Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/318E853430CC11F1BB1C448BDAE4EC9C.roa
File: 318E853430CC11F1BB1C448BDAE4EC9C.roa (raw, json)
Hash identifier: 7/Py9Yv36hop8f7bFBrbCIklcO9AvZsMUbceJbHb39k=
Subject key identifier: FE:AF:E0:82:B7:89:04:67:6D:F0:5A:EA:B4:6A:56:DE:FA:6C:95:A9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AA0D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/318E853430CC11F1BB1C448BDAE4EC9C.roa
Signing time: Sun 05 Apr 2026 08:48:19 +0000
ROA not before: Sun 05 Apr 2026 08:48:14 +0000
ROA not after: Tue 28 Apr 2026 08:48:14 +0000
asID: 202662
IP address blocks: 45.207.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109069 (0x1aa0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 5 08:48:14 2026 GMT
Not After : Apr 28 08:48:14 2026 GMT
Subject: CN=69d221d3-83d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ab:3d:3a:fe:93:87:c2:c7:da:b4:b7:f9:8a:
d6:ba:fa:26:36:88:b9:78:e3:6f:40:2a:5b:cd:09:
b6:ce:64:aa:37:9f:f6:07:01:1d:ae:d1:b7:73:37:
96:d0:1f:fe:80:c8:52:5a:5b:2f:bb:9c:b3:33:9b:
9a:0d:5d:c4:05:22:62:b1:ad:6f:7e:f6:cf:33:73:
5c:76:1a:18:f6:69:13:dc:4c:0a:b0:3b:e5:01:05:
9f:5f:ef:d3:13:d1:8c:08:56:6e:66:68:c2:b3:12:
05:9a:6e:be:f2:4c:b2:8c:e5:7c:80:8e:15:f2:ec:
18:fa:26:ab:10:76:7d:7f:08:24:1a:d5:07:b1:9c:
ad:10:2b:61:7a:c7:3b:1d:a8:4f:d8:27:55:db:83:
87:55:cd:89:b5:d4:dc:31:b3:72:a6:38:34:e4:c1:
77:1f:f4:16:06:ed:ba:b2:c5:c7:fb:24:ba:f7:8d:
ec:d1:2a:c6:de:e6:f9:6c:37:d4:25:b9:41:74:cd:
90:20:52:fa:c0:05:34:01:c6:4d:b4:39:1f:c5:70:
38:f5:70:8a:a3:84:5f:41:4b:ef:b0:f9:db:e7:62:
9b:ca:cc:48:ba:52:02:d1:68:72:2b:39:95:e5:86:
68:ab:16:cb:d8:56:c9:d3:0a:34:4c:bd:3e:c5:8d:
a4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:AF:E0:82:B7:89:04:67:6D:F0:5A:EA:B4:6A:56:DE:FA:6C:95:A9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/318E853430CC11F1BB1C448BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.40.0/24
Signature Algorithm: sha256WithRSAEncryption
01:56:ff:4a:1f:3e:99:a4:a2:ac:c2:04:8c:69:dd:37:60:72:
3d:ec:e5:b7:78:4e:93:0a:dc:68:e3:ed:72:01:17:d3:78:49:
3b:66:d2:6e:96:ab:e5:27:c8:6d:b6:b8:8f:f4:c2:71:ed:a5:
a7:20:3d:f0:e2:8f:21:e7:0a:54:00:06:d9:1f:00:a4:15:c8:
c9:6f:52:82:6d:65:b7:e5:8e:e8:25:3c:56:76:b7:90:fd:21:
5d:92:fe:ee:92:8a:a0:90:43:86:19:b9:6d:16:70:33:2a:6c:
bb:fa:ad:6b:09:b3:ba:15:a3:6e:5a:53:d5:0c:b4:b1:5a:35:
91:42:f0:4a:cc:74:28:49:42:12:b6:5b:f0:c4:c5:86:af:32:
83:91:f8:30:f2:7a:ef:54:c5:43:bb:b9:0e:31:41:e2:5c:62:
bd:a5:b3:5d:55:d7:47:62:ad:5a:d2:44:46:41:bf:50:85:3a:
ae:41:66:7b:d8:50:09:d4:f5:ba:73:75:cb:fc:e5:d8:f4:59:
d2:96:d1:c2:13:eb:27:ed:b1:9b:99:4e:33:a5:64:c4:a8:0d:
e6:1a:c9:9b:67:be:99:0e:ae:25:6e:f5:05:8d:c1:71:ff:6c:
68:78:8f:d1:4c:68:f5:02:4b:86:92:e6:06:72:89:95:15:86:
72:dd:4a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:21:32 2026 by rpki-client