Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0FCFDD823E8F11F1AB6C721BCF1D38B0.roa
File: 0FCFDD823E8F11F1AB6C721BCF1D38B0.roa (raw, json)
Hash identifier: aDBPTaKBYJIhFFYb97RgAMbCQsduS+naIjzFueQ0Teo=
Subject key identifier: 0F:7A:BE:EB:7B:29:2D:66:B2:1A:B1:4B:CB:7E:6C:D9:66:E5:C4:CC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AE6C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0FCFDD823E8F11F1AB6C721BCF1D38B0.roa
Signing time: Wed 22 Apr 2026 21:05:59 +0000
ROA not before: Wed 22 Apr 2026 21:05:55 +0000
ROA not after: Mon 08 Jun 2026 21:05:55 +0000
asID: 395793
IP address blocks: 45.195.148.0/23 maxlen: 24
45.195.202.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110188 (0x1ae6c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 22 21:05:55 2026 GMT
Not After : Jun 8 21:05:55 2026 GMT
Subject: CN=69e93837-4963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:67:74:62:c1:a2:bf:18:b0:93:7b:5f:55:9c:
60:d2:90:90:c4:7c:81:ca:29:e7:07:81:ce:84:4c:
d5:ad:97:5d:d9:43:9a:ab:fa:35:54:dd:ff:04:83:
d2:63:bd:46:61:84:d6:c5:56:c6:9c:a5:4b:14:8c:
e8:b9:14:0d:4c:2b:62:b9:87:26:f3:2c:32:e1:42:
ec:a2:d5:fc:f5:a4:56:49:55:6a:61:ee:e0:29:ee:
0f:28:8b:5c:5e:5d:49:76:db:18:4e:b9:b9:42:e7:
af:8b:29:7b:aa:a1:a2:e9:61:2d:18:12:88:54:d3:
08:57:fa:04:53:8e:c6:e0:79:13:24:96:91:c8:c6:
f1:53:20:e6:88:dd:0f:2a:9c:c1:ef:c1:5d:06:55:
3e:73:de:fc:76:01:64:3d:f1:12:0d:e2:b1:b5:04:
1a:c8:f2:70:59:4c:95:f9:04:aa:40:7c:19:2a:32:
89:1f:9a:6e:3c:49:17:fa:a0:de:4a:f1:5e:c4:de:
0f:7f:d3:21:8a:2b:f1:74:2c:98:5e:f8:f5:65:a7:
6b:6c:d1:41:91:51:80:cb:76:d2:97:19:62:78:08:
71:c8:86:d3:81:09:c3:53:81:95:bb:97:8c:29:a7:
59:44:c5:ef:1d:f8:f9:ce:f2:aa:9c:19:e1:ba:5a:
40:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:7A:BE:EB:7B:29:2D:66:B2:1A:B1:4B:CB:7E:6C:D9:66:E5:C4:CC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0FCFDD823E8F11F1AB6C721BCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.148.0/23
45.195.202.0/23
Signature Algorithm: sha256WithRSAEncryption
75:e2:a3:f6:a6:89:66:12:02:b4:d4:00:5b:e5:88:cb:0a:e9:
dd:db:60:47:51:64:a1:47:d3:43:f5:56:aa:54:96:59:58:d1:
16:32:f8:33:0a:16:d9:df:a0:88:2d:a2:0b:34:1a:54:a1:1e:
e3:62:90:82:77:31:2d:a6:0a:35:84:66:9e:7d:ba:71:26:22:
a1:f8:13:5b:86:4d:e7:4b:88:76:ba:a0:09:44:41:11:e6:b9:
6d:ff:40:ea:d1:9a:b0:a3:43:99:d1:e0:90:e1:42:60:cc:1a:
0e:25:d4:43:71:9e:1c:d9:c9:82:8e:c4:27:41:58:04:88:0b:
00:d0:76:d7:c0:95:a6:30:0a:d7:9e:6c:a6:4a:c3:0e:3f:de:
29:d8:4a:be:6c:cf:40:e3:3c:6c:3d:40:8e:b8:e4:36:ce:b6:
2d:0a:29:56:19:f3:fb:d1:4b:76:93:92:da:23:e5:8c:7f:4d:
09:0a:79:11:d9:1b:ea:70:6d:0f:08:86:cf:25:be:e3:70:71:
5e:be:b9:4f:c4:b7:80:5f:8a:39:72:a4:70:c6:db:ed:1e:f7:
e4:dc:3a:be:ba:2f:a6:5c:a3:df:33:86:7a:cc:4f:3a:db:ab:
57:87:79:f4:d1:bf:2a:16:f6:5f:31:f0:2a:1d:42:eb:2e:c4:
48:9c:3a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:23:56 2026 by rpki-client