Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D7EDD9C21C8411F19770318ADAE4EC9C.roa
File: D7EDD9C21C8411F19770318ADAE4EC9C.roa (raw, json)
Hash identifier: uDclTnMHuIB7G8WxBGd0ScxM4uSH982lqamBFOoeNJg=
Subject key identifier: 3F:47:F3:D9:A8:A6:3C:A0:9E:CF:3C:EC:BC:FE:A6:6F:B1:CD:BE:9B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A3D4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D7EDD9C21C8411F19770318ADAE4EC9C.roa
Signing time: Tue 10 Mar 2026 13:27:11 +0000
ROA not before: Tue 10 Mar 2026 13:27:06 +0000
ROA not after: Fri 17 Apr 2026 13:27:06 +0000
asID: 54801
IP address blocks: 45.194.85.0/24 maxlen: 24
45.195.60.0/24 maxlen: 24
45.195.62.0/24 maxlen: 24
45.195.192.0/24 maxlen: 24
45.195.196.0/24 maxlen: 24
45.195.197.0/24 maxlen: 24
45.195.199.0/24 maxlen: 24
45.197.20.0/24 maxlen: 24
45.199.130.0/24 maxlen: 24
45.199.131.0/24 maxlen: 24
45.199.134.0/24 maxlen: 24
45.202.8.0/24 maxlen: 24
45.202.9.0/24 maxlen: 24
45.202.10.0/24 maxlen: 24
45.202.11.0/24 maxlen: 24
45.202.63.0/24 maxlen: 24
45.204.1.0/24 maxlen: 24
45.204.64.0/24 maxlen: 24
45.204.71.0/24 maxlen: 24
45.207.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107476 (0x1a3d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 10 13:27:06 2026 GMT
Not After : Apr 17 13:27:06 2026 GMT
Subject: CN=69b01c2f-a447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:90:23:38:5f:2c:b2:dc:8d:08:eb:32:52:4f:
2e:bd:63:e0:00:d2:a5:f5:43:50:f4:b7:85:6f:1b:
5d:df:a1:00:2b:78:59:8e:11:81:4c:9c:f1:fd:4a:
be:02:89:bb:96:fd:15:04:a2:01:9b:81:4a:56:9f:
14:0d:4b:80:1f:4f:02:9d:6c:46:8b:3c:ca:6b:4c:
8b:10:c2:80:fb:9d:6a:14:99:32:30:41:45:37:0e:
56:88:c0:9c:c8:11:df:5d:ac:28:94:d6:e5:5d:48:
52:32:ab:51:3c:c0:59:47:f6:da:ab:c5:fc:d2:3b:
d0:9c:3b:fa:4b:a5:4b:6e:86:d5:c9:08:e6:ff:1a:
75:67:9e:6a:47:53:47:17:9b:c1:bf:b2:5e:e2:17:
69:d8:85:34:82:31:29:a5:98:c8:1c:a2:e7:45:e7:
6b:4e:8e:20:d2:06:8d:8b:93:ef:ea:24:87:26:83:
44:b0:2d:1f:a5:57:b9:84:17:fa:62:d7:66:0a:1e:
97:18:3e:59:41:2a:15:47:2a:69:1d:9a:e8:46:3b:
f3:ef:22:76:58:07:57:9a:3f:4a:04:73:c4:cc:d1:
f9:b9:09:2d:ab:7d:6b:66:9a:3e:2f:53:cd:14:9d:
10:1b:b5:28:79:bd:de:b6:9b:8f:11:67:98:ba:10:
3b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:47:F3:D9:A8:A6:3C:A0:9E:CF:3C:EC:BC:FE:A6:6F:B1:CD:BE:9B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D7EDD9C21C8411F19770318ADAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.85.0/24
45.195.60.0/24
45.195.62.0/24
45.195.192.0/24
45.195.196.0/23
45.195.199.0/24
45.197.20.0/24
45.199.130.0/23
45.199.134.0/24
45.202.8.0/22
45.202.63.0/24
45.204.1.0/24
45.204.64.0/24
45.204.71.0/24
45.207.163.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:45:49:02:6a:c6:c3:b5:c3:20:44:8e:07:d7:52:76:65:4a:
92:67:d3:09:c5:7d:d4:bf:d2:36:61:52:d7:1f:30:d8:06:85:
3b:f9:20:43:83:8b:a5:79:d1:fd:18:3b:d7:f9:df:a5:e2:ff:
9e:76:0f:c8:eb:01:11:49:f7:be:fa:4f:86:47:91:dc:a0:60:
62:12:ed:bb:2e:27:8c:55:fe:60:2c:28:99:b0:95:82:71:f3:
2d:ad:6d:ea:a1:2f:c3:67:63:a7:55:6b:09:2d:69:57:0b:33:
6a:71:a7:b0:ff:95:b8:c9:bf:1e:21:bc:d9:67:46:f7:40:99:
c0:41:49:de:2e:51:93:78:64:e0:0b:d1:ee:f3:3d:c7:dd:8e:
d9:21:4a:b5:52:f9:f2:27:a6:7a:3c:c7:17:b1:ea:8f:4f:84:
7f:15:42:c3:77:31:e0:de:1f:d8:89:18:14:dc:95:23:dd:69:
17:e9:86:e4:3d:34:17:4a:94:31:52:aa:b6:95:fd:ac:92:a7:
af:e2:13:5d:fd:c9:23:ff:6e:77:8d:5b:6f:3d:1f:26:66:77:
74:91:f3:85:5e:d1:97:54:e4:69:df:5b:dc:a2:56:a4:de:4d:
77:5b:8b:b8:2b:1d:35:2a:76:56:1d:66:71:f1:5d:18:83:c5:
fd:51:0b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:15:32 2026 by rpki-client