Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D453847A170111F1910FDEEDDAE4EC9C.roa
File: D453847A170111F1910FDEEDDAE4EC9C.roa (raw, json)
Hash identifier: jHCZDb7k4/rp/hysC6GljHUvArvLgD4DXRalwwgseRo=
Subject key identifier: 78:4B:A3:FA:B6:6A:24:4A:01:A5:DC:73:92:0C:0C:87:28:86:6E:BC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A20D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D453847A170111F1910FDEEDDAE4EC9C.roa
Signing time: Tue 03 Mar 2026 13:06:45 +0000
ROA not before: Tue 03 Mar 2026 13:06:40 +0000
ROA not after: Thu 18 Feb 2027 13:06:40 +0000
asID: 47524
IP address blocks: 45.194.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 05 Mar 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107021 (0x1a20d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 3 13:06:40 2026 GMT
Not After : Feb 18 13:06:40 2027 GMT
Subject: CN=69a6dce5-d3fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:59:5f:ad:1e:68:bd:41:e4:6b:8b:24:f5:7e:
ec:7f:5a:0b:3f:14:c3:51:b3:81:a4:4b:f8:e1:39:
32:4c:c4:eb:2d:84:ec:f7:0a:7d:aa:c5:13:9b:00:
97:7c:a6:0e:ad:17:32:1c:57:b6:a2:fd:0f:4c:f9:
b9:c2:cd:b2:63:12:c3:a3:42:72:0a:c1:51:27:9a:
3e:f5:67:b1:a8:66:72:8d:50:0e:6b:a0:27:20:97:
8d:04:7b:a7:c0:03:51:4c:d3:39:b5:38:1d:fc:9e:
53:ce:bc:76:0d:3f:92:68:7d:d4:a5:87:60:0d:ea:
7f:31:3d:43:54:c5:1e:42:06:50:2c:6a:fe:9d:d4:
2e:e2:88:ca:2f:68:67:dd:9e:bf:db:38:c6:31:3a:
2f:e2:b8:9b:a7:e0:72:60:89:77:fe:9f:36:b5:e9:
d6:9a:0f:44:68:8b:12:92:75:37:b7:1f:ae:d6:49:
54:1e:6d:2f:5b:44:94:02:24:39:9c:0d:d9:98:b1:
af:e3:44:f7:3e:17:78:df:cc:1a:0e:5e:ee:5f:d4:
37:f8:43:b3:68:b1:33:1b:a9:81:b9:36:c9:4a:9e:
dc:89:52:70:07:82:7f:bc:f2:dd:9f:4b:00:3b:ef:
52:a9:97:ed:cf:7b:75:92:30:dd:51:f6:91:7f:4c:
4e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:4B:A3:FA:B6:6A:24:4A:01:A5:DC:73:92:0C:0C:87:28:86:6E:BC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D453847A170111F1910FDEEDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.94.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:0a:8c:5a:99:cc:e4:74:6b:98:df:d7:54:e5:57:7f:2b:4b:
05:ea:0d:7f:03:f3:f5:99:b9:dd:27:f8:e3:77:4a:4a:90:cd:
fd:47:90:fa:79:bc:90:68:51:0c:1a:b3:02:88:12:a3:5f:fe:
54:69:68:8c:a3:10:fd:c5:64:c3:34:e0:5e:24:7a:c5:90:27:
18:52:c6:2e:f2:9a:7e:f0:c8:c2:db:ae:9a:08:fe:c4:95:97:
67:46:5e:b4:24:62:7a:1b:30:ef:6e:97:3f:40:b1:b3:3c:84:
3a:fa:f9:13:5d:f5:d9:e9:b3:d1:9e:d6:14:69:83:50:48:9a:
80:c1:56:e3:31:2f:59:41:41:8a:1e:61:1a:c6:6b:53:c3:37:
03:d4:74:64:ec:21:73:38:59:83:32:76:79:fe:da:62:a1:6d:
53:93:53:40:db:6a:86:95:fa:ab:87:50:89:f0:db:79:c8:da:
72:f8:94:9f:4e:f0:77:de:e1:60:30:f0:7e:3c:c7:15:39:1e:
71:16:7b:bf:64:75:9c:c4:68:5a:58:b7:07:f9:82:28:e7:1c:
79:9f:f3:3e:69:c1:67:fb:c3:39:ed:da:8d:0a:64:da:15:1a:
91:b8:a3:90:ab:f3:ff:9d:6a:89:19:25:f3:f6:d6:22:46:5f:
1a:14:6e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 22:14:40 2026 by rpki-client