Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D281AD40252D11F18BE5DE8ADAE4EC9C.roa
File: D281AD40252D11F18BE5DE8ADAE4EC9C.roa (raw, json)
Hash identifier: uvz325GwLcX1l4RDs515nNDCLu3Ap2KUiPamUVx41Aw=
Subject key identifier: 7D:DA:05:B0:9E:02:A9:4E:1A:43:61:81:E8:94:6F:54:09:71:F4:34
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A668
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D281AD40252D11F18BE5DE8ADAE4EC9C.roa
Signing time: Sat 21 Mar 2026 13:56:56 +0000
ROA not before: Sat 21 Mar 2026 13:56:51 +0000
ROA not after: Tue 28 Apr 2026 13:56:51 +0000
asID: 62240
IP address blocks: 45.192.32.0/24 maxlen: 24
45.192.33.0/24 maxlen: 24
45.192.34.0/24 maxlen: 24
45.192.35.0/24 maxlen: 24
45.192.36.0/24 maxlen: 24
45.192.37.0/24 maxlen: 24
45.192.38.0/24 maxlen: 24
45.192.39.0/24 maxlen: 24
45.192.40.0/24 maxlen: 24
45.192.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108136 (0x1a668)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 21 13:56:51 2026 GMT
Not After : Apr 28 13:56:51 2026 GMT
Subject: CN=69bea3a8-d3c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:87:76:a2:78:1f:de:8c:86:d8:d6:a9:47:3c:
ad:9f:ae:57:f1:9f:71:7a:f1:a4:cf:5c:69:60:e1:
92:ae:62:1b:64:82:f8:cd:08:f9:dc:2c:01:74:e9:
9d:cd:7c:07:28:04:01:ed:6f:e3:6e:51:37:35:1c:
10:dd:52:94:39:45:91:5d:79:c1:f1:4a:d5:15:62:
ee:41:ed:40:00:3b:99:83:54:09:cd:25:e5:ea:d5:
81:38:e2:e3:dd:40:e8:92:88:40:35:2a:13:ad:50:
f6:8c:5d:ab:71:57:8f:32:10:bf:84:8d:4c:f9:20:
6a:28:15:a3:a8:96:34:17:5d:e9:e6:e5:42:56:ef:
c1:b4:a1:4d:cc:09:bd:75:c3:47:10:a8:2f:16:b6:
aa:0f:be:dd:c2:29:ef:5f:1e:ef:d5:a3:cd:0f:ae:
a3:de:0c:76:54:55:26:61:04:09:40:d8:f0:b5:92:
f7:fd:b1:7e:49:45:c6:2b:7d:7f:03:19:aa:9c:8a:
77:12:92:75:a6:a5:1c:ce:bf:b4:c0:fc:7c:ea:1b:
81:3b:a1:fe:2e:fe:b9:6a:41:4d:06:31:b9:c7:a4:
67:a6:dc:8d:49:0a:58:cd:25:d6:55:59:c8:c1:96:
a6:5b:8b:33:ca:1e:72:ee:30:10:4d:f9:90:4d:0a:
a6:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:DA:05:B0:9E:02:A9:4E:1A:43:61:81:E8:94:6F:54:09:71:F4:34
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D281AD40252D11F18BE5DE8ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.32.0-45.192.41.255
Signature Algorithm: sha256WithRSAEncryption
98:59:82:26:3f:ca:da:b7:7b:b0:5e:ce:0f:c1:b2:55:79:19:
0c:4d:74:6e:ba:6c:b9:27:ee:c4:6b:e5:9b:f1:75:e4:dd:c9:
56:5f:03:b4:7b:ac:85:02:27:e0:61:37:3a:7d:a3:97:b2:b8:
98:2a:94:f3:bd:14:36:9c:31:ff:98:07:6b:4f:bc:1e:32:fe:
75:ce:14:7b:bf:c9:0d:44:52:ab:7d:5e:d1:b6:25:ac:44:15:
69:85:00:69:31:c9:de:b1:4d:f5:66:7f:75:68:d8:e5:cc:16:
e0:88:2a:9d:53:5c:58:d7:b4:f9:18:82:bb:b1:7b:d2:a8:59:
ff:ca:33:34:9b:6f:94:53:25:dc:6a:41:de:27:74:c2:04:fd:
7d:1a:73:ae:04:f0:ac:6c:dd:7c:33:ab:3f:8d:63:d0:45:6b:
20:c6:1f:f9:c3:8d:fd:8f:8f:4a:f1:52:71:6e:94:13:0e:07:
f9:0a:0a:3e:60:f4:f3:a0:69:b0:21:a7:3c:e4:01:bb:0a:46:
cf:37:c4:d5:55:3f:58:bc:5e:21:9e:f4:3f:49:27:ff:15:11:
0d:27:4a:9e:87:20:5f:37:f1:a8:59:52:73:4c:ac:d4:8a:62:
78:05:11:b1:b8:73:06:3f:62:20:05:6c:8b:bd:06:6f:9c:f4:
29:6b:d7:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:47:31 2026 by rpki-client