Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4B9A9B6E131411F181D6FACBDAE4EC9C.roa
File: 4B9A9B6E131411F181D6FACBDAE4EC9C.roa (raw, json)
Hash identifier: 91+dqExR/l2OE4Yj/2ttrJ4jzDNOwIkrSVZFSFVh00o=
Subject key identifier: 89:46:8A:3B:21:0A:9B:D9:95:04:94:03:7F:F1:E7:25:75:7C:BC:28
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A0C3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4B9A9B6E131411F181D6FACBDAE4EC9C.roa
Signing time: Thu 26 Feb 2026 13:08:51 +0000
ROA not before: Thu 26 Feb 2026 13:08:46 +0000
ROA not after: Thu 09 Apr 2026 13:08:46 +0000
asID: 395793
IP address blocks: 45.198.183.0/24 maxlen: 24
45.198.184.0/24 maxlen: 24
45.201.22.0/24 maxlen: 24
45.201.23.0/24 maxlen: 24
45.201.24.0/23 maxlen: 24
45.201.24.0/24 maxlen: 24
45.201.25.0/24 maxlen: 24
45.201.26.0/24 maxlen: 24
45.206.65.0/24 maxlen: 24
45.206.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106691 (0x1a0c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 26 13:08:46 2026 GMT
Not After : Apr 9 13:08:46 2026 GMT
Subject: CN=69a045e3-a418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f4:d9:21:b8:0a:70:d2:3e:44:a7:f4:7e:a2:
23:1b:f8:cd:65:66:e7:26:3b:3c:7d:9a:65:9a:b6:
23:71:f2:cc:ce:10:b5:4c:06:59:ac:ba:12:b9:14:
0e:84:55:a7:7d:27:80:ca:b4:47:bd:df:f7:24:f8:
36:6b:53:a3:c1:0a:25:35:89:f1:de:04:df:98:9c:
d0:35:4b:20:10:d1:37:e2:8b:c3:9c:51:3f:73:11:
76:ce:60:1f:1c:72:2e:48:17:71:02:6d:1f:e3:65:
b1:af:d7:27:42:69:a1:90:97:27:fb:6e:0a:dd:2d:
5b:2c:6a:6f:8a:a5:61:e5:15:66:b8:7d:7a:e4:9b:
3d:0b:89:85:ee:b6:4c:54:11:39:f8:69:84:64:c1:
2e:e6:c7:6a:57:c7:13:ab:ba:57:dd:20:09:f2:12:
a7:84:f2:13:35:ee:ca:89:6b:80:d6:6b:44:7a:40:
7b:5b:3c:4f:52:43:0c:9a:20:b0:e0:b7:44:f1:e7:
e8:83:8c:fc:2a:c5:bf:ee:13:82:f2:55:cf:3d:04:
7e:a6:05:fa:33:91:be:35:5f:ff:97:7f:c3:3c:e5:
b7:72:7b:86:ab:ab:89:0c:39:7c:06:23:d9:24:8a:
22:52:23:d8:77:9a:e7:67:3a:f7:bc:1f:69:f3:7c:
a3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:46:8A:3B:21:0A:9B:D9:95:04:94:03:7F:F1:E7:25:75:7C:BC:28
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4B9A9B6E131411F181D6FACBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.183.0-45.198.184.255
45.201.22.0-45.201.26.255
45.206.65.0-45.206.66.255
Signature Algorithm: sha256WithRSAEncryption
2d:28:6f:bb:df:62:82:89:ad:a5:38:08:6f:7d:9f:a6:05:51:
59:63:8d:b6:22:9b:93:6c:7a:ad:e7:7a:c3:9a:3e:34:92:02:
7f:45:31:98:1b:01:7b:eb:2d:aa:f8:97:09:7f:f7:5c:80:26:
c3:61:1c:76:78:6b:06:dc:01:7b:b9:16:5c:0c:ef:2f:55:cd:
a5:c9:7e:42:17:16:eb:7d:32:92:05:8c:12:00:df:c4:b4:7e:
ee:52:12:43:41:56:54:66:d4:53:83:e1:63:86:13:3a:c8:41:
99:52:4a:e2:f5:4d:df:5e:97:aa:7a:4a:44:a2:de:bd:19:2e:
33:91:41:0e:f7:97:d8:73:13:bc:45:17:0f:3b:f7:ca:4d:46:
89:9c:18:65:d1:7a:6d:a3:11:d7:bb:92:d6:e9:71:35:af:bc:
70:d0:ae:f9:fd:b5:4c:20:d5:c7:3c:63:fc:8f:68:91:eb:70:
5b:e2:86:aa:b9:2c:e0:c7:0b:f5:21:e7:b3:5c:c8:a1:c6:1a:
af:c3:1b:3e:f6:55:67:6f:01:82:79:3d:60:1b:44:69:18:29:
ca:4f:e2:a4:62:66:1e:0e:53:81:4d:d9:49:51:3f:c5:d3:69:
9e:ad:92:c6:74:cd:4a:95:75:84:8a:f2:5a:64:6e:d0:63:60:
be:ae:21:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:52:43 2026 by rpki-client