Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9ED6CF78494211F1AF6D59D8CE1D38B0.roa
File: 9ED6CF78494211F1AF6D59D8CE1D38B0.roa (raw, json)
Hash identifier: hzCdIVX5QJ0V13GuDhqrA2CbVhqb/V2WhpIHn4FsPzk=
Subject key identifier: 54:AA:C5:E0:42:32:A0:4A:9B:F5:BF:87:32:EE:E6:45:C7:DF:DF:0D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B1EA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9ED6CF78494211F1AF6D59D8CE1D38B0.roa
Signing time: Wed 06 May 2026 11:56:31 +0000
ROA not before: Wed 06 May 2026 11:56:26 +0000
ROA not after: Sun 06 May 2029 11:56:26 +0000
asID: 17561
IP address blocks: 45.199.99.0/24 maxlen: 24
45.199.100.0/24 maxlen: 24
45.199.101.0/24 maxlen: 24
45.199.102.0/24 maxlen: 24
45.199.103.0/24 maxlen: 24
45.199.104.0/24 maxlen: 24
45.199.105.0/24 maxlen: 24
45.199.106.0/24 maxlen: 24
45.199.107.0/24 maxlen: 24
45.199.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111082 (0x1b1ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 6 11:56:26 2026 GMT
Not After : May 6 11:56:26 2029 GMT
Subject: CN=69fb2c6f-18e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:dc:e5:6a:f5:3d:d1:02:70:05:7d:13:13:79:
9e:da:1d:b0:18:15:d4:dc:31:e4:29:77:c2:1d:d5:
ca:fe:74:b3:bd:de:90:10:83:c8:07:8a:e9:38:1f:
07:70:16:f2:b7:76:37:79:1e:c2:2a:26:98:4b:55:
f3:2c:fc:53:02:8a:fb:9b:6a:ab:d0:dc:d5:00:9c:
fb:2b:25:0b:e5:6b:fa:cf:1f:4f:bd:47:5d:b3:84:
64:23:59:2e:49:9f:ef:67:24:db:5a:51:33:27:f6:
16:16:f7:fc:32:ea:ba:ce:ae:bb:74:c7:fb:93:73:
d7:91:d2:9f:a6:53:66:88:39:7f:78:e4:3d:a9:e9:
ec:24:c7:9e:e4:da:4e:1e:36:a4:dd:39:aa:31:9a:
cc:f5:d0:23:e8:38:b1:41:f2:3b:40:bf:d6:4b:7c:
6f:a4:df:44:e6:fb:f7:7e:72:51:85:5e:d0:84:b8:
dd:10:01:1c:02:6e:08:0e:28:7b:10:fb:37:a6:c2:
aa:b3:9d:6b:12:22:c9:ae:68:70:5a:88:30:e3:dd:
4a:5b:33:26:95:94:39:8e:73:0a:bf:77:d8:84:c5:
c0:62:bc:49:aa:67:b6:e6:c0:dd:05:98:20:b4:9e:
00:ab:b3:7f:ea:56:b3:81:3a:c2:85:e1:d6:c8:5c:
59:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:AA:C5:E0:42:32:A0:4A:9B:F5:BF:87:32:EE:E6:45:C7:DF:DF:0D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9ED6CF78494211F1AF6D59D8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.99.0-45.199.108.255
Signature Algorithm: sha256WithRSAEncryption
8e:17:59:33:19:3a:ff:d8:dd:14:7f:79:d4:2e:1a:9f:a3:7f:
7e:79:83:d5:11:00:8b:a9:db:b4:80:dc:ac:7a:72:e6:2f:dc:
3c:1d:63:89:65:59:54:4f:39:35:49:fb:1f:c0:e8:5b:68:b9:
b7:9d:8a:4f:b3:08:f1:36:a5:3d:a7:07:b8:73:c6:a7:16:d6:
32:d6:fd:0c:c8:ee:8f:d5:11:8d:f6:36:1c:31:4c:b0:b7:d2:
8c:64:28:97:4d:ef:ee:53:42:a4:af:71:fa:7f:65:56:3e:d2:
18:2b:70:f0:cf:d2:b1:9e:0d:97:37:e8:b1:0c:ab:cf:50:5a:
bc:13:bf:92:21:3a:b1:c3:69:a7:d1:3b:26:0e:9b:43:04:43:
51:c2:43:2f:90:cd:8e:68:38:56:4a:ae:bc:f3:ee:eb:e4:49:
85:8f:ff:e4:cc:38:07:75:e2:3a:03:7a:53:61:6e:82:6a:71:
a2:74:5f:89:7a:80:65:7c:ae:b8:1e:50:c2:9b:96:08:b4:f0:
32:5d:b1:30:26:62:89:2d:35:41:c5:28:b7:6b:c0:89:f0:26:
a1:f8:dd:d5:72:4f:9c:e8:c2:a2:4a:f0:8e:fa:bf:b9:b4:29:
eb:a0:aa:47:3a:83:dc:d7:2a:fb:97:d6:44:96:36:88:31:e2:
98:fa:a8:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:12:45 2026 by rpki-client