Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4F5BE7641CF411F180C96E93DAE4EC9C.roa
File: 4F5BE7641CF411F180C96E93DAE4EC9C.roa (raw, json)
Hash identifier: 4TAyWIzYZZ+ilDTVLdjTJ2app98h+2FzwGOLvOxSk7A=
Subject key identifier: F3:AA:CB:36:EE:2A:2D:BA:E7:69:D1:59:D0:86:26:04:29:C3:EA:14
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A3E3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4F5BE7641CF411F180C96E93DAE4EC9C.roa
Signing time: Wed 11 Mar 2026 02:45:06 +0000
ROA not before: Wed 11 Mar 2026 02:45:00 +0000
ROA not after: Fri 17 Apr 2026 02:45:00 +0000
asID: 63199
IP address blocks: 45.199.132.0/24 maxlen: 24
45.199.133.0/24 maxlen: 24
45.199.155.0/24 maxlen: 24
45.205.64.0/24 maxlen: 24
45.205.98.0/24 maxlen: 24
45.205.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107491 (0x1a3e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 11 02:45:00 2026 GMT
Not After : Apr 17 02:45:00 2026 GMT
Subject: CN=69b0d732-db1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5f:97:f0:43:03:bf:32:f2:8a:ef:f6:94:be:
8c:7e:90:c5:70:13:13:a8:e4:2f:fb:29:bd:23:b5:
a4:6b:a4:a3:8b:d3:26:94:52:3d:33:fc:2a:42:73:
c4:39:be:5d:4f:2f:a3:74:5a:fd:10:56:b3:9a:b0:
2d:92:e8:92:9b:2f:b9:16:89:4a:cc:60:2c:d2:54:
cd:0d:9c:d9:68:1e:84:1a:67:23:b7:51:0f:15:78:
07:ac:e6:22:52:d2:96:8a:54:5b:d6:97:10:3f:f0:
ed:f3:ab:c7:a7:ae:8e:65:08:01:e0:03:9f:8a:ac:
92:cc:d5:a4:ca:68:80:14:61:ad:60:ed:25:99:d8:
07:1c:57:df:d9:49:c9:29:ac:66:cf:a9:a1:03:e9:
72:22:ca:89:ec:34:82:4a:bb:64:77:b2:d1:3b:43:
04:8b:a7:18:95:14:f9:d5:54:68:87:55:1a:25:00:
1c:35:6c:3c:26:06:b9:4e:f4:14:31:22:15:ea:a5:
28:21:8c:a2:6c:7e:28:73:35:e3:94:8d:c0:d1:f5:
bf:1a:ae:9c:ca:27:58:5d:5b:24:a2:75:9f:12:80:
e4:55:84:7e:a9:ee:bb:12:0d:be:4c:f6:ee:4c:39:
87:c4:d0:e4:32:36:d6:24:54:ca:8c:7d:19:2b:b5:
dd:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:AA:CB:36:EE:2A:2D:BA:E7:69:D1:59:D0:86:26:04:29:C3:EA:14
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4F5BE7641CF411F180C96E93DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.132.0/23
45.199.155.0/24
45.205.64.0/24
45.205.98.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:77:6f:19:3e:a7:6a:0a:d9:a8:74:62:aa:a2:62:05:03:1c:
dc:ea:37:b5:ad:5b:0f:68:0c:47:25:1b:b4:58:11:27:37:e3:
6c:da:c5:bc:ec:40:b4:16:3d:f1:d1:6c:cb:66:1f:6d:50:01:
30:71:a4:db:dd:c6:e5:d8:3a:cc:e4:e3:a8:01:02:2a:6b:0a:
79:e7:65:06:19:e0:b3:4d:58:bd:02:82:d9:7b:a6:68:60:5e:
00:ea:7e:eb:be:3b:6b:52:a8:8b:43:11:ed:6e:8d:d9:db:98:
84:cc:9b:47:fe:bc:fd:87:a3:e7:30:b0:36:00:af:ca:3d:0e:
38:d5:b2:05:5c:5b:fa:26:94:d0:2f:79:f0:90:7d:a5:db:80:
b4:72:67:04:5d:36:3c:e7:8f:5e:df:94:07:09:f2:58:75:62:
db:40:44:df:aa:9b:c5:c7:ec:d1:98:68:64:89:81:f5:4f:c2:
8d:8c:b4:a2:0b:5b:38:a3:4c:1b:d8:c4:f3:af:6f:04:02:eb:
42:cc:88:fd:e1:59:fd:e4:af:e0:33:cf:82:39:5c:a9:89:79:
e2:2f:58:a2:44:65:87:7e:f4:ed:ac:42:15:8f:73:0c:1d:3b:
b2:40:7e:9e:1a:ef:44:76:f8:5a:7e:10:ca:7c:8b:4e:63:25:
05:c4:b3:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:10:17 2026 by rpki-client