Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CC67686C1C5611F1BBA8FB83DAE4EC9C.roa
File: CC67686C1C5611F1BBA8FB83DAE4EC9C.roa (raw, json)
Hash identifier: JYhEj7kHniZMWpBU+ow9MQERATvQUfddIynonb7Jcq4=
Subject key identifier: 02:10:4D:A7:FD:E2:F6:D2:5D:BE:1E:F4:82:6B:06:CA:5F:BD:BD:D4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A3AC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CC67686C1C5611F1BBA8FB83DAE4EC9C.roa
Signing time: Tue 10 Mar 2026 07:57:35 +0000
ROA not before: Tue 10 Mar 2026 07:57:30 +0000
ROA not after: Sat 10 Mar 2029 07:57:30 +0000
asID: 17561
IP address blocks: 45.197.137.0/24 maxlen: 24
45.202.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107436 (0x1a3ac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 10 07:57:30 2026 GMT
Not After : Mar 10 07:57:30 2029 GMT
Subject: CN=69afceef-f17f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:98:a8:2e:9d:31:6d:c8:23:0c:5a:6a:9f:3c:
8d:5f:de:bb:6c:69:0f:7b:7f:af:33:2a:f5:dd:6e:
c9:2f:73:0c:39:ee:2a:40:f2:6b:e6:38:6f:1b:9f:
8c:71:93:68:7d:2c:27:00:69:35:b0:80:3e:b6:ec:
fe:4c:29:c8:dc:80:a8:27:c2:23:42:00:ef:85:44:
60:be:7f:c9:10:af:f0:c4:dd:78:a6:d8:6c:5e:6e:
a4:79:b8:9c:2b:07:16:9b:8b:b8:14:f8:f3:0d:9f:
37:36:0e:d4:3a:4a:9a:ab:14:94:41:58:4e:f8:76:
ba:ee:4d:99:c6:17:f4:eb:82:45:fd:b3:6b:bc:91:
d3:54:2c:df:5e:6e:1b:dd:b7:29:22:84:2f:08:a8:
ba:2c:87:c9:b1:09:91:e2:5c:93:25:2f:ed:aa:9e:
b3:42:6b:4e:70:7d:f5:27:3f:8a:cd:e3:bb:df:38:
9f:57:ae:44:91:f5:cd:f3:05:60:e8:96:46:a9:6a:
7e:2b:50:f8:24:75:f0:2a:85:7e:5e:f1:ac:8f:bb:
4a:e5:82:1f:18:b6:5c:e3:ad:9c:91:1c:08:91:41:
23:b1:f9:71:64:8a:96:fc:9a:67:d1:24:ca:73:2b:
ff:b4:b2:17:dd:79:c8:ee:81:09:e4:d3:e3:c4:08:
57:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:10:4D:A7:FD:E2:F6:D2:5D:BE:1E:F4:82:6B:06:CA:5F:BD:BD:D4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CC67686C1C5611F1BBA8FB83DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.137.0/24
45.202.197.0/24
Signature Algorithm: sha256WithRSAEncryption
22:4f:7a:e3:fd:09:2f:1c:5c:50:5b:be:60:a6:04:31:66:c0:
f3:b3:40:11:3e:54:6d:f4:53:54:38:52:64:72:dc:cf:25:ae:
77:9a:ea:81:bb:01:0a:f0:36:c2:6e:20:1e:8b:01:a5:b7:e4:
4e:02:93:d2:b7:fd:b3:d5:77:9a:13:73:85:2f:e6:85:9d:ea:
06:9c:bc:18:a8:e4:6f:1c:dc:e2:f1:81:56:e8:d2:c2:58:99:
68:c8:50:15:91:ed:f8:34:42:4a:f3:e3:5b:dd:11:06:fe:bf:
c6:d0:29:65:63:28:8b:5e:50:99:0c:d1:de:80:a5:bb:51:75:
b0:da:8c:35:48:2d:48:3b:c1:23:82:ac:fe:a0:39:59:67:4c:
45:da:23:a3:b1:66:79:85:3b:c9:57:f4:c0:b9:a6:af:1e:2e:
e9:f1:e2:1b:39:e0:ad:e0:86:d6:85:30:35:13:07:73:46:32:
53:53:31:96:7f:e2:e6:22:94:d6:e4:bc:28:00:c0:ca:58:36:
26:cb:7e:d5:f9:8f:1c:fa:64:d7:88:f7:88:94:8d:fe:40:49:
b8:d8:36:59:61:52:2c:3f:e7:e1:99:2d:29:52:b3:91:9e:55:
10:15:0f:75:0e:0f:85:7b:f0:db:d9:cc:5d:e6:ce:3b:39:a8:
c1:b5:72:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:10:56 2026 by rpki-client