Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/76FEC8760B0711F195FB19DDDAE4EC9C.roa
File: 76FEC8760B0711F195FB19DDDAE4EC9C.roa (raw, json)
Hash identifier: WcUF6MufxmxFzD52IvcEpRv4H0WskDoZJDgzT2cW4QE=
Subject key identifier: 23:F0:E8:91:4B:44:82:8C:13:BF:A1:25:1D:78:D3:08:F9:BA:2B:B5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019E0C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/76FEC8760B0711F195FB19DDDAE4EC9C.roa
Signing time: Mon 16 Feb 2026 07:16:53 +0000
ROA not before: Mon 16 Feb 2026 07:16:44 +0000
ROA not after: Mon 09 Mar 2026 07:16:44 +0000
asID: 200373
IP address blocks: 45.206.72.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105996 (0x19e0c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 16 07:16:44 2026 GMT
Not After : Mar 9 07:16:44 2026 GMT
Subject: CN=6992c465-351a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7a:df:3e:03:68:a4:89:d3:c1:f8:88:25:5e:
8a:c5:2c:c7:dd:e5:54:f5:0c:6a:8c:8a:b6:04:1e:
dd:6c:c7:8d:22:d1:ec:3c:ae:cc:38:19:b1:a2:f2:
db:f8:24:2e:2b:e5:cd:21:05:cc:8f:af:c4:bd:5f:
a2:43:b2:75:de:2b:81:89:d6:28:ed:e3:91:b5:9a:
42:fa:69:17:e5:05:71:d3:66:db:ac:f7:b1:5a:f7:
44:8d:f4:68:2e:39:a3:58:1a:33:a3:ee:39:7d:48:
d4:2d:fa:16:76:61:28:77:2a:be:aa:44:cf:31:89:
0e:6d:6c:f8:72:61:fb:de:c8:24:e2:35:15:30:cf:
5d:2f:0e:be:d0:ec:1e:13:6a:81:3b:e1:6e:5c:24:
f3:ac:97:5e:50:76:b7:1b:2f:86:93:d8:83:2e:0d:
c1:eb:44:32:6a:54:a3:c1:c3:f9:3a:2b:e4:8c:20:
ce:5a:75:5f:e0:ff:44:9d:58:40:03:01:44:ac:de:
71:a8:d2:16:12:35:55:30:8a:88:d8:5a:63:31:52:
20:f6:c4:c6:88:6d:ee:b5:03:e3:fc:2e:e2:f6:1b:
b7:88:ce:bb:38:f5:0e:71:9e:ff:5f:a9:1b:e4:12:
e8:5a:3d:ef:b7:fa:79:71:20:92:29:16:58:8f:ab:
59:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:F0:E8:91:4B:44:82:8C:13:BF:A1:25:1D:78:D3:08:F9:BA:2B:B5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/76FEC8760B0711F195FB19DDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.72.0/23
Signature Algorithm: sha256WithRSAEncryption
49:bb:20:5e:33:45:03:d7:24:ff:80:f6:7a:d1:d4:cc:d5:f6:
35:92:61:6e:10:91:ea:2f:f0:3a:7b:e4:3d:a4:7c:7f:c2:bc:
44:17:8e:35:25:42:38:6f:dd:fc:c2:c4:98:ea:14:ee:8b:2d:
93:3e:ff:e5:1b:87:37:f6:b2:81:7d:d7:ca:ca:71:e6:a0:81:
db:9e:68:68:1d:e4:24:82:ec:90:af:5c:06:0f:57:60:0e:73:
71:d6:57:71:43:89:6a:79:a4:23:ba:7e:1f:5e:08:c4:55:20:
09:5b:eb:f1:ec:21:e1:8f:43:8f:f2:e2:5e:45:5a:bc:33:9e:
98:73:71:c9:c3:22:d8:66:35:42:2e:66:b8:e6:a7:fe:11:13:
93:46:bf:27:8a:76:d1:c8:ba:03:0b:89:0f:11:23:28:0e:41:
d1:f5:9f:71:9d:a8:2a:9a:94:b2:47:38:0a:ef:36:b4:f9:97:
53:ce:30:d2:4e:1a:30:f5:14:44:a2:19:00:1b:f5:0f:ae:d1:
5c:8b:19:9d:e9:bb:06:3b:21:38:33:fd:1a:f7:13:03:b8:35:
7d:8b:42:0d:2c:3b:47:3a:89:47:7c:90:3f:3a:e0:21:75:68:
6f:b4:04:0f:df:e9:70:e1:9d:2d:da:85:c3:11:77:fd:3b:7c:
75:a1:6b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:18:03 2026 by rpki-client