Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E90A7DF21C8211F1A3C73780DAE4EC9C.roa
File: E90A7DF21C8211F1A3C73780DAE4EC9C.roa (raw, json)
Hash identifier: islEmvhW+U85kNc/WWwRnjXUIxF/J/TcC+dOExhQ6hQ=
Subject key identifier: A5:AC:E1:72:12:D2:55:79:81:AB:14:14:A6:18:00:FC:F9:9A:10:2D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A3D0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E90A7DF21C8211F1A3C73780DAE4EC9C.roa
Signing time: Tue 10 Mar 2026 13:13:21 +0000
ROA not before: Tue 10 Mar 2026 13:13:16 +0000
ROA not after: Thu 09 Apr 2026 13:13:16 +0000
asID: 401434
IP address blocks: 45.196.216.0/23 maxlen: 24
45.207.154.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107472 (0x1a3d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 10 13:13:16 2026 GMT
Not After : Apr 9 13:13:16 2026 GMT
Subject: CN=69b018f0-9487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:aa:59:92:f0:5d:82:ad:fd:91:8e:2c:b1:9d:
db:8f:9b:38:af:03:91:ad:10:c6:b6:b6:c5:00:a2:
56:50:5c:72:24:33:59:53:57:e8:0b:6a:5d:22:1d:
4d:28:5c:1c:a3:1d:b4:e0:57:3d:46:a8:7e:7d:c7:
b2:bd:45:a8:cd:ca:e7:3d:66:fb:90:6d:f4:9a:77:
4e:ef:e7:94:63:55:2b:34:ae:0e:d8:03:b9:7f:c1:
c7:ff:63:fd:3c:60:cc:68:ed:99:6e:30:27:09:70:
c2:a1:c5:4f:5b:09:44:3c:c1:56:ee:15:3d:d6:5a:
5f:a3:62:de:8e:61:43:7b:df:fc:e2:1b:77:f6:d8:
e8:6d:9d:af:ca:77:81:9d:8f:7c:b8:a2:25:b3:7b:
9d:a3:e9:73:96:ab:78:13:2a:0c:e2:2a:31:c2:18:
06:d5:fa:8b:02:e6:3c:d1:e1:76:38:2a:cd:f9:81:
fc:a7:1c:49:1c:f6:ca:77:6b:78:6f:f0:1c:c4:d0:
07:c1:d9:49:d7:92:a2:6f:e8:e4:b7:3f:ba:33:d6:
ea:b9:ab:a7:33:fe:dc:67:57:06:2d:cd:87:05:2c:
4b:06:b2:b0:1e:b2:3e:19:fc:68:b2:80:ed:26:41:
c5:f6:e9:8a:38:c6:5b:d8:f4:68:a4:49:54:9c:3a:
44:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:AC:E1:72:12:D2:55:79:81:AB:14:14:A6:18:00:FC:F9:9A:10:2D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E90A7DF21C8211F1A3C73780DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.216.0/23
45.207.154.0/23
Signature Algorithm: sha256WithRSAEncryption
13:52:40:60:77:98:4f:f8:9a:84:67:00:74:19:2e:d3:c3:07:
a1:98:d0:66:b5:49:51:41:8d:c3:5a:4d:0f:bc:32:12:19:40:
20:94:f8:e5:76:02:b0:da:d9:e8:72:47:13:28:74:9d:ce:41:
cb:a9:a8:9b:38:00:22:4f:36:66:96:55:3a:95:33:87:38:d5:
ae:11:94:2b:85:b7:18:8c:03:a6:cb:33:01:3c:10:3c:a9:20:
8b:c9:60:4d:29:2a:be:d1:a8:34:a8:9c:00:18:fd:1b:05:0b:
ca:24:f1:e5:db:d8:cb:05:84:1b:5d:93:01:f5:07:f4:5e:a3:
77:f2:6e:25:69:22:b0:a9:a6:d9:2c:a2:03:96:81:ba:ef:62:
6f:b9:7a:6a:20:f2:52:59:62:39:39:87:e0:4b:67:2f:d1:9b:
0c:84:6a:45:ee:9f:06:51:0b:2c:f5:62:da:ee:9b:5b:d3:67:
46:00:04:9a:7b:8a:f8:0a:6c:60:b4:1e:19:32:26:50:27:ec:
51:88:b9:0e:85:7b:ee:bf:51:24:e4:6d:ba:2d:fc:99:a7:bb:
f2:77:60:c0:43:6e:f7:9a:05:ff:59:2e:50:71:34:ad:45:14:
1c:67:1b:cf:2b:bd:a3:3e:7f:64:45:64:d1:be:cc:e6:2a:82:
65:6c:53:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:10:47 2026 by rpki-client