Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/582A3738188F11F181ED657BDAE4EC9C.roa
File: 582A3738188F11F181ED657BDAE4EC9C.roa (raw, json)
Hash identifier: QC9LZrFRPOmUgeyptkSbSxRQND+o3KCfHi+fU/KlO9w=
Subject key identifier: 10:A4:73:BA:E7:07:37:43:12:9E:6B:01:29:F2:3A:8D:20:6A:23:0A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A2B1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/582A3738188F11F181ED657BDAE4EC9C.roa
Signing time: Thu 05 Mar 2026 12:32:17 +0000
ROA not before: Thu 05 Mar 2026 12:32:12 +0000
ROA not after: Mon 11 May 2026 12:32:12 +0000
asID: 154107
IP address blocks: 45.202.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107185 (0x1a2b1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 5 12:32:12 2026 GMT
Not After : May 11 12:32:12 2026 GMT
Subject: CN=69a977d1-10a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:5c:e7:50:b1:18:4e:54:c8:69:9a:80:69:40:
a1:6b:44:ad:82:ad:f7:2d:29:3e:ab:6a:3b:d2:43:
2b:2e:2b:04:b0:9e:85:f3:46:6e:77:ec:13:ba:5d:
fb:c2:12:00:20:4f:f5:fe:a4:48:47:0a:74:e7:c0:
ea:b8:b5:89:ae:c4:73:8f:45:a5:76:bc:4a:1d:11:
c0:ed:f6:87:3e:4c:f1:32:f1:aa:4e:d9:c1:06:81:
b7:8a:5b:64:d8:a4:1f:ac:12:d9:22:dd:39:c5:70:
14:56:bd:60:19:54:55:c4:62:58:bc:66:11:b5:c5:
f5:18:58:65:d6:76:ef:d8:a6:2b:b2:77:58:56:32:
7f:29:1a:ed:69:18:6c:2e:b2:49:f6:e3:a0:12:5b:
ed:fe:c4:bf:48:21:ff:70:08:15:d1:98:2d:0d:91:
58:86:53:27:64:86:b8:87:84:67:2d:b9:b9:b6:22:
70:72:ec:ed:6c:48:16:84:13:df:0e:97:4c:41:5b:
3a:5b:2b:ff:79:58:64:3f:c8:69:9e:c8:e7:f5:1c:
47:ba:25:2a:1d:20:d7:53:aa:ff:15:69:01:2d:10:
46:1a:15:6a:10:fc:ba:9f:28:23:bb:3b:0e:97:97:
81:d6:76:4e:54:bf:4a:e9:94:c2:a7:5a:4f:a3:9b:
90:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:A4:73:BA:E7:07:37:43:12:9E:6B:01:29:F2:3A:8D:20:6A:23:0A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/582A3738188F11F181ED657BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.199.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:e4:18:27:1f:b4:76:6e:37:78:51:20:d9:3a:4c:05:11:fb:
ea:53:fa:59:54:99:c4:2c:c8:50:48:ee:9d:59:a0:e7:5b:ee:
8f:57:d6:67:1e:dd:47:a0:f4:43:99:43:e8:3e:2d:fb:d4:88:
f6:12:df:00:b1:b4:6b:4d:96:ba:a1:6c:de:ce:b2:5b:2b:dd:
9c:ec:06:f4:77:52:ee:53:9a:35:8e:22:3a:c2:17:46:82:5c:
d4:6e:28:69:3a:2f:36:bc:95:cf:66:62:4e:79:7e:ef:86:21:
95:68:02:b0:39:89:12:73:fb:d1:be:0d:a9:11:ae:f6:1a:2b:
d0:14:ba:5f:0c:14:12:6e:3b:6c:59:59:04:bc:8a:8a:6b:bc:
fe:66:c9:11:b5:d1:f9:57:9a:68:8f:22:8b:fd:7b:c1:e7:c3:
8e:cd:ec:6f:41:98:fe:2a:c4:14:f0:68:3f:bc:08:9c:6d:cc:
1a:02:df:8d:d6:28:57:5c:e3:22:c1:98:ac:70:68:97:ae:8b:
52:d6:bc:22:b0:54:10:86:e3:0f:86:eb:47:78:f6:26:05:80:
54:cc:b7:fc:4d:54:52:68:4e:f4:93:aa:87:1e:be:30:5d:02:
38:7e:76:8d:b8:58:8c:ac:07:ae:63:2e:ad:14:0b:83:39:a1:
b9:cb:6a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:10:27 2026 by rpki-client