Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4B8F2F20FC2811F09DFB48F5DAE4EC9C.roa
File: 4B8F2F20FC2811F09DFB48F5DAE4EC9C.roa (raw, json)
Hash identifier: o5x58QV7cIakpShcGGvP4adKFl7PuVgrLXAM0Wgt/10=
Subject key identifier: AA:BD:10:0D:1C:CE:B8:8A:FD:3A:7A:A2:FB:E4:B9:D4:66:DE:F7:39
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019A4A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4B8F2F20FC2811F09DFB48F5DAE4EC9C.roa
Signing time: Wed 28 Jan 2026 09:04:05 +0000
ROA not before: Wed 28 Jan 2026 09:03:58 +0000
ROA not after: Mon 02 Mar 2026 09:03:58 +0000
asID: 9304
IP address blocks: 45.198.5.0/24 maxlen: 24
45.201.35.0/24 maxlen: 24
45.201.41.0/24 maxlen: 24
45.201.42.0/24 maxlen: 24
45.201.48.0/24 maxlen: 24
45.201.61.0/24 maxlen: 24
45.204.132.0/24 maxlen: 24
45.204.154.0/24 maxlen: 24
45.204.248.0/24 maxlen: 24
45.204.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 02 Mar 2026 09:03:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105034 (0x19a4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jan 28 09:03:58 2026 GMT
Not After : Mar 2 09:03:58 2026 GMT
Subject: CN=6979d105-32a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:04:be:22:d1:2d:13:4b:55:d1:32:0b:66:18:
a8:28:a1:2e:e1:26:7e:b1:bd:7a:fb:a4:82:1b:cf:
06:42:78:80:3d:bf:7e:05:cb:0a:e1:32:e3:eb:c2:
4d:e2:06:e1:bc:f2:78:10:8c:97:ba:3a:42:b9:45:
14:c9:11:4f:e1:f7:c3:0f:48:1d:ed:7c:0f:0b:1c:
d8:9b:bb:e4:e2:92:f3:83:15:9e:3a:11:13:c1:99:
e4:80:e4:f2:08:82:e3:71:51:c2:0c:1d:f1:0e:31:
b4:6e:d0:7f:61:a3:ec:c7:25:fb:9e:b9:9f:91:b6:
50:87:e6:fb:d8:aa:26:43:d5:e4:1d:6e:06:ed:f5:
ee:65:68:43:03:1a:5f:9a:b2:c4:a8:4d:c0:62:c4:
62:0e:d7:95:8c:08:5f:92:2b:e6:30:2b:89:05:84:
70:f3:6b:51:80:fb:8d:2a:91:69:aa:09:bd:8a:f0:
2c:80:c1:e5:e2:57:9b:3a:56:8b:00:27:ea:32:e8:
67:7c:73:7e:76:3a:bf:b7:95:1b:3a:9b:7e:2d:1b:
1b:2f:68:43:11:99:e1:43:05:a5:50:df:68:42:e9:
d5:b4:e5:5f:60:4b:99:19:f8:cb:c1:4e:88:82:6b:
64:21:73:d5:00:cc:9c:6d:af:29:48:b0:f5:60:03:
fa:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:BD:10:0D:1C:CE:B8:8A:FD:3A:7A:A2:FB:E4:B9:D4:66:DE:F7:39
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4B8F2F20FC2811F09DFB48F5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.5.0/24
45.201.35.0/24
45.201.41.0-45.201.42.255
45.201.48.0/24
45.201.61.0/24
45.204.132.0/24
45.204.154.0/24
45.204.248.0/24
45.204.255.0/24
Signature Algorithm: sha256WithRSAEncryption
33:0f:a8:45:bf:b9:b3:11:62:11:da:ac:59:77:43:34:24:05:
7d:35:40:9c:bb:64:0c:f8:4a:6c:f1:a9:5d:96:e0:69:48:5d:
52:f1:9d:34:80:68:19:f4:c2:10:41:16:bf:37:b7:2f:1a:e1:
c5:36:b0:00:0b:5b:ed:dc:39:b7:34:7d:b3:66:ef:42:ad:d3:
27:23:82:34:d2:27:8b:f8:96:d8:51:06:27:c4:02:d8:37:e1:
2b:38:68:1b:9e:33:63:9f:31:ea:4d:a5:35:d4:e5:83:60:44:
3e:3a:8a:23:93:f3:3e:29:0d:8b:19:bb:ec:14:66:cd:e5:5f:
62:cb:4a:7f:42:c6:12:05:6e:a8:27:76:71:a0:a5:b5:2f:4d:
f8:47:a1:fe:3e:fc:20:ff:ee:91:53:63:fc:4e:51:05:07:ba:
0f:d4:b4:1f:8c:42:4e:f1:f6:3f:4c:1e:00:d7:e9:a9:db:15:
21:fc:dd:a8:fc:3c:bd:5d:ab:88:37:5b:53:4e:e4:7c:6c:7f:
ec:3f:72:4b:13:5e:14:fc:3b:cb:08:da:49:09:86:bd:fa:7a:
6d:94:65:d6:b3:a1:e0:1a:75:32:f0:fe:41:7c:81:0f:0c:35:
e4:7f:74:61:c5:bb:55:cf:02:ac:da:33:4d:9c:ad:9e:03:d2:
00:6c:75:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:10:09 2026 by rpki-client