Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF0B100E275111F1A752BF91DAE4EC9C.roa
File: CF0B100E275111F1A752BF91DAE4EC9C.roa (raw, json)
Hash identifier: UbuwjdfFqbzwQog7UVjG4a7o2o24s3bvpBju699KLMM=
Subject key identifier: CD:85:ED:BA:9B:10:1D:1E:32:B7:1C:82:4D:D5:37:DE:B9:0B:14:0D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A700
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF0B100E275111F1A752BF91DAE4EC9C.roa
Signing time: Tue 24 Mar 2026 07:19:35 +0000
ROA not before: Tue 24 Mar 2026 07:19:30 +0000
ROA not after: Thu 23 Apr 2026 07:19:30 +0000
asID: 131471
IP address blocks: 45.195.130.0/24 maxlen: 24
45.195.131.0/24 maxlen: 24
45.195.194.0/24 maxlen: 24
45.195.195.0/24 maxlen: 24
45.195.210.0/24 maxlen: 24
45.195.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108288 (0x1a700)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 24 07:19:30 2026 GMT
Not After : Apr 23 07:19:30 2026 GMT
Subject: CN=69c23b07-2bea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:07:a9:de:1c:bd:26:e5:7c:45:75:65:11:01:
70:c4:2d:f2:f0:99:75:b5:f4:dc:bf:5e:67:07:ff:
1f:95:3c:78:41:c0:5c:36:01:76:74:90:ed:8b:e9:
88:83:a1:7c:89:d8:09:06:9e:4b:cd:a8:11:e9:44:
35:02:a9:49:4d:f9:b3:e2:85:27:f5:45:e6:a0:2f:
6a:95:29:9a:6f:97:d1:8a:64:c9:60:f4:f9:fe:bf:
ac:b6:53:96:8f:ab:87:25:f6:43:fe:1c:a5:0e:04:
d6:9d:f3:b1:6f:e0:91:4e:13:94:14:b0:0e:36:6c:
72:20:88:58:40:58:47:29:33:e3:37:fb:56:a9:b4:
19:56:e1:0e:0d:33:24:8e:45:80:09:72:89:aa:67:
a8:33:17:04:45:e2:07:33:e3:c0:85:ec:3a:cc:d3:
9c:83:f6:ff:c0:99:0d:be:9a:64:53:2f:37:7b:36:
73:54:b1:fd:e4:b2:62:ad:ea:f8:5d:f0:33:46:1a:
6f:f8:5f:e0:2e:0d:de:4c:51:58:4f:d8:ae:6c:b1:
91:fd:33:c5:46:e5:bd:99:63:99:9f:03:66:29:e5:
cb:a2:61:3f:da:fd:0b:0a:04:dd:8f:1b:d0:f5:f8:
9a:60:5c:be:8f:13:cf:f7:23:31:74:51:8f:97:61:
45:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:85:ED:BA:9B:10:1D:1E:32:B7:1C:82:4D:D5:37:DE:B9:0B:14:0D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF0B100E275111F1A752BF91DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.130.0/23
45.195.194.0/23
45.195.210.0/23
Signature Algorithm: sha256WithRSAEncryption
72:16:c9:50:81:5a:82:87:40:61:6b:92:b2:1b:e4:39:76:50:
71:c8:55:97:54:bc:ba:25:4c:8f:08:d2:4a:b8:26:b2:57:e7:
9d:e4:1e:64:f1:1e:69:49:cf:7f:e4:ca:49:63:b8:bb:87:41:
fb:b4:49:6d:8a:57:7c:52:40:98:20:ad:ca:f5:2f:a6:17:5a:
9f:05:87:1d:84:c3:9c:7b:fb:fc:0a:69:94:02:50:ef:99:f1:
1a:7b:b7:45:58:ac:7a:3d:15:d9:77:72:ee:63:6a:20:d7:1e:
41:9d:44:3e:3b:3f:bc:db:a8:a0:87:ae:5a:c8:19:73:14:60:
e1:c5:ba:b1:eb:2e:de:bf:f3:f6:18:b0:33:a5:11:b4:74:eb:
31:15:19:d0:48:73:42:42:6b:52:58:02:cb:86:be:d0:9c:04:
36:15:e2:2a:8c:da:5b:61:b4:a2:ee:2b:34:c3:04:cd:eb:db:
88:a0:ff:45:ac:2a:e4:81:f4:a4:92:53:90:44:12:0f:21:2b:
ad:f5:42:09:e5:6c:6c:ad:7d:9f:66:eb:c2:05:05:3d:93:44:
f9:31:c3:78:7a:ef:28:a6:8e:eb:c1:90:b9:15:26:e9:48:f9:
ce:5b:d1:25:2b:36:bc:c7:f8:6f:d0:e1:12:87:a3:2c:f1:38:
0c:ba:a1:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:15:45 2026 by rpki-client