Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9433DEBC281D11F1A2F14CB8DAE4EC9C.roa
File: 9433DEBC281D11F1A2F14CB8DAE4EC9C.roa (raw, json)
Hash identifier: wBb48Gq45mgL0q0cQpBUZxHSJ+rTGzyR0AH6iDvZouI=
Subject key identifier: CA:29:A5:AA:04:34:40:D8:05:5E:83:82:43:EC:57:29:C3:3B:4D:31
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A74B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9433DEBC281D11F1A2F14CB8DAE4EC9C.roa
Signing time: Wed 25 Mar 2026 07:38:13 +0000
ROA not before: Wed 25 Mar 2026 07:38:08 +0000
ROA not after: Sat 02 May 2026 07:38:08 +0000
asID: 984
IP address blocks: 45.196.105.0/24 maxlen: 24
45.196.108.0/24 maxlen: 24
45.196.120.0/24 maxlen: 24
45.203.137.0/24 maxlen: 24
45.203.138.0/24 maxlen: 24
45.206.56.0/24 maxlen: 24
45.206.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108363 (0x1a74b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 25 07:38:08 2026 GMT
Not After : May 2 07:38:08 2026 GMT
Subject: CN=69c390e5-e754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:24:ad:47:5e:6c:c8:30:5a:64:36:94:1b:03:
05:f3:25:bf:27:37:48:59:52:7c:b7:3f:1a:83:4e:
d6:06:de:12:97:95:27:70:91:65:13:54:ac:49:4f:
18:64:9c:ad:51:37:4e:38:74:bd:12:77:73:17:da:
73:28:d6:5e:37:d7:b5:f4:f8:cb:29:8a:e1:ee:87:
88:d5:2e:0a:70:f1:00:63:93:69:df:21:47:a8:dd:
6b:2a:8b:90:02:74:08:20:02:de:d5:74:ef:46:26:
a0:41:cb:c1:18:9e:18:1f:f4:e4:8b:92:81:71:c8:
38:40:a3:57:7c:18:fc:ab:4b:69:7a:2a:e5:6f:05:
b1:c3:e5:eb:85:9e:20:23:15:f7:57:a6:96:cc:47:
b3:77:c2:cc:32:8f:52:64:83:94:9f:ef:6d:3a:39:
59:af:00:33:64:52:a7:24:fe:04:6b:f4:3e:66:d1:
89:66:3d:e1:42:fa:86:ae:22:ca:ff:d9:9a:79:97:
a7:31:5d:80:b7:87:9f:54:9b:1f:bd:82:92:6d:e6:
e0:12:2a:ff:b3:1a:a5:1d:22:8e:f2:9a:0f:17:e1:
f4:af:95:94:96:9a:7e:53:79:ea:22:12:69:0e:4b:
22:cf:c8:78:dd:2a:c1:93:9c:d1:0a:e8:75:86:4f:
60:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:29:A5:AA:04:34:40:D8:05:5E:83:82:43:EC:57:29:C3:3B:4D:31
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9433DEBC281D11F1A2F14CB8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.105.0/24
45.196.108.0/24
45.196.120.0/24
45.203.137.0-45.203.138.255
45.206.56.0/24
45.206.59.0/24
Signature Algorithm: sha256WithRSAEncryption
42:7a:0c:21:17:03:ef:63:b6:df:55:ee:40:3a:4c:1e:c2:af:
62:21:e4:e8:50:bc:7a:51:1a:eb:08:9d:2d:de:a0:52:b9:36:
e6:0b:ca:f4:3a:c1:49:4a:ba:9e:68:e8:ab:22:65:33:ca:c0:
6a:08:77:0d:a1:64:9f:30:7b:1d:22:5c:de:7e:68:9e:eb:f6:
db:ec:c4:fc:66:e2:c2:e4:93:9e:b6:86:e1:3c:e1:42:7f:66:
1f:f7:0d:f2:6a:33:2e:bb:ca:1e:03:ac:bd:1e:fc:bb:18:cd:
39:aa:94:d3:ea:45:bf:de:10:d9:53:63:b1:de:92:94:42:85:
68:49:34:08:76:e5:5a:4a:a2:20:72:ac:08:f9:13:00:0f:90:
93:b0:a7:8a:35:c5:20:c9:7e:7e:80:b8:12:7f:2e:67:37:3c:
38:f6:a9:7e:67:39:af:d7:f9:6e:e8:02:de:38:04:b4:99:c2:
53:ca:5b:72:ee:c3:dd:74:eb:19:5e:80:52:ba:ee:64:56:b2:
b6:93:b0:88:75:e3:4d:1c:72:e5:b9:9d:e9:d5:ce:af:7e:dd:
87:f4:4c:56:1c:6c:2d:eb:d1:b0:cd:c1:2c:04:a1:0d:2d:23:
21:90:71:fb:6a:f3:e3:df:85:40:4c:a6:27:42:d2:a7:89:43:
55:01:53:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:15:40 2026 by rpki-client