Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D1FCF6480A9A11F1A505DEB3DAE4EC9C.roa
File: D1FCF6480A9A11F1A505DEB3DAE4EC9C.roa (raw, json)
Hash identifier: 54ka6ftvChGz5QLlaPwn/ldviqyLYmxqeREwMGAPNYM=
Subject key identifier: A0:BD:40:3F:79:B7:D6:80:46:B3:F0:60:E3:AB:6E:86:F0:A8:67:00
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019DF5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D1FCF6480A9A11F1A505DEB3DAE4EC9C.roa
Signing time: Sun 15 Feb 2026 18:19:09 +0000
ROA not before: Sun 15 Feb 2026 18:19:04 +0000
ROA not after: Mon 02 Mar 2026 18:19:04 +0000
asID: 174
IP address blocks: 45.195.244.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 28 Feb 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105973 (0x19df5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 15 18:19:04 2026 GMT
Not After : Mar 2 18:19:04 2026 GMT
Subject: CN=69920e1d-7d97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ab:a2:70:38:63:7b:a7:34:df:69:ef:44:5a:
d6:27:b9:f8:c6:53:ad:6b:f5:90:5a:fc:45:05:22:
f6:a9:37:2c:dd:7b:77:f5:7b:2d:52:23:4a:8b:35:
17:ef:7f:8e:48:fc:ec:e1:37:09:b3:b7:38:36:e5:
1d:f6:75:be:8a:ea:0f:89:c4:59:49:5e:22:9b:cf:
34:2a:68:d2:9f:80:c3:51:2e:fe:8c:55:67:11:02:
e9:64:28:cd:06:11:9c:30:3e:28:bb:bc:01:bf:05:
33:14:e8:c3:5e:e6:0c:48:48:45:1e:b5:15:5c:1a:
c5:92:21:1a:9a:24:a2:2d:d6:f6:ad:92:89:b9:0a:
d0:8a:77:ab:ca:42:0b:0a:8e:02:2e:21:58:6b:76:
8c:0a:75:f8:d6:e9:58:8d:38:88:02:ea:02:e3:8c:
55:a5:77:0c:be:17:a7:ad:13:05:c9:82:9c:ce:6e:
a9:8d:b8:bb:67:08:9b:d8:32:5c:ad:de:6a:e7:2b:
a5:b3:e6:1b:0d:cd:14:80:dc:85:6f:2c:67:fe:52:
41:91:f5:8d:ab:04:f3:bc:03:10:d6:ac:5e:3d:b0:
b6:3f:7b:84:ef:d9:72:4e:51:dc:39:9d:f7:68:29:
06:a1:bf:56:3c:fd:66:a1:35:33:8b:f0:6c:eb:b1:
6e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:BD:40:3F:79:B7:D6:80:46:B3:F0:60:E3:AB:6E:86:F0:A8:67:00
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D1FCF6480A9A11F1A505DEB3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.244.0/23
Signature Algorithm: sha256WithRSAEncryption
30:c0:70:4e:a6:46:38:0a:69:c2:64:64:2a:01:b6:14:b3:b9:
57:3a:41:81:2e:26:4f:c6:32:8a:f3:5b:b0:ab:dc:c5:83:3c:
65:8e:28:21:df:be:27:d2:4d:e2:f5:78:b4:12:30:7e:49:30:
d8:ec:45:00:8c:09:2e:dc:a6:81:60:cc:a1:bf:16:f0:bd:b0:
a7:b2:68:ab:10:47:b7:66:24:90:8a:8b:85:c3:29:22:dc:36:
f2:74:1c:6d:62:31:2b:44:11:a0:72:cb:66:67:58:09:4f:8a:
43:98:29:27:2f:64:7c:43:e1:e0:31:a9:47:4a:7b:e1:45:92:
ea:6a:e7:2d:5a:03:69:85:3c:c2:ef:aa:64:ca:8f:9e:97:1b:
b8:2d:8e:99:cd:d6:05:4e:0e:2e:48:61:97:43:de:4d:3d:51:
6e:47:c4:af:4f:f6:23:5c:a8:ae:18:6b:c4:ee:1b:8a:67:96:
c0:8a:f4:90:ec:c2:07:6b:f8:8c:05:d1:00:de:c8:11:d1:95:
be:96:37:cd:ac:fc:9b:f4:f3:fd:b3:30:95:d7:7b:1f:3a:1f:
b3:f2:0f:c6:81:34:fb:00:48:9b:e4:42:b1:d4:7e:2b:c5:db:
80:39:82:f0:74:49:58:df:cb:fa:67:66:53:db:cd:5d:31:8a:
0e:f4:68:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 09:24:06 2026 by rpki-client