Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BCD0FA1E154C11F1890742F2DAE4EC9C.roa
File: BCD0FA1E154C11F1890742F2DAE4EC9C.roa (raw, json)
Hash identifier: jO2hYF2Koc/UtZ5LxF8v6XV+5oDgD3ud25qXJZ0KO4c=
Subject key identifier: 1F:94:74:F1:57:D1:85:4B:AA:DD:DE:72:10:99:16:63:82:93:11:51
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A17A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BCD0FA1E154C11F1890742F2DAE4EC9C.roa
Signing time: Sun 01 Mar 2026 08:57:55 +0000
ROA not before: Sun 01 Mar 2026 08:57:52 +0000
ROA not after: Wed 11 Mar 2026 08:57:52 +0000
asID: 138985
IP address blocks: 45.199.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 04 Mar 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106874 (0x1a17a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 1 08:57:52 2026 GMT
Not After : Mar 11 08:57:52 2026 GMT
Subject: CN=69a3ff93-a4c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:31:46:e4:20:fd:b1:7e:43:fe:ee:f7:c0:a5:
db:f3:01:69:8b:67:a1:de:bf:86:a4:a2:90:28:b5:
e7:da:33:8e:5b:b8:2e:e6:ec:36:1f:f0:80:41:50:
c7:39:1b:4a:43:e0:23:b5:61:bc:ae:8b:66:f2:ba:
99:f5:d7:b9:90:44:a1:6d:a9:c8:49:10:ea:63:77:
bc:23:68:38:35:ee:d4:b1:6a:e7:23:3b:aa:b2:6c:
c7:ef:5f:1d:42:a5:57:f2:e0:6c:8a:84:bc:9e:2d:
7d:5c:7b:08:fc:87:07:f4:da:e8:21:ad:15:aa:48:
fb:47:f8:73:6e:fa:48:61:cc:3b:81:a1:d9:4c:2b:
c4:b4:ac:ca:bd:22:73:6a:94:72:02:e8:d9:de:24:
fc:3a:1c:f0:10:ce:82:64:82:f8:17:0b:7b:12:f9:
2c:58:f2:15:d8:51:7f:66:8c:b2:58:f5:99:e5:ad:
bb:9b:d0:78:c5:fc:19:96:39:1c:42:b1:36:fa:fe:
da:b7:2b:c9:bd:c4:98:9e:37:53:86:4d:7e:8a:82:
a0:0d:2c:8b:09:fe:c2:a7:f2:6a:7b:40:e8:71:0e:
7d:68:12:60:3b:fc:1b:6f:85:4c:b4:9c:fa:f7:01:
7e:55:e1:a8:b4:62:96:d3:39:73:76:2b:28:c6:46:
75:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:94:74:F1:57:D1:85:4B:AA:DD:DE:72:10:99:16:63:82:93:11:51
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BCD0FA1E154C11F1890742F2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.187.0/24
Signature Algorithm: sha256WithRSAEncryption
33:23:c7:43:7a:ea:aa:5e:9a:d9:fa:e4:cd:9c:ef:db:ee:2d:
7a:d0:39:bc:21:05:a6:18:9a:62:79:e0:63:a8:45:22:a5:59:
a7:c3:5d:54:f1:44:ce:e4:8d:fd:13:6a:d5:40:a6:ac:47:b8:
e6:f5:78:07:af:0c:55:b3:ff:b1:94:e4:99:c1:c6:97:5f:cb:
cd:9f:2b:6a:43:c7:ae:5b:cd:6d:9c:4b:43:08:e4:a9:f9:45:
ce:9a:b4:35:10:ac:80:cb:56:32:7a:3d:40:43:fe:3b:af:2d:
36:54:62:7c:0f:02:36:cc:f5:88:f5:4e:e3:ed:12:d9:2f:53:
10:9c:51:9e:fc:aa:16:bc:db:d6:93:33:35:7c:d9:44:97:1e:
9b:84:31:a3:67:4d:b4:1e:29:70:38:9c:8f:0f:17:6c:b2:d0:
73:b8:19:de:86:42:28:b8:b0:ab:e0:ab:09:4e:5d:5a:52:8d:
1a:06:f7:cc:91:d6:5b:85:b9:9b:d5:1b:da:54:07:d9:e2:95:
06:4f:ef:a4:84:17:5a:57:15:fd:b4:61:e8:5c:4d:d3:fc:e7:
39:46:a1:58:e9:3d:09:9c:9f:ac:84:db:43:2d:99:1c:9d:17:
43:d2:fa:a9:6c:83:b3:55:d2:63:c4:41:80:d9:d9:f6:fe:e9:
e0:a7:74:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:04:37 2026 by rpki-client