Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/92E1F660118511F18D41C9BEDAE4EC9C.roa
File: 92E1F660118511F18D41C9BEDAE4EC9C.roa (raw, json)
Hash identifier: q81QtK/O7U0YZk+XWWYZVXrINgauOEpSyneM0+2TeHw=
Subject key identifier: 86:1A:A9:C5:3B:63:5D:15:59:DC:A5:CF:C9:E0:86:13:9A:00:12:BB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A023
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/92E1F660118511F18D41C9BEDAE4EC9C.roa
Signing time: Tue 24 Feb 2026 13:34:42 +0000
ROA not before: Tue 24 Feb 2026 13:34:38 +0000
ROA not after: Tue 31 Mar 2026 13:34:38 +0000
asID: 16509
IP address blocks: 45.194.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106531 (0x1a023)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 24 13:34:38 2026 GMT
Not After : Mar 31 13:34:38 2026 GMT
Subject: CN=699da8f2-6f95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:05:30:a3:01:e3:23:83:e8:d4:f0:81:56:ba:
ed:11:2e:da:83:33:21:8d:f5:32:14:6f:34:f5:63:
76:c4:34:13:67:4a:5b:b6:d0:ff:36:b9:ab:05:b5:
fb:c1:1c:56:fd:71:1e:35:ed:57:78:99:dc:27:55:
ea:68:38:3e:6b:f6:86:c2:ea:85:01:bd:6a:c4:81:
78:fd:52:77:8b:88:6d:92:9e:a0:b9:51:59:21:fc:
32:ce:b3:a7:7f:f0:f2:17:b8:41:7f:2c:3d:4a:cf:
59:15:36:d5:1c:99:47:1a:35:d5:66:1c:aa:11:b6:
d6:b9:82:72:ac:4c:b5:99:ee:e1:a6:ee:9c:82:ca:
ab:5c:66:c0:b3:c1:67:a8:3c:54:9d:a4:76:95:fa:
c6:fd:85:d3:b3:99:bd:4b:9c:bb:dc:49:fa:21:76:
0a:e5:49:31:f3:57:a3:36:1e:7d:ee:e4:e7:99:23:
0f:db:1d:16:23:9d:48:67:fb:e1:d6:51:cb:89:6e:
4a:26:93:b7:0a:66:94:12:95:f1:51:f1:65:0a:8a:
8c:32:03:8b:d0:a1:51:40:75:17:e8:ef:68:be:57:
9a:20:17:6e:5a:cb:96:fa:41:a0:65:23:1d:c5:c7:
c6:49:cd:f8:4c:41:cc:cb:92:09:ce:d4:7f:3f:d3:
2d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:1A:A9:C5:3B:63:5D:15:59:DC:A5:CF:C9:E0:86:13:9A:00:12:BB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/92E1F660118511F18D41C9BEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.45.0/24
Signature Algorithm: sha256WithRSAEncryption
64:95:28:6f:64:e2:4a:35:2e:8d:51:da:54:59:50:a3:83:10:
45:d3:ab:14:57:37:ac:74:47:a2:32:a0:6f:04:f3:4d:63:56:
c1:69:a1:4b:5d:43:6d:71:59:6e:d5:13:f8:04:00:7b:24:a0:
cc:36:25:8f:09:5f:27:39:8d:ee:ab:0e:53:df:ba:d2:d1:88:
c3:a7:06:d3:5d:d9:4d:e1:89:eb:b5:05:19:e6:1c:05:0b:1e:
ab:83:4a:13:c0:36:8e:7b:9d:1c:78:a4:cd:e1:5d:54:13:b2:
1a:92:29:8e:01:7c:c9:75:15:91:30:d5:37:49:fe:76:f4:f1:
8d:57:86:1e:99:25:71:07:f3:03:d8:2d:b3:08:64:b1:64:37:
3c:67:cd:8c:3e:d4:a8:71:5a:8e:90:c1:4a:5e:f7:4c:1b:6a:
40:52:a5:83:0f:e5:ba:ff:38:31:eb:9f:e1:fc:60:42:25:80:
9b:0a:b5:45:9e:7f:58:39:34:e3:cf:83:7c:ef:79:0a:85:30:
fa:3a:ee:aa:91:28:ef:c7:12:41:b0:2a:4d:34:41:db:f0:52:
bd:ca:23:df:32:be:f1:d2:13:1c:c5:43:3b:df:6b:4c:65:ca:
0b:d6:48:65:92:fc:9f:29:04:5b:66:54:c1:33:8b:06:2e:b8:
d9:ff:e6:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:34:01 2026 by rpki-client