Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/69839BE01E2111F18938DFF2DAE4EC9C.roa
File: 69839BE01E2111F18938DFF2DAE4EC9C.roa (raw, json)
Hash identifier: FbFdwva2TjtEnfF62ti0XSX3TTXBvuzawrlRKlamyWA=
Subject key identifier: E7:1D:D0:D3:4A:26:05:B0:3D:15:5C:D2:F0:CB:61:F3:52:C7:FF:5D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A4B2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/69839BE01E2111F18938DFF2DAE4EC9C.roa
Signing time: Thu 12 Mar 2026 14:40:28 +0000
ROA not before: Thu 12 Mar 2026 14:40:23 +0000
ROA not after: Fri 05 Jun 2026 14:40:23 +0000
asID: 149440
IP address blocks: 45.194.27.0/24 maxlen: 24
45.195.69.0/24 maxlen: 24
45.195.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107698 (0x1a4b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 12 14:40:23 2026 GMT
Not After : Jun 5 14:40:23 2026 GMT
Subject: CN=69b2d05c-9f7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:83:06:4e:78:0a:b8:b0:84:ba:60:d2:12:79:
fd:18:80:5d:90:e2:16:68:fd:62:6b:8e:97:6b:97:
d7:83:f6:e2:51:de:da:f7:84:08:db:88:c9:7f:ca:
b2:d3:49:47:e2:ed:e0:85:e5:38:5d:ad:be:d2:64:
d1:b8:66:e6:1a:44:a4:fc:a5:8a:19:8f:55:fe:23:
7a:dd:64:dc:cc:08:5d:06:3c:44:34:9f:ed:d6:39:
b6:5d:97:d7:0f:61:23:63:9f:4d:7f:ac:bf:0c:e5:
45:b6:bc:8b:5c:ce:92:d7:67:25:6e:c8:c8:40:9d:
a8:44:b3:c2:19:ce:3d:b9:82:29:a9:ec:ed:b1:b2:
70:0a:6e:40:9e:fc:3c:d8:86:f2:db:ea:36:8b:03:
26:18:ff:c6:84:cd:28:a9:7c:42:e6:5d:9d:7f:97:
15:4f:2d:98:d7:31:37:da:18:a2:33:3d:a0:d3:5e:
c8:21:02:db:63:db:30:66:bf:46:26:ed:b8:ec:0b:
f9:d1:75:74:21:b0:a6:e1:d1:d7:70:5b:40:47:d1:
80:5c:9b:b4:90:6d:39:a4:5b:5a:db:9e:83:71:71:
9b:9a:a6:bd:17:dd:8b:59:90:4f:0d:0d:06:42:80:
e4:95:80:24:e6:dd:27:f9:24:a8:61:94:c5:c9:03:
f6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:1D:D0:D3:4A:26:05:B0:3D:15:5C:D2:F0:CB:61:F3:52:C7:FF:5D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/69839BE01E2111F18938DFF2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.27.0/24
45.195.69.0/24
45.195.76.0/24
Signature Algorithm: sha256WithRSAEncryption
70:f7:14:d0:3b:b9:05:eb:bc:57:84:c2:22:f8:03:a3:79:10:
c2:47:d1:ae:30:2d:52:7f:e5:eb:17:56:2c:84:29:64:28:64:
cc:4a:77:fb:5e:d3:f3:ed:a7:e7:98:ee:3c:06:02:79:31:f8:
3c:70:d5:92:c1:47:72:f2:81:52:f7:3b:5d:94:61:08:1d:f3:
13:28:1c:29:05:51:43:b7:8a:6a:ce:6c:62:b0:dc:bc:cd:70:
79:25:63:a0:20:c8:03:d5:93:49:21:27:38:7d:4c:61:3e:a3:
07:4b:9d:5c:4a:67:43:07:97:25:91:03:96:27:1a:20:d6:c3:
02:b8:ea:52:20:ca:fa:21:c8:1e:c7:06:05:0a:7b:7a:7d:8f:
9e:1c:7c:1e:a7:23:f5:26:dc:9a:27:ce:a7:28:b5:ec:2f:ad:
b0:93:e5:48:2a:b2:77:65:f3:c2:f2:d6:ce:dd:33:ab:27:11:
2d:c6:23:57:84:8f:36:da:ab:9b:e4:cd:e5:fe:74:06:0a:92:
88:07:7f:78:36:2b:23:32:d8:47:a7:43:8c:59:43:7a:aa:98:
75:18:da:66:da:68:83:8e:c2:b6:95:41:ab:48:c2:ac:3c:2d:
10:b1:86:2e:30:cd:70:52:f5:91:8c:15:3f:ba:df:7c:3b:c4:
f0:27:99:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:11:00 2026 by rpki-client