Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/326F14F000D911F19F0EC6D0DAE4EC9C.roa
File: 326F14F000D911F19F0EC6D0DAE4EC9C.roa (raw, json)
Hash identifier: VId+7LypWeQ7kRXxhXJXi2rxFLZwHcWQF8ujWLRUTMc=
Subject key identifier: D6:D5:EC:CD:28:4D:16:49:BD:95:89:00:2F:88:33:28:FB:5B:4F:94
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019BA8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/326F14F000D911F19F0EC6D0DAE4EC9C.roa
Signing time: Tue 03 Feb 2026 08:20:28 +0000
ROA not before: Tue 03 Feb 2026 08:20:23 +0000
ROA not after: Mon 09 Mar 2026 08:20:23 +0000
asID: 133180
IP address blocks: 45.192.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105384 (0x19ba8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 3 08:20:23 2026 GMT
Not After : Mar 9 08:20:23 2026 GMT
Subject: CN=6981afcc-babf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c1:8a:3f:28:1c:fa:36:25:12:0b:8c:3e:54:
5a:fa:7e:87:e0:a2:89:c9:b2:29:9f:56:25:d9:1f:
49:ec:38:df:2f:44:72:e9:b6:7c:76:d6:b6:c7:4d:
80:c4:c8:7f:3b:77:46:21:32:e7:cd:c7:82:c9:82:
56:4c:cc:e0:e2:c4:e1:86:76:16:42:05:7a:6a:e2:
de:44:7f:c0:52:c9:cb:09:8b:a5:eb:af:cf:8d:d8:
94:25:f1:e6:07:59:db:52:fa:07:4b:f8:f5:a7:58:
11:91:a7:d3:10:af:7b:69:51:4c:96:eb:3c:8b:c7:
09:4c:76:56:67:3c:fc:77:cb:2c:ce:cb:4c:90:a7:
d8:c8:39:3a:a4:f0:17:0e:4c:1d:c3:32:9f:21:ac:
a7:3a:2b:77:f2:c7:54:1d:57:18:61:58:4a:2a:b1:
61:7a:6d:1e:9e:ca:6e:3b:7b:58:10:ce:e5:aa:e6:
bf:89:2a:f7:8f:4f:e4:8f:7c:53:8c:cf:01:c8:9c:
b9:89:00:5b:a8:d7:02:79:61:b8:e6:65:0a:4e:a2:
7d:b4:46:e6:50:b2:cc:60:68:60:e0:b5:2e:f8:51:
57:95:c3:de:8e:10:66:fc:e2:bd:e7:26:8c:7c:56:
91:94:8d:30:a8:00:54:f1:b0:1f:78:8a:31:bb:15:
a3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:D5:EC:CD:28:4D:16:49:BD:95:89:00:2F:88:33:28:FB:5B:4F:94
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/326F14F000D911F19F0EC6D0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.164.0/24
Signature Algorithm: sha256WithRSAEncryption
33:db:9d:76:da:6a:a3:d4:1f:5e:39:0d:ea:01:cd:bb:a6:e8:
d1:92:77:c9:e9:71:57:ad:55:03:32:90:12:41:24:76:c5:8d:
f6:07:88:da:f9:86:e4:e4:cc:0e:fe:ff:31:66:24:e5:75:c7:
00:14:db:ae:ac:64:17:aa:4d:5e:3f:53:ab:8e:39:00:0b:75:
f1:fc:44:6d:44:aa:eb:ef:66:9c:29:fc:9c:e7:dc:4b:e2:f2:
14:88:7b:3d:61:8f:88:51:6a:d4:63:ae:39:f2:d2:c7:7c:e3:
03:73:49:48:aa:01:a1:ea:34:7b:c0:82:c6:a5:a6:36:5e:3c:
e6:b6:90:f1:27:d6:e2:9b:a9:1d:cf:33:d3:65:c6:61:39:50:
2e:6b:70:ba:4f:64:2f:ca:ae:f0:35:9c:0b:4f:40:05:ac:bb:
82:54:df:83:c5:22:90:de:5b:a9:1e:80:ba:09:12:f0:b6:76:
82:9c:a9:d7:60:de:fa:33:2e:4c:a0:cc:32:66:08:15:1c:79:
82:34:11:f6:d7:cf:c7:d3:45:63:a3:16:c4:8e:0d:e4:5d:79:
22:db:6c:3a:25:55:11:14:ac:18:b6:88:3a:c4:7b:ae:e4:dc:
68:00:e1:28:b6:a7:d3:aa:5e:94:53:4a:2f:d0:91:4c:84:48:
6e:f1:64:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:43:52 2026 by rpki-client