Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4B503C761E1411F186A0CCA7DAE4EC9C.roa
File: 4B503C761E1411F186A0CCA7DAE4EC9C.roa (raw, json)
Hash identifier: gl/thCnli9+or6vL4/og8RBWcuj27cRFewvxraFSUAk=
Subject key identifier: 5B:F7:62:DA:48:7D:E4:15:6D:5C:A9:39:F2:85:7E:B9:54:7E:EA:91
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A4A0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4B503C761E1411F186A0CCA7DAE4EC9C.roa
Signing time: Thu 12 Mar 2026 13:06:34 +0000
ROA not before: Thu 12 Mar 2026 13:06:30 +0000
ROA not after: Sat 18 Apr 2026 13:06:30 +0000
asID: 274298
IP address blocks: 45.200.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107680 (0x1a4a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 12 13:06:30 2026 GMT
Not After : Apr 18 13:06:30 2026 GMT
Subject: CN=69b2ba5a-e13a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:19:f4:80:b3:56:1c:b8:67:dc:2e:7b:c2:1c:
22:18:1c:de:e2:4e:0a:98:d5:02:cb:c0:39:68:86:
71:2d:33:93:83:46:50:4d:9f:2e:19:c4:5c:92:e3:
b4:c0:01:a1:55:e1:35:e6:3d:51:f7:ec:6a:0d:50:
d0:13:e6:e1:8a:9a:c6:e6:a6:a7:89:47:28:fd:53:
6b:00:e0:03:03:2a:25:fd:1a:da:fc:bc:5c:9b:1c:
b6:f3:69:69:9a:cf:4f:23:0c:3c:64:6d:1d:62:fd:
95:08:93:23:7b:34:5e:e2:aa:9b:ed:9f:6e:46:97:
aa:ca:53:57:bc:f8:63:fd:34:32:3a:20:4b:70:9f:
0f:9b:5c:79:92:67:8c:00:b9:c6:10:10:ed:7e:80:
46:c2:c8:46:c3:20:eb:7b:3c:08:e3:98:a6:2e:0c:
9b:95:a1:37:83:e6:66:eb:d0:b3:32:67:8a:3d:f1:
8c:9c:da:a3:e2:49:8e:50:5f:c2:50:2e:7a:cb:33:
d5:a8:e9:84:1c:0e:60:4f:4b:d5:07:60:f3:b6:f6:
8f:64:3f:d7:18:2d:47:b4:74:27:64:80:10:2a:03:
82:35:c4:77:34:39:dd:17:d3:1c:41:50:4c:8d:05:
a5:84:66:33:4e:4f:bf:4e:00:16:58:b7:da:14:f3:
3e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:F7:62:DA:48:7D:E4:15:6D:5C:A9:39:F2:85:7E:B9:54:7E:EA:91
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4B503C761E1411F186A0CCA7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.127.0/24
Signature Algorithm: sha256WithRSAEncryption
76:78:ff:5e:a8:2c:ed:4d:3f:31:a5:c7:25:fa:fe:53:90:58:
27:4f:2d:c2:d0:26:71:51:3d:51:5a:4a:89:c9:7c:a2:25:24:
17:e3:9a:23:40:db:96:0a:52:b6:d9:e3:72:4c:b3:0c:50:37:
c9:8b:2a:25:18:55:b6:b6:d2:43:4b:12:89:b2:be:7e:70:0f:
3f:12:8c:b4:f6:e4:eb:7d:c6:67:22:50:4b:85:d5:62:80:4b:
82:41:73:ce:b3:8c:df:a0:06:82:e2:8b:0f:4f:f0:96:79:21:
73:95:77:b4:79:43:84:f4:23:04:23:d0:6d:75:d1:75:98:05:
f5:52:20:b5:46:5c:90:ce:85:08:e0:b1:c7:3c:8b:45:5d:ac:
ce:fd:1b:84:c9:66:68:90:26:f7:a9:bb:5a:74:b1:2b:86:90:
23:e9:4c:af:9f:a7:43:7b:40:9b:09:9c:f0:3d:6a:7d:5e:e8:
75:f0:c3:92:66:d1:5d:eb:b5:76:bd:74:f3:2a:1d:1c:d8:bd:
06:06:32:90:20:c0:64:be:9c:17:54:02:4e:86:c4:91:7f:dd:
82:e2:7c:8c:f4:f2:cc:b2:3f:e5:06:83:a6:27:af:37:d1:70:
bd:bc:46:2f:59:e2:6d:f2:34:79:98:d1:bb:6b:21:b5:77:b2:
ea:57:91:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:47:52 2026 by rpki-client