Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/373B8422118D11F18B303BECDAE4EC9C.roa
File: 373B8422118D11F18B303BECDAE4EC9C.roa (raw, json)
Hash identifier: dBBthUoDovAS4FEGdufyLLvGWKU0Laniy9jUEcRlQgA=
Subject key identifier: BF:1D:B5:3B:CE:DA:82:60:DC:40:7F:08:68:EB:9B:C2:8C:41:8A:5E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A02F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/373B8422118D11F18B303BECDAE4EC9C.roa
Signing time: Tue 24 Feb 2026 14:29:24 +0000
ROA not before: Tue 24 Feb 2026 14:29:19 +0000
ROA not after: Tue 31 Mar 2026 14:29:19 +0000
asID: 44559
IP address blocks: 45.196.140.0/24 maxlen: 24
45.196.141.0/24 maxlen: 24
45.196.142.0/24 maxlen: 24
45.196.143.0/24 maxlen: 24
45.196.152.0/24 maxlen: 24
45.196.198.0/24 maxlen: 24
45.196.199.0/24 maxlen: 24
45.202.119.0/24 maxlen: 24
45.202.125.0/24 maxlen: 24
45.202.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106543 (0x1a02f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 24 14:29:19 2026 GMT
Not After : Mar 31 14:29:19 2026 GMT
Subject: CN=699db5c4-e48d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:48:56:c7:71:e8:88:e2:0c:fe:d1:db:9a:bb:
97:c5:e5:b1:56:cf:9c:3e:0f:4d:7f:59:21:15:b2:
75:1f:77:bd:64:cb:93:d2:5a:2a:1e:c8:23:8d:3e:
7d:24:1e:21:c0:7f:ed:b6:6b:8b:f9:4e:ef:db:f3:
9e:6e:69:fb:4c:4c:61:57:84:b4:b4:bf:d6:81:c6:
af:ff:24:a8:30:21:ed:a7:e2:82:15:1f:2e:48:53:
d0:c8:13:bd:07:6a:6c:36:cf:74:47:98:1a:e2:9d:
2a:76:e1:76:6f:3c:14:77:3c:71:6f:03:8d:66:60:
8a:68:94:eb:83:16:5e:2b:00:1b:c0:83:df:34:66:
08:a5:c8:70:c3:b4:fa:6c:30:61:10:e2:28:e8:e6:
0b:4f:43:4a:d0:2e:d0:51:ad:4b:28:47:4c:45:a3:
34:5d:41:8f:e4:b7:c9:68:3d:24:88:bf:d3:bd:4d:
31:f4:69:81:b4:c3:3b:33:f1:a2:c0:6f:97:d3:90:
11:11:a4:35:1e:49:e5:b1:35:e6:f9:d6:60:5f:2a:
cf:44:a6:ef:79:08:e5:5e:0a:b6:8f:69:91:f5:10:
b3:9c:96:55:05:22:b2:5a:ca:61:3e:06:04:99:a4:
2d:7f:6a:5c:e4:af:f0:54:2a:a9:2b:7c:65:94:18:
81:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:1D:B5:3B:CE:DA:82:60:DC:40:7F:08:68:EB:9B:C2:8C:41:8A:5E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/373B8422118D11F18B303BECDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.140.0/22
45.196.152.0/24
45.196.198.0/23
45.202.119.0/24
45.202.125.0/24
45.202.127.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:1d:a6:b4:12:86:04:20:c0:f4:62:a6:75:e3:2c:f4:f6:92:
6b:e0:a7:c1:91:4a:bf:6b:bd:a2:95:a5:29:94:9c:d5:a3:13:
6b:27:21:a7:e5:02:76:10:46:d2:5c:98:05:5b:82:70:b1:49:
cb:11:c6:f8:21:d8:af:0d:79:a0:dd:6f:ef:c3:e0:a4:a1:2b:
59:24:88:b4:6a:a4:79:d4:34:b9:fd:37:4d:c2:f8:3e:9a:ce:
4e:38:57:cf:15:4e:44:90:2f:b1:fb:e6:cc:d3:05:bf:71:b7:
16:36:2a:51:a0:10:49:f2:06:3a:ab:a7:88:15:e4:c3:a1:9d:
b9:68:19:3f:0d:b5:39:e1:66:d1:94:c2:dd:53:dd:8f:6e:95:
9c:56:96:61:34:20:01:ad:2e:ee:7f:aa:79:8b:ab:90:81:d7:
08:85:8b:d0:b3:d2:aa:7d:74:87:72:2e:ce:aa:83:d8:e2:7a:
50:2b:65:67:d4:88:9a:f5:13:98:82:0e:fc:f6:fb:aa:34:db:
5f:c4:54:6d:d0:da:22:1e:2a:9b:d5:49:1e:25:d1:55:3e:b0:
ec:27:52:71:bb:ec:00:30:33:ae:c3:64:c4:54:94:73:d8:aa:
b8:a3:04:53:3c:0b:e5:36:e3:ef:52:b3:d4:fb:c0:ef:05:60:
8b:c9:90:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:27:00 2026 by rpki-client