Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/09AC95E2119611F19802D5A1DAE4EC9C.roa
File: 09AC95E2119611F19802D5A1DAE4EC9C.roa (raw, json)
Hash identifier: HqPvPFoHGd3PwafLpiqqzmI2s1c9XQUQMjFn9E9m85Y=
Subject key identifier: 64:F6:E9:62:4C:D0:3B:8D:AA:45:96:06:34:4F:85:F5:62:2A:13:4A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A04D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/09AC95E2119611F19802D5A1DAE4EC9C.roa
Signing time: Tue 24 Feb 2026 15:32:33 +0000
ROA not before: Tue 24 Feb 2026 15:32:29 +0000
ROA not after: Thu 05 Mar 2026 15:32:29 +0000
asID: 136907
IP address blocks: 45.194.104.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106573 (0x1a04d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 24 15:32:29 2026 GMT
Not After : Mar 5 15:32:29 2026 GMT
Subject: CN=699dc491-9927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:34:d2:cb:1c:3c:aa:8b:0e:16:35:98:bc:82:
be:30:36:8d:98:e5:d6:ae:1c:4e:2e:e3:d8:3f:1e:
ad:6a:ab:58:87:29:ee:5d:5b:03:06:9e:ad:1a:d9:
c9:43:80:8b:b6:eb:47:34:1d:d6:7e:56:61:f1:4a:
3f:5e:4a:52:c6:09:52:73:6c:12:15:b1:66:fe:a6:
3b:70:3e:82:e1:6c:ff:7c:34:85:44:4e:d2:6a:96:
17:b2:30:86:24:e3:32:2c:2a:0f:dc:e7:12:f9:33:
21:4b:9d:36:4b:e0:29:fb:94:e8:f7:74:ab:bd:52:
3a:21:d2:44:d4:60:bd:74:a6:07:c6:d7:0c:41:44:
c7:bc:78:20:b5:b9:87:7a:4e:df:1f:8c:44:75:c0:
49:a6:4e:e7:6c:d8:ec:d3:d7:2a:0d:2d:f2:ff:3f:
43:da:f7:e8:a8:d8:55:c9:4f:1c:78:4c:a1:bc:e6:
29:df:cf:51:91:ef:f4:90:f9:85:e7:64:0f:a5:13:
76:d4:89:dd:d0:2c:3b:6f:9e:bc:33:3a:0f:94:e3:
97:60:d4:54:0c:56:45:be:15:57:7c:0e:d9:f5:f5:
50:c6:47:fc:9e:40:12:97:d2:dc:82:d9:04:b1:42:
40:ab:84:73:63:65:72:47:b2:10:39:08:47:71:c3:
39:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:F6:E9:62:4C:D0:3B:8D:AA:45:96:06:34:4F:85:F5:62:2A:13:4A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/09AC95E2119611F19802D5A1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.104.0/21
Signature Algorithm: sha256WithRSAEncryption
06:8a:95:f6:12:55:3b:58:0c:78:73:85:ee:ff:4a:60:01:72:
bc:0a:ce:2b:08:22:c2:a6:23:cc:8b:90:8a:99:53:df:ec:e1:
79:79:7d:39:2e:52:dc:37:21:e9:e2:c8:08:15:7c:e6:f0:36:
c7:ab:86:e8:1e:1f:da:57:1d:c0:60:7b:f1:42:dc:0f:a7:d9:
aa:60:19:ac:a9:33:9f:05:9d:aa:e7:8f:8c:d3:3b:55:a3:57:
df:c5:a5:a5:be:68:9b:45:79:b8:c5:6e:de:64:f9:f1:0b:b6:
b3:7e:b5:21:42:fa:a1:31:ec:b4:8b:f9:9a:ed:30:7b:2b:ad:
13:44:a3:89:4f:29:e4:2a:39:7f:33:57:b7:5a:37:d9:9e:e6:
7d:bd:a8:df:c4:42:f8:7d:06:b0:78:1f:e8:da:62:a1:5a:21:
9e:15:8c:0a:e2:43:ac:8d:70:77:c2:ac:ea:02:5e:2e:6f:6f:
8b:b2:6b:b0:2e:b2:e0:e9:5f:e3:33:44:a4:fb:67:99:4b:eb:
9d:75:5d:82:a9:7b:4a:a0:96:9c:5a:eb:30:63:05:f2:ff:c9:
04:fb:90:71:b1:7b:00:24:dd:59:14:a4:02:9f:7d:95:f5:b2:
dc:fe:15:8c:0e:33:2c:b6:b9:6d:8d:3f:a4:7b:11:1b:48:dc:
4d:76:6e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:16:52 2026 by rpki-client