Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7DED08A6131211F185A874C3DAE4EC9C.roa
File: 7DED08A6131211F185A874C3DAE4EC9C.roa (raw, json)
Hash identifier: yDhmVDU+n1fypiW82nxmvD5yLG9qibnHr3d07exqoa0=
Subject key identifier: 33:3E:EF:2F:F6:59:BB:3F:A9:91:7A:4F:05:4E:59:43:13:65:B2:20
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A0BF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7DED08A6131211F185A874C3DAE4EC9C.roa
Signing time: Thu 26 Feb 2026 12:55:57 +0000
ROA not before: Thu 26 Feb 2026 12:55:52 +0000
ROA not after: Thu 09 Apr 2026 12:55:52 +0000
asID: 395793
IP address blocks: 45.201.16.0/24 maxlen: 24
45.201.17.0/24 maxlen: 24
45.201.18.0/24 maxlen: 24
45.201.19.0/24 maxlen: 24
45.201.20.0/24 maxlen: 24
45.201.28.0/24 maxlen: 24
45.201.29.0/24 maxlen: 24
45.201.30.0/24 maxlen: 24
45.201.31.0/24 maxlen: 24
45.201.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106687 (0x1a0bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 26 12:55:52 2026 GMT
Not After : Apr 9 12:55:52 2026 GMT
Subject: CN=69a042dd-3ce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:82:2c:95:7d:1f:57:1d:5c:02:1a:47:74:79:
b7:2a:2a:b9:e4:07:71:ee:4f:59:07:28:34:4a:57:
d1:11:69:22:6d:5f:e8:b4:6f:ba:8f:14:56:2a:04:
83:d7:6e:57:1a:89:ce:a8:3d:27:be:9c:91:2b:ab:
5c:ca:b1:d8:d2:9c:bd:ec:8d:22:96:cb:d1:2e:aa:
a9:96:10:74:01:bb:ca:5d:ce:1d:f8:3c:43:8a:4f:
52:c9:5b:d0:a0:81:4c:68:0b:d2:73:7e:0d:1d:58:
63:bb:eb:61:2a:6e:fb:48:26:fa:56:9e:13:6e:1e:
fb:4a:73:e1:a1:10:cd:70:a5:0a:f3:26:f5:57:3a:
e6:9c:2c:12:33:d5:1c:4e:86:c6:18:f7:e7:f2:98:
79:fd:05:5d:d7:8c:32:f6:d8:43:92:ed:0d:51:bf:
66:3c:d9:9e:e0:75:7b:2c:d4:71:64:5e:a9:a0:d7:
30:bf:d1:f7:e6:25:b6:63:b6:73:6f:49:90:60:b6:
1a:da:ab:df:fe:ec:88:6d:84:26:f6:13:5d:be:7b:
8a:75:f9:4f:c3:f8:79:b1:a2:d8:9b:0e:71:3e:8e:
95:ac:35:3a:36:6e:5b:42:86:58:7b:2b:70:03:67:
bc:d3:ac:ba:88:56:3a:6b:af:4c:e7:6b:69:41:9d:
3f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:3E:EF:2F:F6:59:BB:3F:A9:91:7A:4F:05:4E:59:43:13:65:B2:20
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7DED08A6131211F185A874C3DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.16.0-45.201.20.255
45.201.28.0-45.201.32.255
Signature Algorithm: sha256WithRSAEncryption
49:98:ab:1c:d2:96:1e:79:7e:4d:7b:97:e7:b1:fe:af:3c:15:
58:bd:9e:3d:a2:86:20:b5:99:98:46:05:85:e8:38:60:1c:91:
0b:af:02:62:7c:ba:aa:4e:eb:62:b3:eb:89:6a:0c:dc:dc:ab:
11:09:4a:28:da:dd:b9:1e:82:57:77:90:f5:5e:95:43:df:4f:
6b:b2:ab:26:62:ac:c9:c7:26:a7:b6:dc:93:60:85:ce:7d:00:
21:1c:c5:fe:bc:0a:1b:4b:6f:4c:28:29:d0:ce:ab:e3:07:48:
97:46:ca:11:cc:d0:39:66:34:cb:2a:ff:30:61:2b:eb:11:ec:
96:0c:4c:8d:e7:f9:07:c9:67:9e:7c:3e:3d:aa:e0:6f:b0:e1:
f7:72:f5:d0:15:4f:a2:9e:86:cf:ed:97:25:8f:18:66:9c:cb:
fe:c1:78:28:65:92:9f:6b:05:86:76:db:0d:c1:b9:bf:eb:1b:
81:23:eb:21:52:1a:3a:13:16:5c:24:aa:a6:76:7e:2c:20:e4:
ac:a2:87:58:14:16:2e:7f:fd:fb:70:67:ae:3c:83:ee:50:bc:
86:fc:85:56:f6:dd:2e:2f:b1:e2:18:7c:03:46:f5:f9:ee:42:
e4:e1:3e:89:96:89:5e:84:3a:c4:bf:f3:c2:b6:11:f4:e5:1b:
3d:84:16:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:27:00 2026 by rpki-client