Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D20D0C2C19FE11F1A071CAD6DAE4EC9C.roa
File: D20D0C2C19FE11F1A071CAD6DAE4EC9C.roa (raw, json)
Hash identifier: Ga5GEDWw7yy88nYX+9oKqzGoe4kGC745UYcotldecMQ=
Subject key identifier: D8:7B:DA:EA:65:A5:86:7A:82:22:96:CF:7E:BA:F6:6F:DB:4F:5D:32
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A32A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D20D0C2C19FE11F1A071CAD6DAE4EC9C.roa
Signing time: Sat 07 Mar 2026 08:22:47 +0000
ROA not before: Sat 07 Mar 2026 08:22:32 +0000
ROA not after: Sat 13 Mar 2027 08:22:32 +0000
asID: 262191
IP address blocks: 45.192.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107306 (0x1a32a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 7 08:22:32 2026 GMT
Not After : Mar 13 08:22:32 2027 GMT
Subject: CN=69abe057-9604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:66:ae:03:1c:41:60:41:9f:8a:d8:ff:aa:44:
a3:09:2a:62:6a:ec:c6:87:d3:ed:7e:d7:6c:fb:85:
02:28:cb:e3:9e:18:78:16:b0:e4:24:85:b2:23:4a:
0c:27:a6:51:f7:2a:a7:e7:46:86:f8:89:5c:d6:b1:
00:00:62:a8:e1:49:f9:20:2f:1e:59:81:a8:d3:d1:
34:a3:4c:ee:0f:55:16:a7:f4:0c:bb:c4:b5:e2:7f:
8c:47:a6:4b:c9:d2:0a:33:3a:0b:61:ef:01:de:ab:
c8:5f:d3:b4:46:46:31:fe:94:99:ae:5a:17:1d:df:
a6:09:4f:2a:3f:a3:cc:f9:fc:de:bb:f6:e1:e4:7d:
3d:ea:fd:70:36:e5:a8:f5:29:fb:bd:98:24:69:63:
89:2c:33:33:3e:23:3a:85:fa:07:83:7c:89:6e:6a:
4d:a4:49:aa:fb:37:a3:83:b2:71:5d:61:db:32:b4:
6e:4a:54:66:6c:e7:cf:2c:51:91:5a:50:36:a8:b0:
46:bf:40:13:bf:a4:be:d4:5e:1a:33:70:e2:c5:f1:
93:24:4d:3b:15:41:1e:3b:54:97:b4:d1:04:62:3d:
98:e5:a6:6f:9e:70:9b:48:e3:06:0d:3a:8c:8d:ce:
99:13:2c:ab:73:c9:83:be:28:14:7f:df:2c:40:65:
72:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:7B:DA:EA:65:A5:86:7A:82:22:96:CF:7E:BA:F6:6F:DB:4F:5D:32
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D20D0C2C19FE11F1A071CAD6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.18.0/24
Signature Algorithm: sha256WithRSAEncryption
66:f9:1d:57:7e:97:8c:a3:de:1e:14:af:41:72:b0:49:43:af:
a3:2d:bf:29:a9:a3:92:b8:ca:3c:cd:2f:10:5e:bd:ea:08:a4:
74:77:4d:04:0d:e2:30:da:74:a9:03:b5:8b:1a:e7:35:23:eb:
5b:68:d7:64:7d:66:9f:74:d4:ca:f2:83:ee:08:11:fe:70:8f:
ba:9e:01:3e:6a:55:2d:5f:e9:ee:9f:52:c5:63:8a:26:77:24:
4d:6f:38:ad:00:09:29:95:f1:ab:3e:67:a1:f1:14:d2:62:20:
31:ab:08:09:1c:9c:04:39:54:ab:f5:b3:cb:f6:cb:da:be:1d:
da:2a:4e:ce:e1:62:b7:06:f1:08:70:f8:0a:32:6b:df:b2:3a:
95:34:ba:ab:e9:68:15:b2:c5:a7:c5:8b:75:25:88:93:9c:52:
9b:8c:26:19:cf:b1:ee:10:37:59:40:b9:b6:fa:6a:64:b4:1b:
11:70:ce:c7:1e:96:fe:08:ad:7a:29:7f:b7:92:ac:33:98:6e:
d6:7d:4e:63:3b:94:ac:df:34:8e:26:47:5e:44:12:4d:20:5f:
4d:14:0b:dc:fa:82:15:ed:f9:28:e7:de:d5:b0:aa:a9:a8:06:
1e:70:9d:f1:16:65:7e:39:ee:f3:35:91:e7:da:6d:0a:32:09:
7f:4c:50:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:10:57 2026 by rpki-client