Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B9441662097411F1B111C4B0DAE4EC9C.roa
File: B9441662097411F1B111C4B0DAE4EC9C.roa (raw, json)
Hash identifier: EqH8Y4bZv1KV8gS2NEcBvUdlz9W0m7eq/2egnpR9IuY=
Subject key identifier: EE:38:F5:BF:CE:FF:59:02:32:D3:75:A9:E1:2C:CD:4C:65:3F:86:3B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019D72
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B9441662097411F1B111C4B0DAE4EC9C.roa
Signing time: Sat 14 Feb 2026 07:13:56 +0000
ROA not before: Sat 14 Feb 2026 07:13:50 +0000
ROA not after: Sat 21 Mar 2026 07:13:50 +0000
asID: 271875
IP address blocks: 45.195.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105842 (0x19d72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 14 07:13:50 2026 GMT
Not After : Mar 21 07:13:50 2026 GMT
Subject: CN=699020b4-953f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:49:67:49:4f:e7:63:b5:4c:ca:f3:31:ca:a7:
59:ce:12:ee:35:25:2a:0b:da:26:81:e7:0b:79:89:
7f:bf:c4:f8:c9:06:de:e2:f7:db:9c:76:b3:0d:85:
a6:75:3d:10:cf:e7:6d:66:30:e0:13:0f:5f:16:2b:
e5:c8:f4:4e:88:c8:db:9b:4e:24:46:31:ca:a9:2f:
e3:64:27:07:16:80:cc:8d:0f:6f:24:69:f4:2f:68:
e0:14:58:ad:3e:2f:66:c7:e0:52:8f:ea:e9:17:d7:
12:9b:26:92:ec:c9:81:2f:07:60:1d:d4:39:b4:a3:
b3:1f:2a:3b:78:56:87:a2:47:91:34:6e:d3:31:6d:
4c:48:3f:a1:c4:0c:ca:2f:d1:12:85:ff:12:57:8d:
f0:ec:a5:8f:5f:1d:c5:a7:36:82:66:8d:72:53:3d:
6a:65:7b:c2:00:df:25:d5:2c:c7:01:3d:cc:9e:03:
55:bc:4b:71:2f:e0:19:09:6d:88:00:80:89:8d:a0:
8d:14:7c:7b:89:aa:34:f1:81:73:02:93:cf:6a:f7:
a2:0d:40:ed:da:08:c5:03:53:a9:9a:8d:91:bf:9f:
02:56:46:62:5f:54:ab:72:8c:7e:3d:2d:4b:ab:df:
4d:9a:72:a1:b0:70:ad:51:dd:e6:f5:3d:c5:28:a9:
39:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:38:F5:BF:CE:FF:59:02:32:D3:75:A9:E1:2C:CD:4C:65:3F:86:3B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B9441662097411F1B111C4B0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.25.0/24
Signature Algorithm: sha256WithRSAEncryption
91:da:da:a4:a9:88:e0:5f:49:33:1f:3c:8c:79:95:b6:f5:c0:
f4:0a:c4:3c:d1:75:a0:a9:61:3c:cc:f0:e1:6a:ac:8d:34:8d:
ed:af:d6:49:dc:fe:ea:9a:78:20:88:96:c4:0a:c0:f4:c7:39:
e6:38:a9:9b:c8:80:75:83:88:66:5d:2f:8a:65:38:0c:11:86:
02:27:56:aa:13:c5:13:56:55:bf:40:fe:84:c1:1a:8f:a9:43:
64:c3:a0:17:1d:c6:72:c4:1e:b3:bc:87:36:a7:24:33:61:f9:
82:ef:42:0e:49:7b:11:09:c6:4c:79:05:16:b3:41:41:67:c8:
8c:b2:5b:ee:92:e0:0c:54:0c:94:43:53:e1:fc:bc:2a:dd:8c:
ef:a4:c8:11:ba:d9:0a:7a:60:7f:7d:8b:a9:45:fe:e7:cb:30:
ca:da:3e:89:1f:ed:2a:38:d8:50:3b:6b:6b:e6:85:6c:7b:c6:
da:90:12:ed:a8:d8:a3:d0:21:03:18:4a:5b:b6:b4:f1:04:10:
27:2e:01:d4:29:7a:36:62:c2:52:87:0f:1a:ee:86:06:81:26:
51:f6:8d:39:ea:22:26:25:c2:dd:6b:34:c5:53:b1:15:d6:94:
3f:7f:70:71:98:6d:08:d9:9e:70:8a:a2:77:87:a5:30:dd:bf:
e8:f4:5c:00
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAZ1yMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwMjE0MDcxMzUwWhcNMjYwMzIxMDcxMzUwWjAYMRYw
FAYDVQQDEw02OTkwMjBiNC05NTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuUlnSU/nY7VMyvMxyqdZzhLuNSUqC9omgecLeYl/v8T4yQbe4vfbnHaz
DYWmdT0Qz+dtZjDgEw9fFivlyPROiMjbm04kRjHKqS/jZCcHFoDMjQ9vJGn0L2jg
FFitPi9mx+BSj+rpF9cSmyaS7MmBLwdgHdQ5tKOzHyo7eFaHokeRNG7TMW1MSD+h
xAzKL9EShf8SV43w7KWPXx3FpzaCZo1yUz1qZXvCAN8l1SzHAT3MngNVvEtxL+AZ
CW2IAICJjaCNFHx7iao08YFzApPPaveiDUDt2gjFA1Opmo2Rv58CVkZiX1Srcox+
PS1Lq99NmnKhsHCtUd3m9T3FKKk5DQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFO44
9b/O/1kCMtN1qeEszUxlP4Y7MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9COTQ0MTY2MjA5NzQxMUYxQjExMUM0QjBEQUU0RUM5Qy5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcMZMA0GCSqGSIb3DQEBCwUA
A4IBAQCR2tqkqYjgX0kzHzyMeZW29cD0CsQ80XWgqWE8zPDhaqyNNI3tr9ZJ3P7q
mnggiJbECsD0xznmOKmbyIB1g4hmXS+KZTgMEYYCJ1aqE8UTVlW/QP6EwRqPqUNk
w6AXHcZyxB6zvIc2pyQzYfmC70IOSXsRCcZMeQUWs0FBZ8iMslvukuAMVAyUQ1Ph
/Lwq3YzvpMgRutkKemB/fYupRf7nyzDK2j6JH+0qONhQO2tr5oVse8bakBLtqNij
0CEDGEpbtrTxBBAnLgHUKXo2YsJShw8a7oYGgSZR9o056iImJcLdazTFU7EV1pQ/
f3BxmG0I2Z5wiqJ3h6Uw3b/o9FwA
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:08:32 2026 by rpki-client