Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/04CB4D8AFDAE11F08FE8DCD0DAE4EC9C.roa
File: 04CB4D8AFDAE11F08FE8DCD0DAE4EC9C.roa (raw, json)
Hash identifier: +czRtO9ex5Ma0XDGllpjMVgiDQiXO79sBOQV++ZuiqM=
Subject key identifier: 98:41:F9:16:E9:1A:92:59:78:84:1D:0B:E1:0E:6F:B6:7E:57:3B:5B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019AC3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/04CB4D8AFDAE11F08FE8DCD0DAE4EC9C.roa
Signing time: Fri 30 Jan 2026 07:33:50 +0000
ROA not before: Fri 30 Jan 2026 07:33:43 +0000
ROA not after: Wed 06 May 2026 07:33:43 +0000
asID: 9294
IP address blocks: 45.197.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105155 (0x19ac3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 30 07:33:43 2026 GMT
Not After : May 6 07:33:43 2026 GMT
Subject: CN=697c5ede-f4c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:dd:69:e9:82:60:80:cc:b7:2c:30:10:b6:5b:
63:54:75:d9:0e:f4:14:62:c2:ad:ae:d9:38:d9:a5:
51:11:cb:47:7e:3a:26:ac:a1:94:36:56:51:7b:ee:
08:b7:e5:18:ba:f7:a1:0a:f4:a7:fa:62:57:8e:da:
0a:52:bc:dd:b5:6d:a4:0e:9e:1c:01:1f:90:5b:7f:
79:d2:30:42:90:93:51:f6:ee:d0:bb:27:fe:fb:bf:
66:45:06:8f:73:66:29:e8:e9:cf:be:5f:b9:f2:fb:
1b:da:27:01:ba:e0:fe:a9:de:a0:a3:bb:1c:dd:e8:
50:08:85:a8:bd:cc:b3:e8:89:6c:24:32:33:b8:22:
9c:42:91:4c:5f:1f:b0:46:d7:ea:e6:1d:6a:0e:64:
70:5d:c1:59:f7:bf:de:88:f0:f4:bb:00:03:4e:81:
a9:fd:a6:88:0a:ce:ee:fe:e4:4e:a5:a8:2f:8e:63:
99:5a:99:4c:dd:3a:03:b7:27:d7:e5:02:90:5f:dd:
80:3d:73:5e:e4:b8:28:a6:42:7d:f8:c5:32:1d:67:
43:3e:61:d0:d6:aa:5a:e0:c4:54:11:98:02:ad:18:
eb:c9:8d:26:1b:40:a0:b9:bf:2c:37:09:35:bc:63:
a4:ac:4a:f8:3c:7a:42:24:5f:f2:97:cf:8e:7e:0d:
b3:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:41:F9:16:E9:1A:92:59:78:84:1D:0B:E1:0E:6F:B6:7E:57:3B:5B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/04CB4D8AFDAE11F08FE8DCD0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.32.0/19
Signature Algorithm: sha256WithRSAEncryption
3e:48:fb:1e:84:89:95:c8:41:c7:65:eb:2c:2b:19:9c:35:5f:
ca:fa:ec:74:9d:b3:19:9f:23:12:57:ae:88:61:67:a9:fe:03:
63:24:da:40:d5:bc:11:5c:0a:6b:e1:e7:40:00:12:bd:02:8a:
b8:fe:c3:17:df:85:15:f8:1e:00:98:98:d9:c4:be:ec:9a:3a:
25:3c:e7:5a:d8:ac:93:3e:42:59:46:aa:17:7e:b9:53:fb:f5:
03:2b:38:f2:ee:97:fa:1e:74:a0:ae:cb:f4:35:d3:e3:c5:5b:
72:54:d3:0d:cf:41:0e:9b:ff:d6:12:7e:c9:51:fa:7c:b1:d9:
42:e3:2a:2e:4e:bb:59:1d:b4:5e:6f:1d:40:16:7b:4d:1c:22:
39:66:08:46:b2:00:9f:04:da:37:a4:d9:a7:fb:ec:4b:3e:f9:
e1:c2:90:ba:f9:c3:b8:ff:78:9d:18:f8:bc:0b:e5:95:3a:2e:
83:55:74:e9:24:d2:54:d0:6e:9d:86:2d:e0:fd:22:2b:39:bf:
f5:4d:74:89:b5:67:81:2a:ba:c7:04:3b:82:7c:48:b1:33:e1:
a2:48:6d:87:2e:6a:a3:62:1b:22:b8:2a:56:ac:28:bd:77:68:
53:60:91:95:e4:08:51:28:01:6b:03:cb:7d:95:2f:e7:31:21:
5f:8f:af:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:04:41 2026 by rpki-client