Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8C9743943E4B11F1A8D54A06CF1D38B0.roa
File: 8C9743943E4B11F1A8D54A06CF1D38B0.roa (raw, json)
Hash identifier: zRAoQan3XgxzZ5AewwlkLh2WUO+ds0jJ+968FkijGsg=
Subject key identifier: 6A:E4:00:5E:70:2D:F1:3F:84:17:DF:45:21:22:1B:24:98:9E:F9:97
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AE17
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8C9743943E4B11F1A8D54A06CF1D38B0.roa
Signing time: Wed 22 Apr 2026 13:02:43 +0000
ROA not before: Wed 22 Apr 2026 13:02:38 +0000
ROA not after: Tue 09 Jun 2026 13:02:38 +0000
asID: 395793
IP address blocks: 45.201.21.0/24 maxlen: 24
45.201.22.0/24 maxlen: 24
45.201.23.0/24 maxlen: 24
45.201.24.0/23 maxlen: 24
45.201.24.0/24 maxlen: 24
45.201.25.0/24 maxlen: 24
45.201.26.0/24 maxlen: 24
45.201.31.0/24 maxlen: 24
45.201.36.0/22 maxlen: 24
45.201.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110103 (0x1ae17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 22 13:02:38 2026 GMT
Not After : Jun 9 13:02:38 2026 GMT
Subject: CN=69e8c6f3-dadc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:71:1b:cb:19:a0:33:d4:2e:44:db:16:c7:12:
e9:7f:75:4a:02:06:c5:4d:7d:03:e0:d2:1f:d4:fb:
8a:db:09:b1:09:d6:16:2a:45:d2:bf:3d:fa:01:57:
0f:b0:af:0e:4c:47:1b:74:34:8e:51:02:af:03:80:
d7:5d:fc:2a:8c:46:db:78:1e:e2:cc:19:8c:6b:87:
ac:39:c1:86:a8:f3:08:54:77:2c:1b:45:2a:40:1f:
2f:c9:64:f8:2a:84:41:58:86:ed:8f:39:44:de:62:
3a:c5:57:d4:65:86:ae:b3:49:3d:e5:5d:c0:79:81:
b2:97:34:83:06:1d:90:6e:26:a0:9c:51:48:0c:ab:
f4:5e:96:2c:38:a5:80:e6:d1:c0:16:92:5b:37:b9:
2f:e2:13:2d:d1:15:87:52:de:d8:4f:1b:83:92:a1:
fc:f6:d2:9f:b3:b0:bf:86:82:80:08:18:34:fc:ce:
45:23:7d:6b:06:1c:88:5c:10:74:60:0e:6e:9a:e6:
6a:08:91:62:7a:f2:eb:71:5f:56:1e:5a:5d:7e:91:
39:f9:01:5e:67:c2:56:47:24:a7:d9:29:52:fd:f1:
d4:b6:7a:e9:cb:10:ea:2f:14:29:17:cf:81:5c:bd:
f4:f1:bb:37:73:3c:1b:3a:79:7d:22:52:92:f3:32:
03:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:E4:00:5E:70:2D:F1:3F:84:17:DF:45:21:22:1B:24:98:9E:F9:97
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8C9743943E4B11F1A8D54A06CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.21.0-45.201.26.255
45.201.31.0/24
45.201.36.0-45.201.40.255
Signature Algorithm: sha256WithRSAEncryption
84:04:c7:5a:c5:36:5f:b1:88:97:f9:86:08:e0:73:04:a9:1a:
06:33:2c:72:f1:35:c4:9c:c4:ea:d3:47:ec:3d:08:f3:c4:1f:
d7:d7:a9:23:a8:bc:a1:5a:91:6a:9b:48:76:af:c0:e1:f5:72:
4d:6a:93:25:24:bb:35:3e:3b:52:a5:c8:3f:52:a8:44:5f:3b:
80:10:96:42:1b:be:0f:0c:78:cb:c9:27:0f:5a:8c:6a:b8:79:
de:7c:d4:73:11:be:68:e2:9c:a3:74:ca:78:1e:27:01:db:43:
3f:8c:b8:fa:ad:12:b6:4c:b6:b0:3a:ea:40:2a:19:98:e2:3a:
f4:bd:be:97:93:95:09:b9:1f:03:94:9c:aa:f4:8c:74:80:02:
98:7d:cf:a0:6f:f8:d5:dc:0f:08:57:ae:d4:19:24:64:7e:bc:
c0:76:b8:20:a0:d6:55:dd:8c:f1:d5:6f:7b:51:f3:63:ab:ce:
70:a2:45:7b:c8:43:07:d3:68:84:fd:d7:65:f0:68:e6:77:bb:
c9:9a:5d:d3:d6:e0:4b:62:78:f3:f3:1e:10:fe:dc:e5:03:aa:
6f:d3:b6:bd:27:97:5c:cc:4c:66:b0:45:e9:92:ca:7c:fb:6f:
ad:2d:48:df:14:93:41:ec:73:9f:b6:9e:c2:c2:13:0a:e1:6d:
be:01:bf:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:45:26 2026 by rpki-client