Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD28E51C397911F19F75ABFACE1D38B0.roa
File: AD28E51C397911F19F75ABFACE1D38B0.roa (raw, json)
Hash identifier: +bDcrCQ5bd5FQdxeud3ekqBxMxbMP1dq/v241Wfjb0w=
Subject key identifier: 9A:74:3F:3C:78:84:30:A0:09:55:ED:30:87:92:B4:8E:59:1E:44:8D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AD13
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD28E51C397911F19F75ABFACE1D38B0.roa
Signing time: Thu 16 Apr 2026 09:50:19 +0000
ROA not before: Thu 16 Apr 2026 09:50:14 +0000
ROA not after: Thu 30 Apr 2026 09:50:14 +0000
asID: 9304
IP address blocks: 45.198.16.0/24 maxlen: 24
45.198.17.0/24 maxlen: 24
45.198.18.0/24 maxlen: 24
45.204.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109843 (0x1ad13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 16 09:50:14 2026 GMT
Not After : Apr 30 09:50:14 2026 GMT
Subject: CN=69e0b0db-b292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:af:48:6f:4e:ba:b9:35:43:6f:83:d7:a5:90:
a2:ba:f3:d5:0b:36:0f:74:a8:5a:66:78:58:27:1e:
d0:41:6a:6c:df:3e:79:cc:24:de:e2:85:e3:10:3a:
06:14:9f:1e:3c:ac:8a:2d:e1:69:d3:12:38:a7:56:
f2:a7:cd:f5:1b:91:08:ed:2f:0e:37:dc:df:fd:35:
e5:6d:23:97:f5:a3:50:36:4b:c5:f2:5e:4c:9f:ea:
e4:83:64:ca:41:96:43:90:f2:61:15:b6:bb:8b:7d:
22:05:ed:3b:fd:7c:a7:9a:a2:13:cf:f9:99:00:fb:
d6:2f:31:87:55:f3:28:10:42:98:1f:37:eb:2d:c6:
49:2c:c5:67:fe:b3:1d:1d:97:89:27:99:83:e4:f2:
c0:d3:dd:af:47:5f:7a:96:e8:71:2d:c3:f8:cb:a2:
87:29:59:29:79:07:7a:2b:1c:03:36:23:c7:e6:fe:
57:e9:3a:bc:3e:a5:92:1c:e8:90:a8:76:de:53:d2:
75:fc:5a:92:67:fc:2c:da:e0:64:22:47:73:0a:26:
6a:b9:a1:5b:e6:a2:25:56:4c:70:4e:c4:03:e6:a0:
54:e6:af:0d:84:ec:98:a6:8f:e3:10:19:63:c0:4b:
49:6c:ee:a4:f4:c7:e6:9b:07:19:1a:d2:c2:7a:c8:
03:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:74:3F:3C:78:84:30:A0:09:55:ED:30:87:92:B4:8E:59:1E:44:8D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD28E51C397911F19F75ABFACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.16.0-45.198.18.255
45.204.181.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:3f:f9:fd:bc:4d:01:c0:d2:61:82:53:24:88:6f:b1:45:0e:
f1:3c:24:f6:d6:7a:0c:fb:bb:5b:2f:4a:91:66:58:e7:84:d1:
6b:c4:5e:39:a4:78:6f:ca:06:c8:00:1e:af:dd:a9:93:fd:3a:
b5:bd:9e:94:da:ec:3e:ec:3a:e7:28:25:3f:5f:eb:e3:3d:a7:
7b:aa:a0:b2:7c:7e:9f:cb:32:6b:36:4e:dc:29:79:3e:79:75:
1d:de:f3:0b:d4:6e:af:44:d3:52:94:f1:27:bd:3a:9e:46:c8:
10:de:b1:95:4b:f1:d7:fc:82:00:cb:40:8b:66:50:1b:14:bd:
72:17:77:d7:8b:f1:5a:8c:85:5b:37:00:34:d2:07:c4:2a:07:
76:26:0d:be:a0:79:9a:19:f0:1a:1b:a8:13:d4:cc:fb:12:f3:
0e:da:51:11:50:db:cd:eb:75:21:d7:2b:d9:30:ac:69:11:58:
5a:db:19:78:60:c8:5b:d5:39:64:df:b8:9f:b7:57:de:b2:12:
f6:2f:78:10:5c:72:c7:45:e7:92:9c:d1:16:ae:56:54:8c:e1:
f5:ab:05:c5:3a:14:b1:6e:e1:9c:05:1f:b4:e6:53:8a:62:19:
16:8a:10:82:b1:dd:7b:44:5b:ec:72:26:c5:22:96:75:20:6b:
f6:00:a5:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:20:11 2026 by rpki-client