Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/013470E8367A11F18AF9E0A0CE1D38B0.roa
File: 013470E8367A11F18AF9E0A0CE1D38B0.roa (raw, json)
Hash identifier: JbcDz7ks+YTj5BiXxNxDx61Bl/eHhRZtMUImOTdbGLc=
Subject key identifier: 20:20:A0:38:47:90:B2:50:F8:74:E3:6A:BD:F0:90:D7:F6:1B:75:4C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AC29
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/013470E8367A11F18AF9E0A0CE1D38B0.roa
Signing time: Sun 12 Apr 2026 14:15:06 +0000
ROA not before: Sun 12 Apr 2026 14:15:01 +0000
ROA not after: Sun 10 May 2026 14:15:01 +0000
asID: 401615
IP address blocks: 45.192.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109609 (0x1ac29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 12 14:15:01 2026 GMT
Not After : May 10 14:15:01 2026 GMT
Subject: CN=69dba8ea-8d54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:92:95:c7:be:be:d2:36:63:1f:f8:46:0f:81:
ee:2e:03:4e:f1:36:30:5a:b2:56:c2:eb:51:ae:d0:
a1:2e:89:f4:69:f7:25:3f:88:36:9d:6e:c0:19:2d:
cb:8e:82:7d:6f:0a:dc:2a:b6:d0:d7:bd:be:c0:49:
57:f0:9e:f6:40:34:1c:06:ba:d4:8c:f9:ef:db:c3:
82:70:6c:60:66:b0:a3:50:2e:a3:87:61:20:8c:f2:
f1:2d:55:46:4a:7f:52:3a:e9:c9:bf:f5:4e:25:43:
f2:14:fb:0c:61:1c:d3:0d:83:73:88:58:dd:af:0f:
e2:56:8b:8b:f2:c4:2b:93:aa:74:c2:df:a3:0c:88:
be:07:c5:ab:fc:04:af:ae:18:ea:b9:2a:42:b6:31:
50:2d:09:b1:05:4a:b6:52:3a:e2:fd:20:84:5e:12:
46:72:15:e4:d9:45:ec:52:a7:a9:e5:fd:eb:7c:78:
ce:54:12:cb:7f:ab:12:68:ad:4e:c3:a6:ce:b5:3e:
05:aa:fc:a0:ec:0d:13:d9:56:21:12:5d:bb:fc:38:
a5:14:30:63:a0:ab:85:be:d9:38:0c:2f:fb:ca:bc:
c4:44:73:9b:fe:89:cb:0a:7f:4a:f4:61:77:2d:cc:
4a:68:a9:78:a5:c1:24:1c:f2:f1:19:0b:b2:fc:3a:
d6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:20:A0:38:47:90:B2:50:F8:74:E3:6A:BD:F0:90:D7:F6:1B:75:4C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/013470E8367A11F18AF9E0A0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.241.0/24
Signature Algorithm: sha256WithRSAEncryption
47:72:5d:23:3a:b4:39:83:1f:cf:67:d1:88:25:cd:8d:f7:e5:
d7:fd:a6:10:04:14:c8:9d:1e:6d:40:00:de:e2:71:8d:d9:87:
d2:a4:95:2c:70:05:cf:0d:25:9f:c9:cc:db:70:87:e2:5b:40:
0f:a1:87:d7:ae:49:8a:9e:97:49:92:5c:44:0d:9b:40:cf:66:
df:31:f7:9d:cd:df:b1:d0:70:da:40:5f:c7:80:92:15:f4:e4:
8f:33:48:00:1e:79:81:c3:eb:42:a1:64:ee:ff:43:45:cb:f0:
4d:a1:5f:4f:9c:13:c7:bf:73:21:59:31:d6:59:d5:db:49:fc:
62:ac:17:77:5b:4d:38:e1:21:06:7d:a6:52:4a:2c:13:fa:70:
66:af:ae:07:1a:2f:5d:cf:25:12:7d:bb:68:60:d6:d7:e7:ce:
e1:6c:c2:4f:3e:ee:93:fc:45:c3:f5:51:46:07:6b:08:30:d4:
66:18:29:1b:d5:ef:62:c8:3c:53:1c:98:63:5a:ab:9f:77:80:
63:ca:43:bd:ce:67:f4:ec:26:c4:f6:5a:fa:b5:77:64:80:dd:
c2:45:42:1b:0c:0b:37:45:3a:23:73:c4:95:95:b4:84:b0:eb:
87:7e:88:36:27:71:cb:3a:61:4b:2d:4a:4d:12:a6:2f:5f:17:
05:ef:ae:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:38:01 2026 by rpki-client