Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/26D91F4EB55E11F0AB7CE6CDDAE4EC9C.roa
File: 26D91F4EB55E11F0AB7CE6CDDAE4EC9C.roa (raw, json)
Hash identifier: Vh5GU/JAIE6Rqi54AwJb94BsDtVb3SDuzY+tm5/3iWA=
Subject key identifier: 26:80:37:B6:85:E1:03:78:4A:36:DC:64:11:D3:07:C0:7C:20:13:FD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 0183FB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/26D91F4EB55E11F0AB7CE6CDDAE4EC9C.roa
Signing time: Thu 30 Oct 2025 07:00:43 +0000
ROA not before: Thu 30 Oct 2025 07:00:33 +0000
ROA not after: Fri 05 Dec 2025 07:00:33 +0000
asID: 33182
IP address blocks: 45.192.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 07 Nov 2025 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99323 (0x183fb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Oct 30 07:00:33 2025 GMT
Not After : Dec 5 07:00:33 2025 GMT
Subject: CN=69030d1b-b193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e7:68:41:01:a4:22:06:fa:7a:d6:50:ad:57:
b8:72:fc:3e:25:91:3f:81:f9:91:de:e8:c1:74:f5:
f8:13:95:c6:87:82:4f:85:bf:3a:51:a3:bc:9a:36:
d2:bf:d0:96:e5:74:ca:fe:99:a5:af:43:6c:f6:86:
5b:a2:d8:c1:a2:87:5e:32:e8:3a:c9:78:9e:8b:33:
a0:12:b6:a3:0b:04:57:9d:c4:fe:10:7d:fd:51:27:
21:3d:d5:a2:81:0f:c4:84:32:b6:86:6b:84:7c:18:
13:a6:b1:99:59:e5:fa:b5:07:d3:d6:fb:81:2a:77:
c5:fa:16:96:41:2f:7d:48:50:fa:2c:c6:7e:3a:fb:
ee:0e:da:10:79:af:70:79:ed:36:09:ea:5f:68:81:
4c:f4:14:a9:e6:53:ad:c1:83:19:2c:24:32:34:23:
41:53:fd:e1:cb:f0:ce:9d:02:83:41:21:c7:06:60:
08:30:a4:8f:4b:bb:1f:e0:91:7e:c7:ae:ff:03:67:
ed:b7:7f:a4:cc:d0:ef:1b:bc:ab:4a:68:6e:f3:66:
bf:31:2f:e6:67:ec:26:b8:c2:fc:9d:95:98:a0:0c:
52:4a:9d:9e:e3:da:74:3e:ca:35:65:63:a9:48:f5:
4e:9a:c8:3a:bc:54:05:07:74:2f:aa:c8:cd:1f:69:
a7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:80:37:B6:85:E1:03:78:4A:36:DC:64:11:D3:07:C0:7C:20:13:FD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/26D91F4EB55E11F0AB7CE6CDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.250.0/24
Signature Algorithm: sha256WithRSAEncryption
09:5b:cb:d2:31:4c:b7:9a:d3:ce:1c:c3:5b:85:9d:90:75:ab:
7d:a1:19:0e:99:d4:46:82:69:8a:ee:06:ca:ec:82:88:9f:68:
ef:53:ef:0f:c0:c7:f9:63:6a:99:c3:c2:1a:07:b5:7b:4d:12:
d6:f6:19:9c:48:5a:48:8f:59:cc:48:92:1c:9a:dc:f9:19:68:
53:c5:ea:6d:25:d4:dd:f5:55:c2:95:7c:e9:c1:92:6c:52:b7:
7e:41:dd:95:28:e0:81:33:c1:4a:e9:d2:05:cb:79:72:32:7d:
97:44:55:0a:1f:9a:35:27:6c:e6:55:77:95:7c:23:28:14:98:
3a:f2:f0:d7:03:e1:c7:0c:21:19:9d:c4:c4:da:29:c5:4e:94:
9e:86:bd:43:6b:a6:c9:ac:76:3d:f2:f8:83:2d:89:36:3e:7a:
a9:27:04:bd:d6:ca:06:08:24:3e:a7:83:cb:35:3e:2c:a6:9b:
42:51:e9:1e:04:a7:b2:37:86:c0:07:06:48:ed:2f:f8:a8:c1:
ba:7a:76:d1:52:24:70:78:94:db:16:20:12:33:4b:8d:a3:b6:
0b:b2:68:47:31:4b:ca:a2:7d:3d:84:38:9c:e6:c8:89:d0:b3:
07:c7:0f:b3:83:ac:2a:82:4b:bc:21:62:28:07:03:d7:b6:97:
0a:96:82:05
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAYP7MA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjUxMDMwMDcwMDMzWhcNMjUxMjA1MDcwMDMzWjAYMRYw
FAYDVQQDEw02OTAzMGQxYi1iMTkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA2edoQQGkIgb6etZQrVe4cvw+JZE/gfmR3ujBdPX4E5XGh4JPhb86UaO8
mjbSv9CW5XTK/pmlr0Ns9oZbotjBoodeMug6yXieizOgErajCwRXncT+EH39USch
PdWigQ/EhDK2hmuEfBgTprGZWeX6tQfT1vuBKnfF+haWQS99SFD6LMZ+OvvuDtoQ
ea9wee02CepfaIFM9BSp5lOtwYMZLCQyNCNBU/3hy/DOnQKDQSHHBmAIMKSPS7sf
4JF+x67/A2ftt3+kzNDvG7yrSmhu82a/MS/mZ+wmuML8nZWYoAxSSp2e49p0Pso1
ZWOpSPVOmsg6vFQFB3QvqsjNH2mnZQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFCaA
N7aF4QN4SjbcZBHTB8B8IBP9MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yNkQ5MUY0RUI1NUUxMUYwQUI3Q0U2Q0REQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcD6MA0GCSqGSIb3DQEBCwUA
A4IBAQAJW8vSMUy3mtPOHMNbhZ2Qdat9oRkOmdRGgmmK7gbK7IKIn2jvU+8PwMf5
Y2qZw8IaB7V7TRLW9hmcSFpIj1nMSJIcmtz5GWhTxeptJdTd9VXClXzpwZJsUrd+
Qd2VKOCBM8FK6dIFy3lyMn2XRFUKH5o1J2zmVXeVfCMoFJg68vDXA+HHDCEZncTE
2inFTpSehr1Da6bJrHY98viDLYk2PnqpJwS91soGCCQ+p4PLNT4spptCUekeBKey
N4bABwZI7S/4qMG6enbRUiRweJTbFiASM0uNo7YLsmhHMUvKon09hDic5siJ0LMH
xw+zg6wqgku8IWIoBwPXtpcKloIF
-----END CERTIFICATE-----
Generated at Wed Nov 5 10:11:36 2025 by rpki-client