Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4D966BAA0F2211F1AD628C99DAE4EC9C.roa
File: 4D966BAA0F2211F1AD628C99DAE4EC9C.roa (raw, json)
Hash identifier: UZmLAAopNVu7CswDU9E1gFa9szA+Tdmq+pMtouuAhyQ=
Subject key identifier: 5C:57:B9:EE:20:1A:B3:57:07:E4:3C:B9:C6:93:FC:08:40:DC:64:D4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019F7F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4D966BAA0F2211F1AD628C99DAE4EC9C.roa
Signing time: Sat 21 Feb 2026 12:39:03 +0000
ROA not before: Sat 21 Feb 2026 12:38:59 +0000
ROA not after: Sat 28 Mar 2026 12:38:59 +0000
asID: 44559
IP address blocks: 45.199.207.0/24 maxlen: 24
45.199.208.0/24 maxlen: 24
45.199.231.0/24 maxlen: 24
45.199.232.0/24 maxlen: 24
45.199.233.0/24 maxlen: 24
45.199.234.0/24 maxlen: 24
45.199.235.0/24 maxlen: 24
45.199.236.0/24 maxlen: 24
45.199.237.0/24 maxlen: 24
45.199.238.0/24 maxlen: 24
45.199.239.0/24 maxlen: 24
45.199.240.0/24 maxlen: 24
45.199.246.0/24 maxlen: 24
45.199.247.0/24 maxlen: 24
45.199.248.0/24 maxlen: 24
45.199.251.0/24 maxlen: 24
45.199.253.0/24 maxlen: 24
45.199.254.0/24 maxlen: 24
45.200.179.0/24 maxlen: 24
45.200.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106367 (0x19f7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 21 12:38:59 2026 GMT
Not After : Mar 28 12:38:59 2026 GMT
Subject: CN=6999a767-a3d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b2:34:a8:d6:d3:9e:99:90:82:6a:32:71:f8:
74:c3:8b:83:5d:0e:ce:15:08:6e:5a:11:08:0f:dd:
1a:ee:f2:75:21:5f:90:8e:1d:15:0b:25:65:55:fe:
9c:c6:e7:88:06:70:3f:be:71:41:d7:b0:40:9c:25:
18:34:06:84:c3:d5:b1:59:8a:ac:48:e8:db:9d:7f:
a1:d9:c2:29:4b:8b:8c:ba:b4:15:4b:95:e6:d9:a0:
03:43:b4:e0:45:21:a3:f1:38:7c:d9:4e:9c:c9:a9:
ff:27:9a:df:b3:eb:07:da:77:ad:b2:c4:20:d9:36:
56:98:4e:85:e6:8f:3f:58:c8:cd:32:73:40:f8:50:
c9:a1:aa:80:a1:5b:2e:fa:95:d2:aa:3a:a1:af:be:
e7:8a:d0:1c:5a:1d:6a:80:59:86:a4:17:b5:7d:a0:
8b:21:b7:f9:84:35:e3:39:2d:9f:04:9d:80:9a:c9:
5f:14:e6:89:4d:56:91:cf:87:4f:6a:82:a5:e6:86:
86:a7:f7:63:51:43:dd:5a:b8:ec:08:ea:b7:89:86:
4a:46:fd:e8:6d:27:33:e4:cf:63:29:15:70:52:94:
66:a5:a1:e3:d5:72:72:fa:81:87:ac:ac:61:d0:87:
5a:cd:ae:22:d5:7b:e2:ee:f3:db:47:82:d0:71:5f:
88:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:57:B9:EE:20:1A:B3:57:07:E4:3C:B9:C6:93:FC:08:40:DC:64:D4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4D966BAA0F2211F1AD628C99DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.207.0-45.199.208.255
45.199.231.0-45.199.240.255
45.199.246.0-45.199.248.255
45.199.251.0/24
45.199.253.0-45.199.254.255
45.200.179.0-45.200.180.255
Signature Algorithm: sha256WithRSAEncryption
4f:08:44:a9:0f:ff:fb:0e:50:26:e1:a0:57:5a:c9:c1:21:ac:
86:6c:38:9c:7f:e7:ee:dc:8a:e5:d2:c6:1f:9a:95:fa:ea:d2:
57:6e:c0:ec:62:05:6c:ac:72:d8:3e:95:20:14:83:7d:82:6d:
60:ce:11:40:07:92:4b:79:54:9c:2a:a9:e0:10:45:0a:40:90:
ce:7a:20:d1:10:0d:21:dc:e5:4a:ec:86:41:29:db:48:1d:ce:
5b:b6:e0:58:40:10:25:38:68:2e:3f:ae:ad:77:5d:ad:aa:ec:
9e:d3:3d:5d:0e:98:d0:db:93:17:77:59:4d:97:6e:25:bf:27:
7b:6a:62:7e:11:f8:e9:f0:93:1d:cb:3b:9d:6d:17:c9:f3:75:
2e:80:d5:85:40:67:a4:6b:cf:ea:98:29:15:b4:ea:b7:bb:6d:
c5:57:95:86:6d:84:ff:6b:2e:b0:04:16:f5:c5:be:f1:e4:51:
82:58:91:d9:39:5f:c2:88:63:d1:18:10:3e:df:33:72:7b:10:
b2:b2:ab:5f:22:2a:dc:f6:66:69:9d:8b:f3:5c:d5:3e:cc:19:
bd:de:45:70:fd:e6:25:06:e6:12:a3:5e:07:96:81:56:d8:ff:
28:74:99:5a:48:e7:39:8f:89:4e:a8:05:47:5d:1a:e9:8d:15:
6b:cd:46:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:02:32 2026 by rpki-client