Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9F5D56B838C311F18F8520A5CE1D38B0.roa
File: 9F5D56B838C311F18F8520A5CE1D38B0.roa (raw, json)
Hash identifier: 7k08rN3PSNCp1am/HL0VYGIGfrgfSuYjvoNzpfzfm+o=
Subject key identifier: 32:C4:F4:56:74:25:FA:AA:29:16:8B:D7:5E:FC:35:72:6B:52:B1:5C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01ACEA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9F5D56B838C311F18F8520A5CE1D38B0.roa
Signing time: Wed 15 Apr 2026 12:07:07 +0000
ROA not before: Wed 15 Apr 2026 12:07:02 +0000
ROA not after: Fri 22 May 2026 12:07:02 +0000
asID: 57043
IP address blocks: 45.197.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109802 (0x1acea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 15 12:07:02 2026 GMT
Not After : May 22 12:07:02 2026 GMT
Subject: CN=69df7f6b-30f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:14:c9:7b:5f:37:0e:1b:16:ab:03:10:89:7a:
db:1b:21:40:c0:b1:05:b3:ef:a9:59:b5:f9:a5:c6:
3f:e9:3b:b1:b8:f6:52:ea:2d:6f:0d:e8:3b:10:c3:
29:57:4c:79:d0:60:24:f1:07:b1:0d:89:1c:6e:b8:
59:b4:97:9d:2b:3f:fd:6e:e9:b9:3d:4d:f6:23:64:
e0:15:3a:2c:e7:30:27:6e:2f:21:86:ea:f3:71:b8:
1e:04:9d:2a:f7:bf:19:fd:f0:4f:38:87:28:95:c9:
94:28:17:43:17:2e:a5:79:5c:32:74:2c:3c:78:66:
af:01:2c:0f:95:67:1d:1b:c0:e7:f9:39:65:9e:e5:
fd:71:76:8b:24:90:fc:65:49:5a:c5:a2:a1:af:a6:
d8:c1:95:7e:33:1d:ae:b7:92:3c:0b:05:0d:fb:af:
d1:7b:23:11:5a:6d:62:e8:af:28:ca:fd:47:4d:bf:
58:71:9a:db:a5:8a:b4:3a:23:2d:b6:03:33:90:68:
5a:e8:95:48:fb:6d:2e:46:c6:5e:d0:44:4d:21:f5:
68:fb:3a:67:6f:90:a9:81:d0:33:ad:1e:dd:65:f0:
93:5e:d9:f0:64:f3:89:ac:6a:35:2c:6f:a4:c9:ea:
aa:54:3e:7f:18:87:6e:4e:b0:41:c2:83:00:2f:71:
29:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:C4:F4:56:74:25:FA:AA:29:16:8B:D7:5E:FC:35:72:6B:52:B1:5C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9F5D56B838C311F18F8520A5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.133.0/24
Signature Algorithm: sha256WithRSAEncryption
98:c5:9e:77:b8:f8:54:94:b7:43:ee:b8:12:d6:b7:8e:a1:80:
d7:8a:93:81:ff:56:51:7d:05:60:da:f9:c4:5f:e0:b1:9e:14:
a6:56:d2:3e:1e:36:84:c9:28:23:66:f8:0e:1e:d4:35:1f:ea:
c3:88:4a:f9:16:87:7f:d8:75:41:92:b7:2d:a0:d1:70:1b:41:
a9:9b:c4:e6:57:37:8d:6a:c4:af:71:64:d7:38:83:06:21:fa:
60:b0:2f:ee:66:3e:77:62:2e:f6:de:dc:52:13:79:43:7d:7a:
89:94:ae:e3:e4:41:e8:5d:61:2b:6b:cf:68:ba:fa:ed:f2:50:
45:c0:10:14:9b:bc:07:ec:a1:c0:58:61:1d:de:8d:05:21:eb:
fe:96:19:9f:03:38:c1:31:50:cf:fc:ee:ae:fd:0d:eb:e5:19:
96:af:cd:57:43:85:54:52:d6:d7:58:2b:f7:cb:a3:ea:87:53:
3d:27:15:d2:30:65:f4:6c:b7:03:a5:88:1c:a1:69:dd:39:9a:
06:36:f1:3f:89:88:a5:61:75:6f:83:9b:3b:67:5f:38:2a:50:
db:fa:2c:cf:46:ee:32:a9:c1:de:bc:d9:2c:e1:da:4e:97:e6:
95:ed:2f:b8:9e:4b:30:79:10:f9:d5:a8:3d:e7:22:9b:d0:4f:
e5:74:de:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:21:58 2026 by rpki-client