Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2E2EA36C067211F19803F6AEDAE4EC9C.roa
File: 2E2EA36C067211F19803F6AEDAE4EC9C.roa (raw, json)
Hash identifier: uWxCAwyy55brb8r3Km+p2OaeN4B++DjsV3kHkqAaJAs=
Subject key identifier: 3E:D8:65:C4:27:8D:A1:7D:54:D5:A5:8D:20:4D:7B:A4:BC:FE:6D:81
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019CA3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2E2EA36C067211F19803F6AEDAE4EC9C.roa
Signing time: Tue 10 Feb 2026 11:18:10 +0000
ROA not before: Tue 10 Feb 2026 11:18:05 +0000
ROA not after: Mon 18 May 2026 11:18:05 +0000
asID: 402169
IP address blocks: 45.195.112.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105635 (0x19ca3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 10 11:18:05 2026 GMT
Not After : May 18 11:18:05 2026 GMT
Subject: CN=698b13f2-4f27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a0:f9:e9:27:ac:18:29:1b:1e:63:c3:31:6c:
c7:4d:ec:6f:47:1e:4f:66:1a:7b:bf:cf:1c:0f:12:
7c:d1:06:cb:65:dc:4e:28:f7:0f:14:9b:bd:4b:e0:
66:9f:2c:d6:90:02:4b:08:21:97:10:af:e9:62:f4:
4e:5d:56:8b:57:2b:00:42:03:43:b7:3a:c9:30:80:
67:ef:c9:9c:95:3a:e8:8e:10:99:d0:1b:d5:3c:6d:
b2:61:00:12:57:c1:eb:7e:38:5a:ca:b6:48:d3:66:
a2:01:6c:05:86:c9:0c:42:6d:a6:47:e7:1c:02:6a:
50:24:b8:ff:c9:93:51:f0:31:0e:bf:d4:ae:99:25:
18:12:7d:a6:eb:12:5d:b9:13:a5:0f:2c:74:cd:81:
4f:0d:59:bc:ca:0e:1e:47:c9:65:57:1b:ca:7b:26:
9c:87:07:1b:87:a9:d3:fa:79:d5:61:85:06:bb:9a:
89:3d:f2:fd:34:71:8d:85:6a:09:01:b7:f2:54:04:
c8:97:9d:f3:ab:51:2c:c9:c7:ab:25:fc:ca:57:83:
4c:20:b7:b6:5d:e4:7d:10:67:e2:b5:a5:0c:6e:c2:
7c:e6:b4:2c:7d:62:d1:f7:67:12:38:a5:36:e5:89:
39:ff:e3:a9:fa:68:5f:30:3f:52:65:e5:b3:6c:c3:
f7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:D8:65:C4:27:8D:A1:7D:54:D5:A5:8D:20:4D:7B:A4:BC:FE:6D:81
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2E2EA36C067211F19803F6AEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.112.0/21
Signature Algorithm: sha256WithRSAEncryption
1d:7c:11:cb:73:ee:35:ed:2a:37:1a:b1:8d:52:10:7d:9d:ef:
d5:49:3f:f9:a8:93:ec:9a:a9:5b:8e:90:cb:be:03:38:21:5a:
74:a9:46:2f:ad:57:08:db:a7:3a:79:a5:39:7a:ca:ca:4d:36:
a9:b8:b9:78:7a:6f:64:4f:57:6b:b3:c9:dc:a8:f8:c7:35:41:
7f:67:f5:82:2c:fe:7e:df:1a:84:db:94:2f:dc:f2:51:95:b6:
c0:1e:74:38:90:c9:08:23:8f:9a:95:45:30:b1:e9:65:c7:a7:
e5:08:4b:e3:b5:36:72:9e:3d:62:54:f1:de:e6:a3:44:2b:3c:
f5:ac:dc:7c:ae:a4:81:ae:7b:c4:aa:b4:3a:9e:aa:40:ce:a7:
19:b6:b0:6f:0e:0a:57:ee:8c:bb:7e:49:2f:80:8a:c6:cf:da:
fc:87:78:7e:5d:40:6f:7a:9c:be:df:29:44:38:61:60:24:60:
33:f0:a6:92:cb:7a:88:d8:29:57:03:2a:da:81:ac:b1:93:c6:
9f:be:88:56:be:12:20:f2:67:ea:b7:3d:cb:52:36:9f:9b:a1:
e4:c7:62:19:79:a4:d4:1a:05:6e:76:3d:b7:84:c2:49:4c:bf:
81:54:27:a4:d0:14:a1:93:72:22:2a:ac:7b:6a:0b:e6:6e:23:
a1:19:5c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:52:31 2026 by rpki-client