Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/427EDCA41EB111F18DF7B0C5DAE4EC9C.roa
File: 427EDCA41EB111F18DF7B0C5DAE4EC9C.roa (raw, json)
Hash identifier: MSJHkJqgf3B8bqxFAi4ofTDJeX0Jqj9BbISsAnOFx1k=
Subject key identifier: 11:FB:B1:98:DB:AB:4D:52:8A:EE:22:B4:FB:18:69:27:82:61:06:8A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A4DB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/427EDCA41EB111F18DF7B0C5DAE4EC9C.roa
Signing time: Fri 13 Mar 2026 07:50:10 +0000
ROA not before: Fri 13 Mar 2026 07:50:05 +0000
ROA not after: Mon 04 May 2026 07:50:05 +0000
asID: 21859
IP address blocks: 45.197.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107739 (0x1a4db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 13 07:50:05 2026 GMT
Not After : May 4 07:50:05 2026 GMT
Subject: CN=69b3c1b2-8aeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a4:d7:f3:93:a1:03:ba:2f:3b:c6:2a:ea:26:
3d:58:58:87:b4:28:35:bc:c8:99:d9:8f:49:70:6a:
8d:a3:19:98:4f:8e:b5:13:42:ee:c7:38:36:3c:1f:
3b:4b:0a:b8:99:9d:1c:95:11:0b:6a:a9:83:a2:d1:
fb:4c:16:9f:8f:d4:6f:07:ed:a1:39:02:6b:26:58:
ff:bf:c7:d4:25:fc:19:1d:60:d6:0e:d2:8c:77:13:
f6:72:7f:cd:cf:07:91:94:a1:61:91:28:a1:43:0d:
45:18:d9:8e:15:88:83:93:3c:23:72:e8:c2:16:d1:
d9:3c:3e:5d:4a:9b:91:71:fa:33:ea:f7:cf:55:54:
06:a4:3e:e5:8c:89:89:61:46:8f:a3:48:3f:c3:41:
d6:c8:d1:98:2b:b4:5c:90:fd:88:8b:74:fd:4c:54:
2d:63:3b:46:75:77:08:85:bd:e3:84:08:1e:37:a2:
4c:8d:df:30:b1:4b:96:c9:17:89:bd:73:aa:02:12:
ea:23:72:1a:65:bb:ec:e6:ca:8f:70:9e:2a:e0:4c:
57:f4:b7:1d:c2:8b:5d:ad:ff:fc:e1:51:25:97:49:
77:5d:d2:76:fb:3c:b2:21:fb:45:82:71:95:c0:a6:
38:25:7f:a4:2c:17:fa:03:ab:5b:7b:f8:53:62:b9:
cc:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:FB:B1:98:DB:AB:4D:52:8A:EE:22:B4:FB:18:69:27:82:61:06:8A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/427EDCA41EB111F18DF7B0C5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.9.0/24
Signature Algorithm: sha256WithRSAEncryption
04:24:c6:69:f2:2d:97:c3:a3:ba:b1:b1:ca:a2:6d:ed:e9:6f:
10:ae:7c:90:00:ff:ff:2c:e5:84:7e:a2:77:be:28:82:2f:85:
42:e1:04:de:55:b6:10:d5:00:b8:dc:93:41:8d:b1:3c:e6:ab:
79:3d:41:36:27:9d:06:ad:0a:9a:03:bf:f6:1d:0e:f5:ed:b2:
d8:59:8f:85:77:26:f3:9b:d8:62:06:7e:8c:ee:4b:d9:18:6a:
fe:c5:ce:f3:15:60:2a:16:c8:32:d0:77:23:dc:f4:26:55:7b:
2d:5e:c4:f5:20:8c:93:f6:7c:fb:13:53:3f:df:48:f7:5e:d8:
19:c9:e0:70:3d:4d:2a:68:58:7a:f1:0a:32:e2:a0:a4:4c:6b:
54:04:f4:44:5a:a8:e2:e7:2d:6e:df:95:3a:ce:6c:90:68:fc:
75:a8:2d:39:dd:b0:90:87:8e:00:72:4a:15:b3:cd:f3:7d:95:
84:e3:34:ac:a8:7a:e5:fa:04:1c:33:bf:79:10:c6:45:46:a5:
2e:de:12:63:76:e1:c5:2c:98:9a:5f:3e:3a:20:45:03:fb:42:
53:50:d9:74:4d:1f:1b:b3:d7:d2:d0:79:ad:3e:49:bc:65:69:
e8:e3:76:e0:94:30:f0:5a:7e:d5:be:91:d6:ea:b2:9e:1a:5e:
49:9e:9d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:47:40 2026 by rpki-client