Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3CD24DD6398711F1973D56CACE1D38B0.roa
File: 3CD24DD6398711F1973D56CACE1D38B0.roa (raw, json)
Hash identifier: +kStXnkYJbp2Kr6CZLeItyorQmn7hbjH2XkVR34wi/Q=
Subject key identifier: 02:A5:08:94:38:D9:18:4D:62:C2:29:6D:0E:5F:CA:26:31:D1:A9:C0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AD2B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3CD24DD6398711F1973D56CACE1D38B0.roa
Signing time: Thu 16 Apr 2026 11:27:23 +0000
ROA not before: Thu 16 Apr 2026 11:27:19 +0000
ROA not after: Fri 22 May 2026 11:27:19 +0000
asID: 273986
IP address blocks: 45.194.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109867 (0x1ad2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 16 11:27:19 2026 GMT
Not After : May 22 11:27:19 2026 GMT
Subject: CN=69e0c79b-4511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c4:6a:b3:79:3e:ca:1d:ab:d4:ef:65:52:a5:
cc:90:43:77:63:81:d6:a1:bd:d6:25:1e:b0:eb:0b:
91:07:de:9b:7a:5d:8e:0e:85:f2:c8:87:75:3d:5c:
7f:cb:7a:46:55:23:1e:36:f8:fd:28:40:fd:42:f1:
8b:a2:07:98:32:79:25:a7:d2:cb:d0:51:d7:0c:6d:
3d:98:5e:73:9a:91:6e:18:48:c5:fe:21:a1:a1:53:
c8:46:e4:b9:e2:bd:4a:1d:20:58:26:a7:d0:92:bf:
b4:09:c8:04:0a:09:89:e5:23:fc:e0:91:4d:81:5a:
df:04:77:f7:f2:8f:05:07:ae:6a:2a:75:9c:d8:72:
46:00:94:ea:ec:ff:ad:9f:ca:d9:15:78:f2:41:3a:
2b:57:31:be:27:e5:8e:14:97:83:69:71:94:4b:7e:
6f:5f:9b:e4:a6:ac:82:3a:54:6c:cc:ee:c3:02:3a:
1a:15:80:6b:e0:14:38:67:ce:b7:ae:c5:4c:ba:19:
bb:55:35:53:78:7c:bc:f2:ed:99:48:9f:01:6f:67:
5f:bb:ce:b7:91:a3:3d:bf:7b:b7:c4:8c:33:dc:58:
dc:f0:a8:5d:c2:96:85:57:48:5c:8e:50:51:93:01:
8d:ad:a0:18:55:b1:1d:c0:c4:c0:ba:d2:93:ef:e2:
48:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:A5:08:94:38:D9:18:4D:62:C2:29:6D:0E:5F:CA:26:31:D1:A9:C0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3CD24DD6398711F1973D56CACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.119.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:b4:3a:04:fd:b8:cd:26:64:4f:a0:e4:b8:16:58:33:1b:0c:
27:a3:17:2f:46:dd:20:a0:54:1e:99:fa:76:78:f6:89:4f:2d:
02:07:46:74:00:93:c1:6d:b6:a5:b3:b7:ae:af:25:73:3c:fd:
7b:0d:70:02:4c:38:ba:58:6a:a6:ed:c1:d2:58:4a:91:98:47:
6c:f0:9b:71:f6:33:ba:43:a9:8e:ef:5d:46:15:b9:5c:aa:05:
04:ee:4e:91:e8:54:e6:70:ed:2b:7e:f9:e9:f8:45:89:4b:a8:
e4:96:5f:7c:d5:4f:31:11:b1:d7:03:22:e4:2e:a5:69:d5:4a:
1d:ff:78:dc:84:9a:9d:5d:44:3f:29:88:78:78:f2:1c:54:71:
95:12:68:f2:7f:27:1b:bc:29:82:25:bb:92:10:6b:f8:6c:a4:
8d:2e:7b:2e:ba:48:a1:83:d5:fe:03:af:cc:02:77:dc:50:1c:
18:28:73:a1:4f:07:56:63:84:d7:9b:21:58:ce:c1:90:69:79:
56:52:12:50:a3:9e:05:6c:4f:01:fb:47:1e:93:b0:9b:8f:c5:
4b:c4:64:5f:4e:a5:2e:41:b6:3c:5e:6f:c2:e6:4e:16:c4:53:
19:6e:7e:77:27:48:0e:b2:b8:34:60:00:22:d6:17:b9:c4:8a:
a0:b0:4a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:55:48 2026 by rpki-client