Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5428FE3E118D11F194C24AEEDAE4EC9C.roa
File: 5428FE3E118D11F194C24AEEDAE4EC9C.roa (raw, json)
Hash identifier: WPfkDkdTN5S/MdNGh9jREnxN7y7jQ7H1/7Vi35wKWSk=
Subject key identifier: 16:1C:CE:8F:DC:E0:A1:46:BC:BA:06:F5:FB:75:33:9A:27:64:05:25
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A031
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5428FE3E118D11F194C24AEEDAE4EC9C.roa
Signing time: Tue 24 Feb 2026 14:30:12 +0000
ROA not before: Tue 24 Feb 2026 14:30:08 +0000
ROA not after: Thu 26 Mar 2026 14:30:08 +0000
asID: 7029
IP address blocks: 45.194.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106545 (0x1a031)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 24 14:30:08 2026 GMT
Not After : Mar 26 14:30:08 2026 GMT
Subject: CN=699db5f4-6edc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4e:04:3c:48:b8:27:18:3d:77:a7:c7:89:3a:
f6:1f:6e:e1:c6:87:36:27:1f:1e:18:90:f6:85:d8:
3f:93:47:90:2f:ff:37:a2:33:42:2f:28:cf:55:ca:
08:1f:47:56:55:0b:0c:91:cf:23:21:02:15:b3:be:
c2:84:78:14:25:22:bc:03:e4:e3:57:b1:0b:ef:b8:
1f:90:c5:42:3c:c6:36:dc:8d:af:25:f0:f0:61:2c:
d5:91:ac:c1:4c:a3:5e:b8:a2:66:b5:e5:3e:99:06:
82:43:c7:00:ff:35:48:4b:be:6a:8b:64:95:5e:9e:
6f:c3:80:f6:0d:c8:b6:56:20:7b:dc:cf:0f:a8:9b:
1c:83:f8:c8:cc:c5:31:39:57:10:78:76:ba:25:ff:
5e:10:80:66:f8:b0:e9:8e:c1:8a:68:ae:49:0b:38:
49:a7:5a:b0:c3:5b:af:f8:8b:1f:7f:fe:92:25:08:
0e:26:15:b4:4a:ac:12:59:b3:0f:93:bd:38:d0:4d:
49:5b:57:68:52:94:6b:e4:c0:45:51:1c:dc:77:c9:
04:65:c4:8d:a5:74:89:78:07:b5:3b:0e:d7:07:0d:
45:bc:f9:85:b4:80:95:fa:f1:fb:28:f5:af:d5:9d:
52:27:37:b4:1b:34:26:30:be:1e:78:19:3a:b3:47:
90:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:1C:CE:8F:DC:E0:A1:46:BC:BA:06:F5:FB:75:33:9A:27:64:05:25
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5428FE3E118D11F194C24AEEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.40.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:fc:e9:78:7f:b0:95:93:c5:b3:66:3a:36:69:a8:7c:d3:a7:
21:b0:56:25:c0:63:a8:41:cf:db:c7:2b:cc:e3:c0:3b:41:ca:
50:c7:4f:0f:86:f1:67:8c:78:fe:4a:77:27:32:f7:7d:62:fc:
b8:fa:b0:a3:da:de:73:3d:05:b6:90:c0:0b:d8:84:38:42:66:
06:36:c9:47:02:3f:0f:bd:4d:c4:17:2d:e5:9d:9b:0a:b4:3a:
20:d0:c9:af:ae:a6:db:f2:31:20:dc:7b:85:e4:f6:57:52:3d:
aa:bc:a3:94:ab:c2:74:12:ed:3a:37:15:c2:a6:df:7f:2f:61:
6b:10:5d:37:00:0a:78:d7:0c:66:82:a3:ad:41:81:82:11:c3:
8a:92:ff:f0:2c:f8:38:a7:ef:dd:72:6c:11:41:9f:b8:04:dd:
67:72:ae:25:a3:73:6f:d3:38:df:25:68:f7:91:de:c4:22:90:
fd:c6:76:66:6c:32:d3:e3:2f:70:6d:5f:cb:10:d9:72:f6:86:
c8:c6:7c:db:74:ef:1d:6f:c9:ca:c7:00:a3:8e:ae:ce:40:9e:
76:94:aa:4d:17:ef:38:eb:c7:02:65:bc:cc:84:8e:56:66:f0:
db:5d:dd:fa:3f:d2:c9:b4:50:bd:f0:4a:45:90:53:97:62:ca:
67:c3:60:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:45:41 2026 by rpki-client