Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D5637134186B11F1B9A52AA5DAE4EC9C.roa
File: D5637134186B11F1B9A52AA5DAE4EC9C.roa (raw, json)
Hash identifier: myTOWJnBWbei0/xm8x2vPFp/pXzoXzwDSOn7WQ4bS5Y=
Subject key identifier: 72:DA:99:D4:C4:B6:B3:C7:B7:1A:FE:76:E6:B7:7D:03:EC:DF:78:9A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A28D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D5637134186B11F1B9A52AA5DAE4EC9C.roa
Signing time: Thu 05 Mar 2026 08:18:05 +0000
ROA not before: Thu 05 Mar 2026 08:18:00 +0000
ROA not after: Thu 09 Apr 2026 08:18:00 +0000
asID: 139646
IP address blocks: 45.200.14.0/23 maxlen: 24
45.200.16.0/23 maxlen: 24
45.200.18.0/23 maxlen: 24
45.200.20.0/22 maxlen: 24
45.200.24.0/21 maxlen: 24
45.200.32.0/19 maxlen: 24
45.201.214.0/23 maxlen: 24
45.201.216.0/21 maxlen: 24
45.201.224.0/21 maxlen: 24
45.204.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107149 (0x1a28d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 5 08:18:00 2026 GMT
Not After : Apr 9 08:18:00 2026 GMT
Subject: CN=69a93c3c-a050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d6:9b:61:31:49:83:b8:b1:1b:03:b8:d0:fe:
ce:ca:1d:b6:55:06:0f:a5:76:77:13:92:2e:ec:e2:
24:be:27:84:c5:bc:df:9a:9a:62:63:cb:49:7e:28:
75:0a:40:68:bd:d4:dd:95:bd:9d:80:2c:8a:0d:df:
2e:5a:45:d3:45:3c:6d:a9:3c:36:64:dd:6a:50:de:
93:78:f9:21:9c:fc:ca:43:5c:3c:2c:ec:5c:9c:24:
a1:77:a4:f4:09:d6:d3:af:45:2f:05:57:86:4f:58:
35:16:b9:ec:a8:3d:f9:d1:14:0b:fa:ae:76:e9:b2:
1d:bc:0f:24:b7:dc:c3:21:28:eb:56:ec:00:ff:53:
c6:aa:18:6c:be:53:37:fd:3a:de:b3:d1:70:1e:79:
da:23:38:c4:f7:ed:ac:4f:3e:4a:30:2f:0a:cb:fc:
be:98:7f:28:8d:01:0f:78:ef:45:94:f6:91:c9:ee:
e0:7e:07:33:1c:6b:3c:d1:6c:8e:90:b7:0d:b0:4a:
63:21:b3:28:6f:5b:66:55:d1:4d:b9:22:88:c6:a7:
37:a4:7e:2d:d1:bd:a7:ff:44:a7:ba:77:5b:50:2e:
3f:1e:02:f9:ac:46:77:6f:99:b1:32:ec:87:67:b9:
b2:71:1b:e7:47:1d:61:1c:cd:5e:18:17:3f:77:79:
31:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:DA:99:D4:C4:B6:B3:C7:B7:1A:FE:76:E6:B7:7D:03:EC:DF:78:9A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D5637134186B11F1B9A52AA5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.14.0-45.200.63.255
45.201.214.0-45.201.231.255
45.204.0.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:36:96:ca:eb:ba:34:41:f9:1c:79:13:5d:2b:44:1b:ad:7a:
88:68:87:ad:ea:5a:a1:ed:91:72:57:9e:e2:23:91:bc:80:db:
c5:38:6c:2b:83:eb:80:bf:cb:3d:4f:1d:30:9c:aa:5d:6c:f8:
38:34:17:db:b1:eb:90:35:4f:a5:94:97:b7:16:1f:c5:1b:96:
27:51:de:73:71:2f:10:85:bc:0f:b8:57:ad:fd:9b:a6:8b:73:
4e:2d:75:4d:4d:e9:e1:2f:9a:64:98:bf:c9:df:ca:c2:62:56:
a3:12:75:1e:3c:b9:75:53:35:66:d2:64:8f:c2:4b:82:f8:99:
7e:b9:17:bc:51:74:f7:01:91:83:c3:43:27:81:1f:27:1a:ee:
4a:59:d4:9f:e9:09:9e:96:98:7c:16:5d:1e:83:a3:d2:93:8a:
ac:4c:83:e7:c2:f8:b7:ec:e1:1c:aa:99:fd:64:82:3f:ce:8e:
6f:12:5f:bc:33:a5:9f:6b:4c:8e:50:2a:e3:50:fb:af:df:27:
25:2d:c6:89:41:74:f3:17:2f:ba:81:12:4a:e2:10:f9:98:9d:
b4:c6:21:32:2d:21:bd:72:20:4f:6c:ba:da:47:ac:b0:9a:85:
61:dc:a9:c8:4f:f0:7d:69:bc:1d:25:9d:f8:27:c1:5c:d7:9e:
d9:42:f4:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:15:09 2026 by rpki-client