Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8898C94A2EE511F18E746AEDDAE4EC9C.roa
File: 8898C94A2EE511F18E746AEDDAE4EC9C.roa (raw, json)
Hash identifier: Kyc6a+E9WIX6uueBECEZxoMz6DWeSLqKU9IwqMvNZY0=
Subject key identifier: BE:1C:A4:27:76:19:D3:FE:5A:8B:4F:BB:0A:24:FF:16:5B:2D:B2:37
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A985
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8898C94A2EE511F18E746AEDDAE4EC9C.roa
Signing time: Thu 02 Apr 2026 22:44:40 +0000
ROA not before: Fri 03 Apr 2026 22:44:34 +0000
ROA not after: Sun 10 May 2026 22:44:34 +0000
asID: 401366
IP address blocks: 45.207.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108933 (0x1a985)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 3 22:44:34 2026 GMT
Not After : May 10 22:44:34 2026 GMT
Subject: CN=69cef158-aff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:e9:1b:b0:4e:91:d6:b4:94:1c:9a:a1:aa:26:
91:ad:97:b0:19:85:a5:96:b8:6e:19:05:04:1e:2b:
cf:34:f6:50:ff:93:af:24:8b:d6:99:de:fd:03:21:
bd:1e:31:76:03:b5:e5:df:f3:42:6e:67:49:2c:27:
0d:c6:fe:4d:a1:5c:86:7f:bc:88:e4:82:42:fd:25:
04:90:5f:43:c8:eb:e2:98:3a:6b:78:5d:02:62:0f:
fe:33:d6:66:01:f5:49:fd:87:cf:4e:93:5c:4b:4f:
be:65:06:23:3e:f3:dc:3c:fa:d6:a3:0d:8b:6e:9d:
88:85:4e:60:5e:3b:f9:b3:b0:43:00:f9:1b:0e:85:
e7:7b:5c:7b:6e:cc:b0:e4:fe:9d:3e:5a:bb:61:b5:
3a:0a:ec:80:a2:9a:c2:a8:a5:a3:a1:d0:0e:9d:b5:
6d:d6:83:82:fe:42:14:ba:c8:ba:b6:27:c9:6a:3c:
54:09:ae:dd:48:b6:0d:8e:7b:15:f7:11:56:99:c1:
75:b7:b3:71:d8:72:b1:c0:c2:a7:17:30:af:b0:7e:
3b:71:30:29:b2:a8:aa:cd:54:cf:dd:6c:f4:a5:3e:
66:39:0f:67:a6:aa:b3:33:08:b2:20:8c:4f:54:70:
36:01:c0:25:e4:35:ab:23:4f:c1:95:26:ea:53:f6:
50:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:1C:A4:27:76:19:D3:FE:5A:8B:4F:BB:0A:24:FF:16:5B:2D:B2:37
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8898C94A2EE511F18E746AEDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.46.0/24
Signature Algorithm: sha256WithRSAEncryption
56:44:0a:cb:85:48:de:b8:b6:96:39:ac:61:5d:66:54:0c:1c:
f4:10:d3:6e:0c:8d:a1:26:4e:de:25:94:a5:3e:c2:66:5a:1b:
e5:e8:b1:d8:0e:4b:3c:5f:e7:58:6e:c4:97:50:d4:4e:c6:3a:
65:85:65:5d:c2:93:71:b0:08:ff:64:4d:aa:ae:d1:ba:a9:e0:
85:79:c0:9d:43:e8:70:47:fe:d9:bf:c1:f0:b5:25:eb:4c:87:
68:eb:3b:0e:78:58:ea:83:62:37:d9:47:c9:52:a5:55:10:55:
3c:62:97:2e:04:c0:12:aa:59:da:c6:ba:9f:62:38:9f:21:b1:
fd:8e:e0:a6:cf:85:52:a3:37:56:11:80:35:a4:25:03:13:78:
dc:f1:dc:b4:95:38:0b:9b:e4:e9:58:83:d7:c1:3b:66:b2:ff:
ff:8b:5d:12:83:07:1d:c3:b5:02:66:91:35:0b:f7:0c:76:3c:
56:1a:06:68:03:96:94:cc:67:5b:01:62:d4:56:51:21:3b:e2:
61:ca:f1:d7:2b:b4:dc:8d:26:7c:15:9f:95:92:ca:67:20:99:
6b:f6:f3:1d:ee:f9:be:97:6a:26:83:af:7f:b3:0f:23:6e:19:
86:4e:66:26:ae:fc:04:2d:83:94:4d:44:17:3d:a1:03:e2:e7:
e4:f4:85:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:19:11 2026 by rpki-client