:87:32:0a:d7:df:
6c:ba:c1:37:38:d4:c1:24:d9:ff:ee:3d:d6:e7:d5:
fc:0b:f8:f2:d9:d6:3b:00:43:6f:e8:ad:5a:99:1e:
26:23:42:c9:91:2c:5e:86:7b:cc:4e:61:72:56:7f:
48:42:53:cd:9d:8a:19:7f:5c:4b:af:ca:36:ed:04:
6f:10:c9:ec:ff:3d:8f:bf:41:16:d0:4e:a2:81:d4:
ac:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:E4:FF:6A:E1:49:68:ED:5D:91:60:2F:46:8D:8A:62:DB:F2:73:37
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9ED6297829D611F1874A06BDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.244.0/23
45.197.6.0/23
45.202.112.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:fe:3b:48:cd:59:08:d3:80:99:1d:bb:50:40:11:7d:07:b2:
a4:ff:c2:2b:ca:f1:0f:45:4b:71:b5:73:bc:b3:33:97:d3:e5:
13:e5:4b:f6:0f:18:ea:66:91:69:6a:45:e0:95:74:55:3b:24:
5f:53:8a:a3:91:2b:15:0c:57:4f:f1:2e:5f:ad:0e:cd:23:5a:
0b:a1:24:c0:3e:10:5a:79:56:c9:8a:b2:e0:ec:6d:f3:91:dd:
03:dd:d2:5b:c7:fb:7c:9b:0d:ee:0c:f3:63:33:ca:31:87:ed:
68:1e:b6:cb:97:2a:ca:b7:9e:fa:4d:aa:5b:fb:7c:99:0e:7a:
7e:70:69:03:a2:f2:ab:e7:44:5e:99:90:8c:fe:20:4f:13:03:
33:d8:fe:a7:0b:38:20:90:1d:ec:87:a2:2a:11:4f:1a:4f:b9:
a1:7a:28:15:8a:59:5a:18:a7:5a:6e:95:88:6b:06:18:d9:c9:
4e:8f:1b:d6:11:5f:1c:7c:03:af:e2:e4:35:48:b7:1a:b9:7d:
40:34:41:24:72:cf:66:52:2b:35:1f:d0:84:ea:7d:3b:ba:2c:
28:e9:0c:a8:4f:5d:6a:b7:8c:11:ab:20:ac:64:b0:f6:9e:05:
ff:8f:d2:88:93:02:b2:3c:32:23:bc:a8:0b:21:17:55:03:17:
68:68:cb:af
-----BEGIN CERTIFICATE-----
MIIFjTCCBHWgAwIBAgIDAafNMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMzI3MTIxNTE0WhcNMjYwNTAxMTIxNTE0WjAYMRYw
FAYDVQQDEw02OWM2NzRkNy0yZTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzhZo9M4G/QM0EJp7/DGrGr/P5iOE0+m8/nMENz47TBi7oklMRIVpyi0H
BV9QyOuNSzqlP9768V+0PuEXLi1iofkT/kbDZU29EXGCF3tBa3dQdEtBbFeAaupl
vFRJsXlHakK05V2ZFXd3mW3rzitEH3Plp8+9LzqILnIUSnnYB8+LpJgP4+00dCKf
5HX4b33b+eqUMwMqGouY71poMPHOOjMrOcYKrCbwBxOPDJEmhzIK199susE3ONTB
JNn/7j3W59X8C/jy2dY7AENv6K1amR4mI0LJkSxehnvMTmFyVn9IQlPNnYoZf1xL
r8o27QRvEMns/z2Pv0EW0E6igdSstQIDAQABo4ICrjCCAqowHQYDVR0OBBYEFNbk
/2rhSWjtXZFgL0aNimLb8nM3MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85RUQ2Mjk3ODI5RDYxMUYxODc0QTA2QkREQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBLcP0AwQBLcUGAwQALcpwMA0G
CSqGSIb3DQEBCwUAA4IBAQBv/jtIzVkI04CZHbtQQBF9B7Kk/8IryvEPRUtxtXO8
szOX0+UT5Uv2DxjqZpFpakXglXRVOyRfU4qjkSsVDFdP8S5frQ7NI1oLoSTAPhBa
eVbJirLg7G3zkd0D3dJbx/t8mw3uDPNjM8oxh+1oHrbLlyrKt576Tapb+3yZDnp+
cGkDovKr50RemZCM/iBPEwMz2P6nCzggkB3sh6IqEU8aT7mheigVillaGKdabpWI
awYY2clOjxvWEV8cfAOv4uQ1SLcauX1ANEEkcs9mUis1H9CE6n07uiwo6QyoT11q
t4wRqyCsZLD2ngX/j9KIkwKyPDIjvKgLIRdVAxdoaMuv
-----END CERTIFICATE-----
Generated at Mon Apr 13 06:51:56 2026 by rpki-client