Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DD30202C16FB11F18CFAADC7DAE4EC9C.roa
File: DD30202C16FB11F18CFAADC7DAE4EC9C.roa (raw, json)
Hash identifier: rWFt3oMlA7E3uvI54OY+H1JnydUkDFWhxg4KH1t3tp4=
Subject key identifier: D4:38:01:5E:47:9A:FB:12:C4:3E:28:2B:33:F3:0B:D5:4F:0A:D1:D7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A20B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DD30202C16FB11F18CFAADC7DAE4EC9C.roa
Signing time: Tue 03 Mar 2026 12:24:03 +0000
ROA not before: Tue 03 Mar 2026 12:23:59 +0000
ROA not after: Fri 17 Apr 2026 12:23:59 +0000
asID: 273824
IP address blocks: 45.194.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 06 Mar 2026 00:26:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107019 (0x1a20b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 3 12:23:59 2026 GMT
Not After : Apr 17 12:23:59 2026 GMT
Subject: CN=69a6d2e3-157e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cc:e8:ea:fc:9c:74:98:b9:43:ee:75:5a:08:
34:72:ec:6d:5a:b9:86:cc:ad:b6:01:17:80:3e:1f:
5c:1f:75:b4:8d:e1:5d:ad:7d:3b:27:70:c7:f5:ac:
a2:2d:8f:ac:11:e7:96:c3:cc:e9:b3:47:4e:06:83:
cf:62:94:fc:b1:37:fe:45:90:1b:72:38:53:51:75:
91:fc:e4:38:1f:da:4e:bc:b7:c3:14:cc:61:46:c7:
36:f2:9e:47:b5:62:7f:2d:c8:e7:5c:b5:7a:d6:0f:
4f:be:1b:20:cb:6c:cf:72:d4:5b:89:c3:88:98:85:
e5:86:2a:a8:2f:a0:dc:d8:d5:f8:45:ea:c5:68:48:
c7:a2:02:2c:67:bb:ce:6a:02:ee:73:af:15:06:65:
8b:7c:59:04:ae:b8:f2:b9:5c:0c:4d:cf:7a:f0:bf:
96:0a:7e:49:7a:14:39:e2:36:6d:2a:11:b4:d4:51:
a6:77:74:0c:8c:eb:eb:8e:a4:92:b2:fd:c2:c3:71:
fb:90:00:c0:f4:2f:f5:0b:3b:02:0b:59:c4:2d:e5:
d9:db:73:89:47:bf:9b:93:87:c4:75:be:c4:8d:56:
74:52:27:d6:8e:f7:00:ae:3d:98:4d:ed:a6:b6:46:
e0:d3:3e:d6:86:69:ce:dc:9a:17:66:73:fa:2f:31:
37:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:38:01:5E:47:9A:FB:12:C4:3E:28:2B:33:F3:0B:D5:4F:0A:D1:D7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DD30202C16FB11F18CFAADC7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.123.0/24
Signature Algorithm: sha256WithRSAEncryption
31:62:45:11:ef:44:a3:a0:51:65:ac:3f:e5:3b:ec:b7:70:54:
e2:df:a6:b2:42:ad:b9:8b:07:e4:4c:1c:b3:53:67:04:7e:3e:
41:a7:a1:65:e0:03:9e:78:61:3f:71:64:48:2c:d6:ac:10:05:
3f:c6:0e:23:a1:a3:8e:e0:71:dd:15:55:8d:aa:f0:be:ae:48:
49:98:b1:6c:98:09:89:d0:80:03:48:9f:f1:61:f4:10:b5:e6:
92:12:0c:72:ff:b5:d1:ca:82:cf:a7:9b:2b:6b:0f:35:4e:ef:
51:98:d1:36:53:14:29:2b:05:c0:b8:c7:11:03:92:d3:06:3d:
e6:10:81:97:59:c9:a7:50:f0:49:dc:44:dc:62:c8:34:5b:66:
ca:58:e3:8a:73:0d:a8:1a:cb:a5:57:0c:03:f7:d1:60:f3:36:
15:a8:13:ca:e2:6c:08:b8:79:76:81:ac:69:36:65:ee:72:f8:
ba:cd:cf:ad:9f:e6:fc:1c:20:8e:cf:fb:c4:e1:e4:4a:d8:5c:
52:ef:16:03:53:37:20:72:c9:87:64:da:11:fc:75:61:25:97:
75:70:7f:a8:84:5a:23:f7:2b:08:f6:0a:bb:66:f3:ea:4a:60:
b7:65:c0:98:19:3e:68:a3:da:57:ad:3d:02:20:75:a6:eb:2d:
e3:ea:5a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 11:15:29 2026 by rpki-client