Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CD89A132420411F1BCDD00D5CE1D38B0.roa
File: CD89A132420411F1BCDD00D5CE1D38B0.roa (raw, json)
Hash identifier: /0V1xsM79FFzVRMK3YRz+fIlwOY9PijpwDIyoplJmxw=
Subject key identifier: 08:A6:9C:B0:4F:2D:2A:02:FC:19:47:F4:23:0B:08:0D:E6:EE:B6:C2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AF6A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CD89A132420411F1BCDD00D5CE1D38B0.roa
Signing time: Mon 27 Apr 2026 06:46:22 +0000
ROA not before: Mon 27 Apr 2026 06:46:18 +0000
ROA not after: Sun 14 Jun 2026 06:46:18 +0000
asID: 137643
IP address blocks: 45.196.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110442 (0x1af6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 27 06:46:18 2026 GMT
Not After : Jun 14 06:46:18 2026 GMT
Subject: CN=69ef063e-7f97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:09:78:0d:ee:74:d9:2b:fe:21:eb:c5:ad:5d:
8c:cc:b2:39:b2:e2:17:22:a1:34:7d:ae:30:71:b3:
93:93:7d:ef:6b:7e:fd:23:c0:c4:8c:ba:f0:ed:17:
42:87:8c:6e:f3:cf:73:82:ff:cb:c6:79:1c:15:6c:
4b:24:a3:88:f5:0d:04:94:02:c7:2a:2c:44:36:02:
a6:68:f3:48:9a:6c:de:26:e9:e3:26:87:dc:31:0a:
cc:87:ee:72:46:57:f2:53:d0:9d:fe:ac:f2:a3:19:
c8:26:a1:b2:ee:3f:76:a9:26:88:81:ec:a3:a1:c0:
c1:18:aa:ed:66:6d:18:c2:e8:4d:6e:8a:9b:e5:06:
df:99:e1:f2:01:5a:01:87:ca:c3:06:d0:b4:6b:32:
65:b8:82:75:a5:63:e9:46:a5:c6:19:4c:c6:e2:a7:
19:e5:a8:56:06:41:5c:97:79:e0:b3:72:4b:aa:e9:
0d:c2:89:69:f3:89:86:dc:8e:c6:9f:ca:ef:f1:df:
4c:9e:8b:1e:65:64:84:d6:5a:0f:4b:b8:06:f7:1f:
49:0c:7a:a2:99:a9:d5:b7:43:82:1c:f7:9f:80:7e:
63:97:1e:5d:89:94:72:04:64:54:3e:ef:77:11:51:
ee:94:df:0e:4d:72:1a:b6:05:b8:a4:94:0c:37:51:
e1:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:A6:9C:B0:4F:2D:2A:02:FC:19:47:F4:23:0B:08:0D:E6:EE:B6:C2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CD89A132420411F1BCDD00D5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.196.0/24
Signature Algorithm: sha256WithRSAEncryption
55:d2:96:c6:27:b5:03:e5:58:29:c5:d2:aa:a0:d9:eb:cd:cf:
65:b3:a3:11:64:85:1f:e2:49:77:a3:12:12:b4:4f:87:e8:18:
1d:be:58:8c:8c:ec:bc:60:8a:cc:f1:ed:c0:b9:0e:89:14:aa:
7c:42:af:64:2d:05:2b:15:dd:55:e9:2d:68:72:ac:4e:53:ed:
ac:8c:df:87:af:6f:21:7e:51:1c:07:5c:c1:8f:55:85:f2:28:
f9:43:41:c4:35:b7:f0:dd:da:74:8c:9e:aa:d9:4b:fb:02:08:
42:ee:8d:4c:b7:31:c1:42:15:43:d1:f3:de:19:80:29:95:f5:
f9:49:4f:17:6d:ae:e2:f9:7c:1c:bc:50:f2:1f:1b:5e:fa:62:
e6:02:c3:07:9d:8e:58:18:9e:ec:0f:50:9b:af:e8:71:60:a9:
9f:5a:47:ef:10:cb:8b:6e:44:15:20:5e:78:5a:49:09:93:b0:
bf:8e:5f:ae:86:8a:3e:db:07:f5:8a:ac:a9:60:2e:10:57:fb:
ba:63:e9:7b:88:f9:ce:30:c8:05:a5:12:d4:50:f9:2f:f7:2f:
4c:78:74:a0:fd:8f:d6:1e:1b:fc:d3:b9:86:4a:32:28:bd:b5:
43:71:ba:5a:0e:99:de:cd:11:ae:bb:6d:03:58:40:8c:8f:6e:
56:fe:cc:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:46:48 2026 by rpki-client