Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2F4401081D2D11F1A56765E5DAE4EC9C.roa
File: 2F4401081D2D11F1A56765E5DAE4EC9C.roa (raw, json)
Hash identifier: qoiWkeeMUbN7Coh8NERb1D8QXW/bXPFmZCQfFIIwFgI=
Subject key identifier: EB:94:D4:8A:7E:C0:6B:7A:C4:7D:C8:38:F1:4B:6A:31:BC:A9:A2:2D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A42F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2F4401081D2D11F1A56765E5DAE4EC9C.roa
Signing time: Wed 11 Mar 2026 09:32:13 +0000
ROA not before: Wed 11 Mar 2026 09:32:08 +0000
ROA not after: Tue 14 Apr 2026 09:32:08 +0000
asID: 152297
IP address blocks: 45.196.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107567 (0x1a42f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 11 09:32:08 2026 GMT
Not After : Apr 14 09:32:08 2026 GMT
Subject: CN=69b1369d-42e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:7a:7b:e9:f0:b1:4e:a4:94:fa:24:28:17:22:
11:95:db:af:71:4a:cc:35:0e:c6:ff:e0:f8:b1:e9:
96:62:0a:d3:c7:be:11:a6:d8:07:2f:73:74:75:86:
db:08:d7:7f:88:04:f3:3a:00:66:79:37:e9:bc:6c:
80:24:f0:99:c1:85:68:50:99:1d:5b:aa:27:e8:3c:
63:c0:ec:dc:7f:9d:62:66:45:b0:83:4f:a0:3d:fc:
70:bc:5d:ce:d6:6f:bf:ff:16:ec:52:21:50:8c:b0:
58:38:d6:e7:8e:20:d1:bc:86:20:c8:ab:2a:c2:9e:
e9:a0:c1:25:89:fa:de:8b:77:03:77:b1:77:32:51:
04:f2:85:f6:b6:4a:0c:7d:63:10:c2:d5:bb:14:b7:
db:f6:43:2f:0b:57:d6:8c:31:05:2c:21:67:2c:b4:
1a:d8:25:0a:86:4b:ad:8d:ee:a5:14:82:39:d8:d9:
ed:4d:dd:45:21:f4:4e:14:29:84:64:1a:b6:78:4c:
0d:99:30:c5:8d:f2:8c:d3:c5:ce:64:73:96:9b:55:
76:01:70:9a:18:3b:70:78:00:2a:2b:a0:a9:54:15:
47:cf:6e:82:fb:ac:c0:02:f2:5e:85:c4:5a:58:1c:
ee:ca:6a:60:12:10:c7:bb:5d:f5:23:12:a4:db:13:
4b:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:94:D4:8A:7E:C0:6B:7A:C4:7D:C8:38:F1:4B:6A:31:BC:A9:A2:2D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2F4401081D2D11F1A56765E5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.209.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:b5:0d:d7:5e:5d:42:5d:76:04:1b:82:35:36:59:b4:d6:2a:
b3:49:c3:5b:14:66:84:ac:ff:4a:07:e6:f1:1e:71:39:b1:9b:
9a:3d:9c:c1:c5:3a:47:f7:de:0e:f2:0b:72:8d:f3:80:e6:ab:
d6:a3:aa:c6:1e:ac:b6:da:32:63:e4:c9:ee:13:ea:66:90:05:
b7:85:a7:12:8a:71:3c:ee:b7:4c:13:0a:bc:f3:c6:4b:88:ab:
7e:5d:15:ed:6b:67:dd:90:ae:6e:c4:d6:d1:e6:5e:1d:30:ba:
cd:bc:5a:27:94:4e:d1:c5:5d:59:27:df:47:4c:ab:5a:82:2f:
2b:5a:fd:3a:d7:9f:a5:02:b2:b4:27:48:33:63:10:35:e5:a7:
c0:b4:9d:c6:01:4d:1f:e8:f2:79:a5:ef:74:28:eb:57:b7:48:
b9:f4:8a:da:07:1c:14:4e:1d:f2:6e:2b:39:c6:b7:0a:25:ed:
36:11:fa:22:f2:21:67:c3:11:83:75:be:0c:9d:2d:2e:70:46:
ca:77:2c:95:be:88:90:d6:fa:ef:67:de:20:53:0e:e5:69:26:
c5:1b:b0:6f:1c:6f:36:33:5c:25:c6:e0:99:8f:28:ff:09:3f:
8d:e9:f3:82:30:36:92:31:63:c1:78:e2:fc:4b:a4:e7:cc:2a:
b9:3d:58:8b
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAaQvMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMzExMDkzMjA4WhcNMjYwNDE0MDkzMjA4WjAYMRYw
FAYDVQQDEw02OWIxMzY5ZC00MmU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA4Xp76fCxTqSU+iQoFyIRlduvcUrMNQ7G/+D4semWYgrTx74RptgHL3N0
dYbbCNd/iATzOgBmeTfpvGyAJPCZwYVoUJkdW6on6DxjwOzcf51iZkWwg0+gPfxw
vF3O1m+//xbsUiFQjLBYONbnjiDRvIYgyKsqwp7poMElifrei3cDd7F3MlEE8oX2
tkoMfWMQwtW7FLfb9kMvC1fWjDEFLCFnLLQa2CUKhkutje6lFII52NntTd1FIfRO
FCmEZBq2eEwNmTDFjfKM08XOZHOWm1V2AXCaGDtweAAqK6CpVBVHz26C+6zAAvJe
hcRaWBzuympgEhDHu131IxKk2xNLoQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFOuU
1Ip+wGt6xH3IOPFLajG8qaItMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yRjQ0MDEwODFEMkQxMUYxQTU2NzY1RTVEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcTRMA0GCSqGSIb3DQEBCwUA
A4IBAQCetQ3XXl1CXXYEG4I1Nlm01iqzScNbFGaErP9KB+bxHnE5sZuaPZzBxTpH
994O8gtyjfOA5qvWo6rGHqy22jJj5MnuE+pmkAW3hacSinE87rdMEwq888ZLiKt+
XRXta2fdkK5uxNbR5l4dMLrNvFonlE7RxV1ZJ99HTKtagi8rWv0615+lArK0J0gz
YxA15afAtJ3GAU0f6PJ5pe90KOtXt0i59IraBxwUTh3ybis5xrcKJe02Efoi8iFn
wxGDdb4MnS0ucEbKdyyVvoiQ1vrvZ94gUw7laSbFG7BvHG82M1wlxuCZjyj/CT+N
6fOCMDaSMWPBeOL8S6TnzCq5PViL
-----END CERTIFICATE-----
Generated at Thu Mar 26 00:11:04 2026 by rpki-client