Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6E6245FA097511F19C2CDEB4DAE4EC9C.roa
File: 6E6245FA097511F19C2CDEB4DAE4EC9C.roa (raw, json)
Hash identifier: SG/IC6aWFIpJGNYCM2WwXMIVuI6WnjGZ5xBDAf2fkyw=
Subject key identifier: E1:EC:E9:40:9B:C7:33:1A:EE:D5:77:A5:3D:66:EB:D6:8A:68:B4:61
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019D74
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6E6245FA097511F19C2CDEB4DAE4EC9C.roa
Signing time: Sat 14 Feb 2026 07:19:00 +0000
ROA not before: Sat 14 Feb 2026 07:18:55 +0000
ROA not after: Sun 22 Mar 2026 07:18:55 +0000
asID: 137899
IP address blocks: 45.205.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105844 (0x19d74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 14 07:18:55 2026 GMT
Not After : Mar 22 07:18:55 2026 GMT
Subject: CN=699021e3-cf28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ce:3d:5b:d7:78:f9:50:16:bf:36:e2:1e:3e:
ba:b5:91:96:f3:bb:54:50:d7:57:63:77:56:1b:7b:
46:6c:cc:19:35:e3:c6:98:d0:29:8f:5d:75:a1:d2:
c7:5e:26:eb:8e:b8:cb:41:05:07:27:41:9d:7d:5c:
02:ab:de:8b:58:e0:6b:77:91:c0:46:28:2b:80:59:
36:01:50:a6:59:27:6d:b6:2f:8d:62:60:49:5d:4c:
b5:02:96:6e:fc:d7:a4:8e:1e:cd:e9:b4:5c:00:af:
1b:11:ab:c8:47:8c:e4:9d:61:1c:30:f7:7e:75:fc:
75:cc:e4:52:42:b2:ff:36:7f:38:bd:15:ec:21:fc:
39:a3:71:8d:0f:21:53:cd:ab:3a:8c:8f:2a:85:9a:
10:4d:c2:a1:b9:a6:d8:77:1a:57:0d:00:fb:57:81:
ff:c4:31:c3:fe:67:b0:32:ae:1c:40:50:81:90:71:
b4:70:c4:11:94:24:bb:7b:29:8b:5c:06:60:72:66:
db:03:8c:28:d5:53:ad:e8:5e:39:6b:7c:37:b1:f8:
15:59:c7:b2:51:a1:c7:2a:73:a9:b6:57:ee:6c:b8:
6f:a8:5a:b4:60:f5:9c:cf:93:76:6f:fb:1b:e0:33:
4e:f1:36:ce:c5:b5:b4:26:f3:51:0f:7d:44:a4:23:
78:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:EC:E9:40:9B:C7:33:1A:EE:D5:77:A5:3D:66:EB:D6:8A:68:B4:61
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6E6245FA097511F19C2CDEB4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.16.0/20
Signature Algorithm: sha256WithRSAEncryption
bb:29:47:f1:a1:61:db:13:93:fb:95:2a:2f:9d:28:61:b4:6f:
4d:f0:3b:d7:6f:f7:e7:65:8a:29:47:5a:42:97:df:8b:d0:54:
48:cc:01:c8:4b:19:3d:4c:b2:66:5e:89:7e:da:79:5d:43:80:
63:67:c1:0a:8f:fa:6e:ee:7f:98:f8:fa:4a:4b:6f:72:96:4c:
c8:a7:e3:8c:cc:4c:05:ca:1a:68:01:2c:91:6d:fe:6c:58:5b:
1e:9e:76:08:e0:7a:b3:9b:b2:c9:03:25:bd:eb:17:23:ed:84:
d0:95:7a:ee:5d:2c:1e:9a:c6:df:38:79:a2:5e:61:d1:9f:40:
a7:20:d4:e9:7e:fc:7a:ae:05:14:ff:3f:39:00:53:b1:7a:c7:
03:75:95:18:1a:70:7a:fb:85:4a:2a:e7:b3:61:c2:b1:c4:b8:
3a:0c:74:15:cc:fb:ce:ac:b4:8b:d2:e9:ba:4f:cb:7c:d8:3f:
e5:e0:29:a3:52:e8:c8:c1:6c:1d:70:4d:0f:af:dc:92:82:d4:
3c:89:de:07:bc:3c:1d:d7:51:74:d4:22:fe:81:90:77:78:4c:
b5:c7:22:67:85:48:ce:5e:18:e7:69:26:3f:af:6d:f1:f1:c9:
fc:e8:4f:82:68:60:e5:ae:78:00:6d:73:6c:83:b2:ce:d7:48:
a7:75:ef:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:01:28 2026 by rpki-client