Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/66DE86DC0EA111F1A270D1F6DAE4EC9C.roa
File: 66DE86DC0EA111F1A270D1F6DAE4EC9C.roa (raw, json)
Hash identifier: fGLwiSzQgAbqziIsGe0ikkBLxC53EF7bN1oVmEp6sZY=
Subject key identifier: EE:6F:96:DE:97:92:B0:95:00:E9:64:41:6A:BF:56:DB:27:10:A3:8A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019F03
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/66DE86DC0EA111F1A270D1F6DAE4EC9C.roa
Signing time: Fri 20 Feb 2026 21:16:20 +0000
ROA not before: Fri 20 Feb 2026 21:16:16 +0000
ROA not after: Thu 26 Mar 2026 21:16:16 +0000
asID: 140869
IP address blocks: 45.203.213.0/24 maxlen: 24
45.203.214.0/24 maxlen: 24
45.203.215.0/24 maxlen: 24
45.203.216.0/24 maxlen: 24
45.203.217.0/24 maxlen: 24
45.203.218.0/24 maxlen: 24
45.203.219.0/24 maxlen: 24
45.203.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106243 (0x19f03)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 20 21:16:16 2026 GMT
Not After : Mar 26 21:16:16 2026 GMT
Subject: CN=6998cf24-813c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:97:46:d8:90:92:88:d5:15:40:38:f3:e5:77:
6f:82:d9:c6:c0:f2:1d:db:4c:d7:23:2a:80:63:1b:
27:4a:9a:3d:81:82:44:bf:6d:9b:6d:0a:db:0c:08:
5e:05:e4:f1:ea:53:26:ea:8b:5d:0b:e3:db:f3:7d:
83:29:44:17:ac:67:08:96:bb:fd:77:f7:45:ce:15:
b4:a5:71:7b:b8:0f:c1:52:16:34:dc:ed:f7:74:21:
ff:ff:83:87:5a:3f:69:41:d8:15:6d:e7:17:9a:61:
9e:a3:36:f6:a8:c8:59:4c:e5:16:aa:ad:44:7d:8e:
c5:c3:24:3c:8d:b7:8c:27:e9:b5:0b:78:0b:fa:e4:
da:02:0f:08:fd:7b:f0:ab:4b:32:2b:8c:57:27:20:
b1:17:e0:b0:0f:fe:a6:3b:ad:00:89:ac:58:0e:72:
2c:93:23:4a:51:9c:e8:aa:ac:9a:f8:ac:15:e2:9b:
28:79:c8:bc:b4:67:35:13:fe:94:99:68:b0:fc:42:
0b:6d:71:11:12:29:d3:82:85:7c:0d:1f:b4:cf:65:
64:4e:12:19:8b:b9:ed:d6:37:4b:ec:b0:c2:7c:b3:
ee:5a:92:dc:8a:a7:85:23:4f:90:fb:2b:28:84:90:
4f:8a:1b:f3:e9:bd:10:83:aa:c8:81:b3:2f:26:10:
2d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:6F:96:DE:97:92:B0:95:00:E9:64:41:6A:BF:56:DB:27:10:A3:8A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/66DE86DC0EA111F1A270D1F6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.213.0-45.203.220.255
Signature Algorithm: sha256WithRSAEncryption
1a:e4:cb:9a:4e:11:fc:e2:0a:c1:94:74:0c:20:95:82:5b:d3:
e6:41:45:41:5b:be:7a:4f:2c:9e:20:db:0c:0d:2c:64:61:54:
72:91:05:1f:46:43:f6:63:cc:ea:a5:dd:88:70:b0:b7:bb:74:
8b:ce:0d:23:8f:d8:00:5e:5e:af:15:f2:2f:bf:a9:31:e8:75:
af:bd:4c:47:32:e9:52:7a:be:ce:b6:80:ee:c6:ec:b6:15:94:
39:58:79:57:48:8a:c2:7c:2b:db:fa:cf:81:4c:b3:9d:73:56:
21:e3:0e:7f:5b:14:39:12:6d:4b:e6:01:d4:34:b7:70:6c:4d:
5e:fc:1e:ea:60:12:d6:9b:87:4b:49:49:ed:8e:36:52:7f:bb:
32:e0:92:3e:d0:2e:ad:7b:40:fe:6d:44:1b:3c:9e:e1:e4:f1:
35:b9:9d:b5:39:36:1a:a8:f9:d6:56:f9:4c:63:c6:06:c1:a9:
54:5e:58:6e:60:7f:6b:07:c0:30:9b:c5:b1:dd:f0:fa:76:5e:
34:b8:0d:5e:31:4f:0a:b0:eb:d4:ab:f1:27:f6:ac:91:7a:b7:
c4:b8:e7:11:64:20:81:27:ec:89:27:6a:fe:82:72:d3:4a:12:
c9:08:96:80:71:97:82:55:d3:5b:de:d0:0b:0f:44:cf:0f:37:
da:4e:1c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:04:16 2026 by rpki-client