Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FDCBF0941D1411F1996C44DBDAE4EC9C.roa
File: FDCBF0941D1411F1996C44DBDAE4EC9C.roa (raw, json)
Hash identifier: Ki9llHiYeHaPmodJbiSK2R2TefEQhiQ8zTd/X0dWvE4=
Subject key identifier: 45:6D:25:1C:0E:6C:47:06:33:CF:38:8B:5D:17:2B:89:68:3F:30:70
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A3F0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FDCBF0941D1411F1996C44DBDAE4EC9C.roa
Signing time: Wed 11 Mar 2026 06:39:02 +0000
ROA not before: Wed 11 Mar 2026 06:38:57 +0000
ROA not after: Wed 13 May 2026 06:38:57 +0000
asID: 139880
IP address blocks: 45.204.160.0/20 maxlen: 24
45.204.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 14 Mar 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107504 (0x1a3f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 11 06:38:57 2026 GMT
Not After : May 13 06:38:57 2026 GMT
Subject: CN=69b10e06-6ecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:df:70:35:49:b8:aa:7f:70:25:b7:3e:a5:f3:
71:8f:b7:b3:54:de:a4:26:0a:ce:a3:ee:f0:61:4c:
5a:05:a6:fe:ef:f6:f9:00:99:67:54:e1:bd:0e:a5:
37:cc:15:17:df:a0:e3:52:8e:c3:99:10:77:ec:50:
ae:f0:1d:d0:38:48:69:a7:02:bb:91:f0:50:6a:86:
e0:7b:f2:96:a8:c4:a6:ec:6f:0a:a7:1f:c4:19:65:
4b:16:12:a8:98:b3:b4:fb:e7:96:f1:60:a1:26:c7:
66:16:eb:4e:4e:7a:7c:29:47:2e:ff:72:66:0d:39:
9d:6a:32:c4:4f:6c:7a:5e:02:e7:ba:86:d0:4a:25:
fc:9c:cc:32:d3:e2:bc:a2:cf:37:06:eb:72:08:20:
31:34:05:0c:3a:8e:68:b9:42:2f:9e:af:50:8f:ea:
70:3b:80:72:1e:d6:29:71:28:6b:68:50:46:5c:e3:
7c:3a:89:4d:52:37:51:ff:11:c7:05:b6:62:fe:f3:
97:9a:43:3a:57:5e:e6:74:ad:90:6f:fb:a2:99:a5:
13:3c:48:6d:fd:7c:82:29:4e:11:7b:b1:e7:47:40:
1a:d9:26:a0:d6:d9:2e:76:e9:e2:c8:0d:bd:26:9e:
74:82:60:4c:bd:13:69:ae:4e:1b:05:04:3e:45:07:
44:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:6D:25:1C:0E:6C:47:06:33:CF:38:8B:5D:17:2B:89:68:3F:30:70
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FDCBF0941D1411F1996C44DBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.160.0/20
45.204.224.0/20
Signature Algorithm: sha256WithRSAEncryption
91:39:4c:c1:47:8a:47:61:8a:80:b9:1b:96:e2:b7:e2:04:f5:
dc:e3:03:36:40:02:1f:d3:1b:77:1a:8a:6f:9e:19:a9:a3:1e:
5c:55:05:c4:74:3f:af:20:03:1e:c8:37:87:99:94:2c:09:71:
18:16:ea:3e:64:dd:f3:05:a3:66:32:69:4f:ef:f0:0c:8e:ca:
0a:e3:7a:5b:c4:de:20:45:de:86:00:83:99:4b:00:3e:9a:d0:
7e:95:fc:3e:7d:29:1f:5c:b1:16:a5:77:f7:b8:69:a6:52:3d:
44:7c:b5:cc:6d:5e:02:86:3c:6f:92:ef:d7:26:16:17:d4:b6:
58:99:de:19:34:e0:97:ce:69:8b:61:4c:ca:c2:25:9f:a1:96:
61:5b:8c:8e:0a:0d:43:f5:3a:53:72:81:80:5a:67:e9:6d:97:
33:1f:68:2f:20:84:50:ff:1e:85:7c:5c:09:14:01:2f:9d:28:
74:d0:42:77:e6:d1:69:49:9e:d7:50:ef:6f:6e:56:7a:89:2e:
56:44:b9:4f:e3:5a:c1:eb:23:91:4e:42:32:a3:b7:23:76:06:
36:71:8b:7d:2e:73:80:21:49:1c:ff:c0:22:95:8f:60:6c:fd:
03:e9:42:57:2e:07:05:e1:4a:e6:94:33:38:64:8b:2d:6b:e7:
2f:0e:ea:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 01:26:19 2026 by rpki-client