Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/670721261C6D11F18B4B3A84DAE4EC9C.roa
File: 670721261C6D11F18B4B3A84DAE4EC9C.roa (raw, json)
Hash identifier: kYI0NiyB4tbyYs4THvirNcoPfAFKo2y0Q+O7z+m5U1M=
Subject key identifier: 0C:C6:68:AE:93:96:03:9A:E9:A7:11:2E:9C:A8:92:42:D7:76:99:B1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A3BE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/670721261C6D11F18B4B3A84DAE4EC9C.roa
Signing time: Tue 10 Mar 2026 10:39:24 +0000
ROA not before: Tue 10 Mar 2026 10:39:18 +0000
ROA not after: Fri 10 Apr 2026 10:39:18 +0000
asID: 201765
IP address blocks: 45.202.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107454 (0x1a3be)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 10 10:39:18 2026 GMT
Not After : Apr 10 10:39:18 2026 GMT
Subject: CN=69aff4db-0bdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:dc:65:f2:3a:5d:3e:68:da:b3:b8:8f:6f:e5:
8b:91:1a:b8:99:56:37:8e:27:c2:be:b0:71:37:de:
54:8b:0a:7d:46:ad:fe:f2:97:ff:74:dd:29:66:fa:
72:e0:7a:35:b2:ad:23:e6:ae:72:7b:92:10:cf:05:
59:55:b1:8c:f0:c5:17:b4:5b:4b:44:1c:ca:4e:0f:
ac:d6:3f:2c:8c:2b:d9:2b:cd:88:73:5a:8d:29:c9:
e3:30:af:cb:e4:3e:63:4c:71:73:e7:63:73:d4:a4:
45:a8:dc:e8:d0:cc:84:45:34:57:b7:1a:ae:53:91:
3d:fb:6e:3a:1b:fe:e4:6b:9b:f4:0e:8e:1e:d3:87:
a2:21:ef:47:13:fc:e9:b9:d6:e0:01:8b:81:48:76:
a7:b6:de:b3:db:8d:e6:b7:08:4a:96:15:19:41:0d:
1a:58:43:da:d1:25:51:0e:49:a5:02:ec:66:69:ec:
6c:73:89:6c:f6:62:f1:12:8e:ae:de:e7:a8:ff:a3:
8b:b6:f0:d5:f5:34:ef:0f:7e:2a:57:d6:b7:92:af:
4d:02:8c:54:68:07:81:ca:d4:d4:03:22:5c:b4:e6:
81:82:f1:60:d3:89:87:b4:73:01:23:17:ae:96:6c:
24:dc:42:c8:6a:30:54:81:a0:c5:23:82:74:7d:24:
9e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:C6:68:AE:93:96:03:9A:E9:A7:11:2E:9C:A8:92:42:D7:76:99:B1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/670721261C6D11F18B4B3A84DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.245.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:80:77:6c:ff:c7:c1:4f:88:fe:39:32:f3:6b:8e:7d:e4:c2:
2c:21:62:8a:d5:1c:84:41:e0:80:0e:bc:70:57:d3:0f:42:8b:
83:b6:76:7c:a8:9e:87:78:cc:58:23:63:81:62:4b:6c:8c:71:
c6:77:40:b9:bc:ef:ee:75:40:ef:f0:74:0c:d8:50:75:f5:c1:
3c:00:79:10:2c:94:77:9f:c4:d5:01:c8:7a:ea:ec:9f:83:03:
17:e7:0c:f2:de:ea:d7:d5:cf:05:32:38:a0:9b:5f:82:76:39:
97:6e:28:db:1a:81:fe:09:ff:e7:4e:81:31:d2:d6:55:3b:87:
d6:ec:86:ab:62:34:0d:24:80:49:35:5b:e0:84:c1:d6:23:3f:
81:0b:c1:01:ea:55:50:cd:a1:ba:42:ad:4f:6b:f3:b9:03:80:
20:9c:15:69:9b:f7:a5:a1:95:dc:b3:41:c2:d0:b4:97:7d:0f:
d7:86:55:d5:84:58:26:b0:f9:5e:56:e2:f1:18:56:3e:19:d9:
45:30:87:47:bb:b0:1a:3c:98:e3:37:33:17:b2:2f:83:c3:26:
a4:ca:ad:92:83:93:22:fa:22:1e:d9:de:f0:51:4f:64:ae:86:
42:43:16:1f:5f:1a:09:97:89:fb:ac:87:3b:04:44:61:29:b2:
6d:ce:95:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:15:33 2026 by rpki-client