Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FABD89D825AE11F1B653A782DAE4EC9C.roa
File: FABD89D825AE11F1B653A782DAE4EC9C.roa (raw, json)
Hash identifier: RaQRviIMyqlFmZGIQC29A5I8VXWgjhOkT8sAlmoxlGI=
Subject key identifier: BF:37:2A:65:0C:58:64:CA:8D:0F:5B:DD:75:CF:D4:14:E6:E9:2F:E6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A6A4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FABD89D825AE11F1B653A782DAE4EC9C.roa
Signing time: Sun 22 Mar 2026 05:21:29 +0000
ROA not before: Sun 22 Mar 2026 05:21:23 +0000
ROA not after: Sat 04 Apr 2026 05:21:23 +0000
asID: 61112
IP address blocks: 45.207.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108196 (0x1a6a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 22 05:21:23 2026 GMT
Not After : Apr 4 05:21:23 2026 GMT
Subject: CN=69bf7c59-8f62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8c:b1:81:e5:44:e5:64:3f:51:e1:6c:cc:60:
0a:3b:87:73:fa:ef:5f:9b:c4:02:fb:5a:01:6a:eb:
9f:ee:5a:78:ea:99:9b:ee:a5:f9:4b:76:76:b6:a6:
f1:cc:37:61:7e:db:3a:00:c1:34:01:ae:da:20:e4:
ea:29:94:62:03:1c:b2:30:bf:17:f0:39:eb:98:ae:
74:86:77:ef:4c:e7:d1:11:32:ef:54:0d:48:40:b6:
dc:b5:db:29:8c:4b:70:32:20:d4:d4:eb:fe:42:b4:
3f:84:ed:aa:33:28:9d:b7:a8:ba:a0:b7:60:63:d0:
64:61:e9:1b:0d:6d:a4:98:ba:62:b2:a7:d9:7c:6a:
3a:bb:39:e4:0e:92:f8:2e:91:71:76:d0:f3:d0:cd:
8f:37:6e:10:4d:db:76:b5:15:0f:01:e5:49:ee:b8:
0a:aa:e2:61:cb:7c:93:22:d4:29:da:31:75:78:bd:
47:04:2a:a3:68:75:9e:29:47:9d:df:8e:4a:d0:39:
4a:20:de:d3:5d:70:bc:0b:ef:69:11:77:23:c6:45:
5b:e3:fd:28:cb:08:f1:33:7d:d0:bd:14:88:5d:3f:
ad:f7:fe:21:b6:1e:c5:67:ec:ec:33:c2:37:8d:e1:
4a:9e:f7:55:73:50:59:c6:ef:0b:f9:ba:99:22:84:
cd:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:37:2A:65:0C:58:64:CA:8D:0F:5B:DD:75:CF:D4:14:E6:E9:2F:E6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FABD89D825AE11F1B653A782DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.40.0/24
Signature Algorithm: sha256WithRSAEncryption
77:b8:38:61:be:44:65:06:16:84:1f:7b:ad:1c:53:15:d3:34:
1a:1f:fa:39:38:a6:de:7d:b4:38:6f:e7:f0:a3:8c:e4:70:81:
7e:7f:c1:a1:ee:3f:f7:cf:29:41:8b:80:72:0a:9f:94:10:29:
94:70:00:6c:94:86:75:e9:03:0a:02:f1:4f:e5:96:22:71:52:
f0:9f:88:9d:bd:26:26:92:17:47:ed:3b:b2:29:35:c8:95:c5:
47:2f:ff:80:87:3d:53:75:bc:85:68:b3:7a:79:5c:a0:a5:05:
09:3c:a2:68:5f:17:e4:62:de:45:a8:56:77:fb:86:43:f0:60:
54:69:9a:d5:42:a9:cd:99:10:58:f0:ba:0d:f3:4c:f7:93:00:
f3:7b:87:68:c1:a6:99:00:9e:8d:85:77:b7:72:7e:64:0f:2c:
b2:bf:f1:5b:fb:65:7a:4e:85:7c:b8:14:52:5c:60:4c:74:a8:
78:09:e6:01:44:81:55:eb:5c:22:8f:97:60:20:bf:e8:0b:fd:
be:ca:79:13:f7:7b:ee:51:33:fc:03:5e:95:92:79:b6:69:19:
6a:89:6a:0f:87:c0:93:36:6b:91:0f:86:f2:28:e8:65:19:a3:
a2:c1:7b:6e:cc:31:51:c9:3c:7e:c0:16:7d:24:fe:9b:79:43:
14:bf:98:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:15:38 2026 by rpki-client