Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B197A33E25D511F18F8460E5DAE4EC9C.roa
File: B197A33E25D511F18F8460E5DAE4EC9C.roa (raw, json)
Hash identifier: zJYj0f4kYJf/sofCuYOqqqrgfMk4tl3B9ItPW68ykNA=
Subject key identifier: F4:A1:97:AE:96:3B:10:4B:4C:B9:21:25:1D:CC:42:5A:9A:48:EA:39
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A6AC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B197A33E25D511F18F8460E5DAE4EC9C.roa
Signing time: Sun 22 Mar 2026 09:58:37 +0000
ROA not before: Sun 22 Mar 2026 09:58:31 +0000
ROA not after: Tue 28 Apr 2026 09:58:31 +0000
asID: 48031
IP address blocks: 45.200.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108204 (0x1a6ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 22 09:58:31 2026 GMT
Not After : Apr 28 09:58:31 2026 GMT
Subject: CN=69bfbd4d-7e4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:eb:54:3a:d6:68:dc:3b:a8:9f:74:d8:56:75:
b6:ad:e5:a0:f1:df:61:39:a1:0e:23:01:79:41:ca:
a9:9d:8b:3a:80:9b:7f:54:78:14:b0:5e:2e:6f:50:
7f:bf:e9:47:2b:bc:6b:84:a3:81:08:35:64:45:7f:
97:8a:f2:4a:57:be:f7:22:00:ae:49:4a:e6:d0:04:
62:1d:9f:da:95:7d:49:9a:41:15:42:6c:ca:41:70:
f1:69:07:d8:92:22:3b:78:91:51:98:bb:78:99:3e:
ae:0c:36:21:61:fb:96:f1:01:c2:97:40:e6:01:a1:
55:a8:0d:45:f3:2e:3e:86:17:d8:e6:bd:a7:83:17:
03:a7:ed:13:a5:98:99:65:3b:44:c1:37:5f:10:d0:
13:32:77:b4:02:45:4d:e0:da:cb:3f:5b:25:8c:aa:
7a:e5:b8:8c:85:27:a2:72:e1:a1:f6:de:48:f8:23:
70:11:96:30:d4:8a:e8:ad:be:26:7c:ac:c1:02:1a:
7f:5e:43:73:6c:49:f3:f8:23:aa:9b:b1:18:c6:8c:
35:c5:49:3d:d3:58:3b:31:30:fb:7b:62:11:1d:53:
05:62:92:0b:e8:0c:ac:88:d6:6b:95:1b:65:56:ee:
7a:d3:03:29:bf:00:ef:b7:6c:45:67:38:00:d0:dd:
c0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:A1:97:AE:96:3B:10:4B:4C:B9:21:25:1D:CC:42:5A:9A:48:EA:39
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B197A33E25D511F18F8460E5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.191.0/24
Signature Algorithm: sha256WithRSAEncryption
05:7a:85:13:33:cd:57:ee:a7:57:f7:c2:96:76:6d:ef:8e:37:
12:6e:92:b4:63:41:5d:82:ff:be:1e:3e:e8:0d:55:f7:a1:4b:
c5:79:47:26:f1:82:05:e8:d4:32:5c:4f:82:4c:1a:18:fa:9c:
c0:d7:9b:62:cb:6d:cc:2a:75:aa:b0:75:47:14:a4:b4:f6:34:
40:9f:6c:1a:09:4d:72:b6:9b:dd:5e:09:1d:35:9d:ad:55:1c:
4b:c3:1d:75:2f:a2:96:4c:3e:4b:15:9d:54:f3:82:d3:aa:81:
54:07:78:5c:4f:b1:06:92:1e:7b:68:7d:48:9b:8e:fb:b4:88:
78:ee:0e:2f:16:00:5f:9d:b6:51:dc:3d:5a:c4:9f:35:d8:17:
bf:76:5d:83:98:bc:79:27:89:69:98:37:7b:8c:a2:fe:bf:5b:
cc:ac:06:43:12:e4:7f:6c:fe:c7:21:62:75:ba:ef:ac:45:38:
62:0e:74:5a:0c:a4:98:e7:7b:5f:4e:e6:74:87:4f:19:43:e8:
95:4d:a8:67:22:2e:4a:eb:45:fb:2a:91:2e:35:97:a2:8f:fb:
25:d7:db:1d:a0:ea:cb:f1:30:e9:d9:f7:40:79:a4:77:a4:37:
34:b3:77:0e:65:ab:4d:13:a5:0d:16:a4:74:d6:97:f2:83:cb:
04:b5:92:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:10:43 2026 by rpki-client