Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B2F7160227AF11F1A4C952A7DAE4EC9C.roa
File: B2F7160227AF11F1A4C952A7DAE4EC9C.roa (raw, json)
Hash identifier: t5fpLd1iGZmGbHWpYuXDvraAwUd/IlGuVzWfbHygQeo=
Subject key identifier: FE:25:88:7E:C1:64:43:65:29:01:6D:F0:30:89:0E:FF:00:3C:F3:9C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A71C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B2F7160227AF11F1A4C952A7DAE4EC9C.roa
Signing time: Tue 24 Mar 2026 18:31:40 +0000
ROA not before: Tue 24 Mar 2026 18:31:35 +0000
ROA not after: Wed 08 Apr 2026 18:31:35 +0000
asID: 138985
IP address blocks: 45.199.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108316 (0x1a71c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 24 18:31:35 2026 GMT
Not After : Apr 8 18:31:35 2026 GMT
Subject: CN=69c2d88c-f7e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a6:da:11:3a:3e:e8:37:ed:af:9a:73:26:26:
db:57:dc:26:4c:27:2d:fb:ff:bd:e2:1f:b7:93:51:
af:f2:86:44:4b:bd:fe:0b:52:cc:4d:fb:e1:d7:c7:
8c:6b:c9:43:a4:94:25:c4:82:c7:d9:d7:f4:60:94:
ed:81:04:42:4f:b4:3b:e3:57:62:48:06:85:f0:ff:
c5:1e:e5:aa:19:ff:0c:03:28:b6:a5:0a:d1:62:1b:
ea:f0:27:ed:4c:aa:ea:2b:ea:92:fe:06:7c:5c:5e:
1d:f9:23:46:48:e4:3f:1d:e9:72:64:9a:97:75:50:
f1:a8:d7:40:c9:ec:2c:3c:d2:9b:fe:4a:f2:07:06:
b5:c1:db:ed:ca:61:97:9a:0c:a6:da:27:01:2c:a3:
ba:6a:fe:f9:af:b3:f6:d0:bb:79:ed:45:bd:7c:46:
99:fe:b3:cb:24:3e:53:71:9f:53:08:f7:49:0e:3b:
85:fd:37:87:18:5f:af:0f:e4:99:5d:15:bf:eb:c8:
bc:2a:41:f8:54:a3:1c:20:56:f5:c9:d9:cc:34:a0:
c0:7d:3d:16:1f:08:f3:9a:6c:e3:c5:bb:15:b7:48:
b5:d3:71:71:25:e0:2f:7a:a3:60:f5:35:1b:54:0a:
df:e9:ee:82:39:e1:6c:7e:af:e2:67:d7:76:1b:b5:
38:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:25:88:7E:C1:64:43:65:29:01:6D:F0:30:89:0E:FF:00:3C:F3:9C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B2F7160227AF11F1A4C952A7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.187.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:75:c4:ed:03:14:5a:c7:12:ae:8c:f4:03:36:2f:9f:5a:61:
dd:6f:d6:fc:e0:79:3c:00:04:77:a3:71:73:48:50:44:3e:49:
38:c6:6b:30:af:16:f0:4d:1b:a6:37:ab:e0:dc:fd:3d:0d:e9:
0b:27:3c:fb:4f:2f:21:d6:67:dc:96:a8:11:ba:9b:5f:1a:6c:
59:bb:8a:59:c3:72:bd:d4:f4:e2:a3:e4:4c:5a:8b:16:11:c8:
ea:d3:99:88:c9:b9:35:b0:10:fd:36:fe:5c:88:bb:29:88:a1:
8f:d9:a1:e3:9f:2f:3a:74:04:5a:8f:4e:41:06:39:a8:a1:9b:
cb:20:18:05:78:60:46:42:93:f3:f0:78:20:9f:10:c5:37:3b:
6f:05:8d:a2:2d:c9:21:82:8f:c7:65:fb:2c:ec:c7:f7:fe:6c:
dd:da:89:45:2c:bc:83:3e:11:3b:d1:55:2a:cf:bc:38:64:89:
6e:5a:c1:36:34:62:50:d6:71:e4:b3:36:d4:12:fd:55:32:07:
6b:b4:d9:61:d5:b3:c4:62:59:15:72:bc:6d:43:ee:0a:e2:40:
b0:15:13:56:23:7d:7a:7e:ae:f8:8c:8b:26:63:fb:11:a7:36:
93:b1:c6:33:7e:13:d5:21:e6:1d:9b:19:40:c3:ef:a3:f7:ac:
f5:35:4b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:10:51 2026 by rpki-client