Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6AF3349A0E3611F19D10E8F5DAE4EC9C.roa
File: 6AF3349A0E3611F19D10E8F5DAE4EC9C.roa (raw, json)
Hash identifier: K0RSa/s+MGj/zyxv484KXFiYKfm66Ht31dM/hGICbo8=
Subject key identifier: 7A:55:DB:02:69:93:6C:E8:17:FB:64:36:55:DC:06:95:9D:C9:04:1C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019ED6
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6AF3349A0E3611F19D10E8F5DAE4EC9C.roa
Signing time: Fri 20 Feb 2026 08:30:31 +0000
ROA not before: Fri 20 Feb 2026 08:30:27 +0000
ROA not after: Thu 19 Mar 2026 08:30:27 +0000
asID: 11404
IP address blocks: 45.206.128.0/18 maxlen: 24
45.206.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106198 (0x19ed6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 20 08:30:27 2026 GMT
Not After : Mar 19 08:30:27 2026 GMT
Subject: CN=69981ba7-41f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e9:89:a4:e4:e4:32:81:e8:f1:65:ca:b2:30:
21:6e:c0:48:39:61:a4:96:db:21:c5:18:3a:53:d8:
0a:1f:fe:22:84:37:d9:1a:b7:8e:e4:57:70:e7:26:
f7:0f:ce:8c:f9:1f:d6:8e:7c:52:3a:9e:d4:b2:49:
e6:14:1b:4d:fa:3f:4d:2d:4d:00:70:a8:9e:a8:0d:
18:9f:63:59:ab:f8:21:e2:ae:a3:ce:5c:c2:39:41:
74:92:f3:e1:e8:64:84:ff:48:47:a9:8f:ef:98:2a:
36:ca:ea:53:25:d3:09:00:37:d6:43:e2:e4:9f:97:
3e:a5:24:b7:3e:0b:36:f9:fb:1c:c8:ad:61:6b:eb:
43:72:7b:37:15:24:2f:6c:87:ea:2f:4e:4c:22:79:
d2:38:85:08:31:cf:fe:d6:31:1a:05:43:e7:2b:30:
db:89:ae:24:13:83:6b:54:54:1f:50:39:a4:df:32:
23:50:4c:b8:bf:e3:ce:47:67:82:f6:73:35:2c:a2:
9f:ab:6e:4b:3a:a0:b0:3f:fd:26:26:8b:00:50:ce:
2d:df:e6:8a:e6:88:f5:d1:3b:38:b2:23:41:d7:cc:
5c:c8:cd:24:7e:4a:0e:d0:9e:a4:29:4b:ad:ff:83:
73:3a:0c:d0:34:0a:a6:c6:4d:08:ce:a0:36:28:0e:
74:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:55:DB:02:69:93:6C:E8:17:FB:64:36:55:DC:06:95:9D:C9:04:1C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6AF3349A0E3611F19D10E8F5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.128.0/17
Signature Algorithm: sha256WithRSAEncryption
94:97:87:2e:d9:0f:9b:e8:c1:67:6d:80:d6:74:3d:d0:0d:dc:
0c:56:eb:1e:23:b4:d9:97:13:c6:76:fa:94:66:fd:a6:34:e4:
87:09:71:94:af:48:cf:d9:9f:2e:9f:84:0e:16:e5:61:4e:25:
15:99:d3:fb:73:f0:a1:2a:9f:50:24:47:2d:00:6c:14:32:32:
11:72:de:3f:81:f4:23:a1:89:07:58:21:2c:99:34:71:02:80:
2e:7d:98:32:fd:1a:d2:ce:e5:8e:d7:a7:28:ae:5b:b6:ba:3a:
00:8a:17:d7:08:ef:c3:a5:7c:72:61:dd:a5:49:69:5d:2e:0e:
18:54:03:20:c8:4a:91:eb:a1:50:c9:9a:56:51:dc:9c:f0:9f:
bd:a1:48:b5:ec:e8:63:74:b4:fa:c5:65:d9:61:76:db:db:81:
01:c3:89:1c:e9:2e:c9:49:9f:ff:7a:6e:6b:e1:3a:45:62:a6:
df:07:98:eb:bb:4d:7e:ef:ba:b6:5f:b4:28:49:bb:5c:35:5a:
85:fe:9f:6e:76:63:02:60:21:a1:1a:b2:2d:aa:ad:4f:dd:06:
d2:0a:dc:90:fa:05:80:66:4b:1f:31:d2:3a:2f:c6:e8:c3:82:
dc:fa:f3:dd:b3:f1:2c:2a:bb:d7:4b:ac:10:a6:63:8b:b0:9e:
5d:d8:53:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:08:36 2026 by rpki-client