Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C058889E12DD11F198864F85DAE4EC9C.roa
File: C058889E12DD11F198864F85DAE4EC9C.roa (raw, json)
Hash identifier: cyMw/xRPHV28z+vkFx35NAehAu5lyoL5C8lpNvdRdlQ=
Subject key identifier: 58:F0:12:46:9A:AB:F7:58:44:CA:66:4D:16:74:37:02:D3:84:F4:B2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A095
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C058889E12DD11F198864F85DAE4EC9C.roa
Signing time: Thu 26 Feb 2026 06:38:25 +0000
ROA not before: Thu 26 Feb 2026 06:38:20 +0000
ROA not after: Wed 01 Apr 2026 06:38:20 +0000
asID: 11427
IP address blocks: 45.207.48.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106645 (0x1a095)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 26 06:38:20 2026 GMT
Not After : Apr 1 06:38:20 2026 GMT
Subject: CN=699fea61-d8a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:c3:7c:b1:fc:ce:e0:3b:18:37:8f:7a:e3:af:
af:36:d5:c6:ab:6a:75:16:aa:b8:ac:f3:aa:5a:81:
68:eb:70:3a:65:26:26:2f:a2:ed:7e:c7:dd:01:49:
fe:3f:c6:34:c6:09:a2:70:0f:5c:b8:50:a6:52:df:
5c:a9:26:aa:62:e4:06:69:c5:ce:65:97:ff:45:17:
27:80:d7:b8:4c:98:0f:fe:d2:1e:c8:97:fd:f8:2f:
95:9c:7d:5f:5b:93:2a:74:e1:e2:b5:4d:e6:70:95:
ae:b9:99:3a:94:73:59:38:b8:ab:0b:2e:19:cb:76:
6e:b1:6a:bd:c5:33:61:30:46:99:8b:d2:9d:be:62:
ed:3a:d5:db:31:5e:54:52:a6:f4:f9:48:74:72:9d:
08:00:9f:7e:82:d0:4d:2f:c4:5f:04:f3:41:0b:4a:
0e:d0:c0:14:f5:cf:ef:55:5c:2f:cb:5f:20:3b:ba:
35:28:cb:1b:4b:f3:3c:0b:3c:65:6a:7c:10:66:ed:
0b:ce:98:e9:dc:98:89:44:39:3c:66:e1:e2:12:2b:
51:d0:a1:03:a3:f0:d5:85:e1:5a:4b:76:af:18:97:
a7:a6:6d:bd:7a:7c:91:3c:0f:c0:d8:6c:43:11:da:
dc:05:bf:1f:16:ad:b4:d4:52:56:2c:3f:47:82:05:
dd:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:F0:12:46:9A:AB:F7:58:44:CA:66:4D:16:74:37:02:D3:84:F4:B2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C058889E12DD11F198864F85DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.48.0/21
Signature Algorithm: sha256WithRSAEncryption
10:95:b8:d9:73:6f:c8:ee:9f:42:04:47:46:0e:ea:f1:5f:9c:
e3:07:2a:c0:1b:d1:98:d4:12:4f:98:81:20:95:a0:4b:69:52:
df:b3:2d:24:d9:96:e6:82:68:9c:44:fa:53:37:5d:2a:bb:c7:
d3:63:88:39:58:b1:91:14:be:ea:8b:51:a0:83:d6:4c:3e:30:
65:95:88:0f:37:2e:00:b3:07:b2:89:23:54:a1:5c:70:5c:b8:
95:44:26:bf:fa:51:e0:c0:34:a3:99:94:e4:38:07:57:f0:d5:
d4:f6:5c:57:e4:28:3c:40:bc:fd:c1:5f:c6:5e:69:a6:94:a3:
8d:f0:86:da:a6:f8:41:38:62:d7:b4:36:ef:af:14:d3:6d:a0:
d6:59:8e:e7:ee:b3:62:9f:b9:47:82:0b:dd:87:30:65:74:ac:
a7:d4:2c:9f:e0:38:2f:83:29:82:0e:97:7a:5e:cf:bc:9f:7a:
76:df:51:bd:97:95:bf:09:60:73:14:a6:9b:de:12:8c:4a:c6:
66:2b:39:6c:22:12:29:35:58:37:df:65:8e:35:b1:1e:49:9d:
4f:ca:96:1c:38:82:19:d3:4e:96:f5:ea:98:6d:df:fd:ff:97:
02:29:59:45:63:52:fd:32:a2:2a:ae:6c:27:68:96:f7:21:52:
b9:f8:b9:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:19:31 2026 by rpki-client