Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7E6E509E000411F197B857B4DAE4EC9C.roa
File: 7E6E509E000411F197B857B4DAE4EC9C.roa (raw, json)
Hash identifier: GJFmEfDuqKUMp5EYvSt5+ufR2rDSy+FZfv2/d4mOj54=
Subject key identifier: 07:77:C1:24:FB:33:9B:62:DF:DB:C7:01:4B:D2:7D:D9:0A:15:30:98
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019B65
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7E6E509E000411F197B857B4DAE4EC9C.roa
Signing time: Mon 02 Feb 2026 06:57:53 +0000
ROA not before: Mon 02 Feb 2026 06:57:48 +0000
ROA not after: Mon 09 Mar 2026 06:57:48 +0000
asID: 211577
IP address blocks: 45.192.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105317 (0x19b65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 2 06:57:48 2026 GMT
Not After : Mar 9 06:57:48 2026 GMT
Subject: CN=69804af1-6e3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:38:35:b4:bf:ae:85:b9:c0:4f:1f:79:5d:bf:
20:e5:ab:44:c1:3e:a7:a6:0b:d1:95:04:a3:28:88:
31:5d:9c:47:85:70:46:65:6e:5f:85:68:ef:fa:44:
de:eb:5b:69:33:17:27:f1:95:4b:fd:db:93:5b:0e:
34:94:69:12:7f:d7:fd:8a:11:6f:31:5d:b1:af:b6:
f7:80:f2:74:0b:1d:6d:9b:44:1a:9f:12:fe:3e:3c:
ae:54:9c:9f:fd:9d:2f:2d:00:f3:91:9d:2b:8d:11:
70:e6:a6:a1:dd:39:3b:c7:ed:16:89:b2:3d:1e:47:
83:1a:ee:ce:e8:56:69:ee:90:94:eb:7d:4d:45:e3:
d1:c4:a2:c1:a4:b7:6e:55:0f:de:96:67:ff:a0:2d:
d1:cd:42:87:5a:50:74:9f:d8:51:0f:16:95:62:2f:
01:e6:0f:84:52:d8:38:b1:26:98:2c:72:16:8f:76:
86:33:f9:78:dc:ed:ee:9e:f5:7e:55:c3:04:2b:9d:
5c:2c:43:ef:7b:b2:12:09:a8:dc:27:5d:9b:b5:31:
2b:6e:40:7e:ea:a8:81:0a:f3:31:6f:88:82:0a:7d:
22:69:ee:71:6e:09:30:c6:f4:4f:18:40:3b:42:63:
53:12:41:5f:a7:00:ce:6e:8b:cb:75:44:33:bb:2b:
dd:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:77:C1:24:FB:33:9B:62:DF:DB:C7:01:4B:D2:7D:D9:0A:15:30:98
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7E6E509E000411F197B857B4DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.19.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:e6:bf:1e:76:05:95:13:ea:5d:7a:1a:ed:3d:39:b9:8c:fb:
e8:d5:fd:a1:92:4b:86:57:76:37:38:86:e7:2c:7e:6a:7a:a1:
5e:1f:f0:c3:72:90:6c:59:37:7b:da:d9:30:91:86:d3:6f:82:
9c:13:e0:63:39:0c:2a:60:b1:05:fc:0e:4e:18:9b:25:7b:28:
bf:0b:9a:12:a4:49:76:52:2e:7d:d9:15:d1:24:91:db:0e:9e:
b0:d4:cd:93:9e:47:45:35:6d:b9:85:ef:d0:b7:a1:13:d9:e4:
0d:45:4c:d6:fe:af:57:ea:c2:73:85:7a:23:80:fd:e1:a6:49:
1a:dc:14:52:2c:a2:94:45:eb:54:c7:d3:db:31:e6:9f:fc:47:
a6:ad:93:fa:0d:63:b3:df:44:9d:df:25:5a:6a:6b:4b:95:9f:
4b:db:02:0d:72:e3:bd:b5:30:2b:f9:5c:a7:34:22:17:de:13:
58:4e:93:00:b9:f9:0b:4e:e4:d7:e0:1d:90:8f:0b:04:61:48:
c3:e6:c3:5c:ea:47:44:60:d4:dc:4c:88:dd:47:0a:1d:c5:2c:
57:fc:d4:86:b7:04:d8:7a:7a:af:0a:3d:2b:41:21:0f:c8:62:
ba:3c:48:32:78:ed:a4:ea:16:a9:e2:cc:12:a2:47:1a:1c:d1:
df:cd:b8:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:52:09 2026 by rpki-client