Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BA0874122AE411F1B3C0F4DBDAE4EC9C.roa
File: BA0874122AE411F1B3C0F4DBDAE4EC9C.roa (raw, json)
Hash identifier: Qc6wUj2o2p02zwkAkU8nQH3l91iyEmo0zg52tO3Wj8c=
Subject key identifier: 15:3A:97:20:1A:F8:52:F6:25:54:9B:F0:89:63:2D:63:50:CA:16:05
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A876
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BA0874122AE411F1B3C0F4DBDAE4EC9C.roa
Signing time: Sat 28 Mar 2026 20:28:49 +0000
ROA not before: Sat 28 Mar 2026 20:28:44 +0000
ROA not after: Thu 31 Dec 2026 20:28:44 +0000
asID: 140457
IP address blocks: 45.198.20.0/22 maxlen: 24
45.198.20.0/23 maxlen: 24
45.198.22.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 108662 (0x1a876)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 28 20:28:44 2026 GMT
Not After : Dec 31 20:28:44 2026 GMT
Subject: CN=69c83a01-4519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:78:a4:29:1a:92:bd:3d:e9:62:d5:71:b1:60:
d5:c9:0e:7b:cc:6b:b8:6b:8b:43:7a:c9:0c:17:e5:
f5:ec:b7:08:70:bb:09:64:5c:27:b8:d9:6f:ed:ac:
93:6a:6c:33:5b:c0:5e:23:c5:23:70:c2:f8:11:2e:
69:08:60:11:63:fc:3a:fc:17:35:2d:e7:d5:c8:ec:
e1:8e:e0:e6:b3:e0:09:20:a3:8a:9e:c3:64:51:ca:
c8:8f:4f:af:5e:61:1e:52:3d:6e:c2:74:a7:9b:bb:
37:b6:17:6f:f2:52:e7:d6:55:5d:d0:d0:89:90:e5:
b8:60:51:23:fc:29:66:d4:e8:a3:5d:43:fb:75:1b:
6d:4b:61:37:13:4a:8b:8e:ff:1b:ff:42:2d:cb:9f:
53:27:51:de:d9:a0:b6:88:1f:7b:3a:e1:33:22:1c:
40:be:c2:13:f1:fb:a6:8e:f5:74:a5:60:6e:da:2b:
c0:2a:89:10:2c:61:8f:ea:29:d2:3b:d0:4e:72:c0:
43:ca:e2:96:74:35:b2:93:21:0c:8b:5d:fd:49:6a:
47:e1:88:26:57:39:b7:da:2c:38:ec:12:82:67:3e:
db:ab:09:6c:3b:10:a5:fa:71:8d:5e:1c:ef:44:44:
4c:95:a5:f4:37:de:08:4d:a5:06:b5:f4:32:df:83:
e0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:3A:97:20:1A:F8:52:F6:25:54:9B:F0:89:63:2D:63:50:CA:16:05
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BA0874122AE411F1B3C0F4DBDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.20.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:f5:2b:02:85:4e:84:59:7c:78:0c:99:5d:90:72:9e:53:84:
7a:f0:ad:db:36:fa:85:5b:83:7b:57:e6:27:51:90:cb:49:65:
9b:db:db:b3:97:25:07:46:5d:3a:d2:48:b8:c0:a0:9d:0c:4e:
b2:49:f4:79:67:55:32:80:de:3e:8e:5a:f7:3e:58:f2:00:ba:
6e:50:47:0c:19:d5:54:fb:7a:c4:da:5a:d3:52:41:24:28:e2:
ea:76:b4:e7:a0:16:70:8c:13:f7:69:01:08:45:06:fc:cf:a7:
75:ae:38:b6:75:75:ae:70:a9:db:3f:40:3e:23:c8:ca:12:e6:
83:63:6b:a5:c5:d6:54:33:c4:13:7f:c1:33:c3:5f:28:8b:ac:
fb:da:ea:ab:fb:9c:c2:66:33:75:68:70:f7:85:f7:40:e5:58:
43:4a:4a:76:05:97:b7:00:18:02:01:e8:5c:a0:e7:08:c8:a9:
e3:38:32:7a:70:28:d5:e1:8c:aa:f8:1c:90:73:b2:3b:fc:23:
38:0f:5b:1b:79:b2:24:66:8a:e7:bf:9b:5a:4e:6c:3a:5d:e7:
af:88:db:33:48:d5:b4:d4:dc:e1:e0:13:c4:20:b4:5e:fe:cd:
6b:24:4c:ff:3c:30:96:e1:1a:fd:6b:4f:eb:b8:71:51:04:72:
e5:d7:b8:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:54:19 2026 by rpki-client