Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C47B457439C011F1810ECBA5CE1D38B0.roa
File: C47B457439C011F1810ECBA5CE1D38B0.roa (raw, json)
Hash identifier: EaUs6Y+ojE/QBUxwO12BDGegw8TAAxFSWmnYEiG7YJU=
Subject key identifier: 80:F4:D5:BE:F0:A8:60:D6:36:58:E2:05:18:B4:27:95:FB:5A:7B:35
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AD55
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C47B457439C011F1810ECBA5CE1D38B0.roa
Signing time: Thu 16 Apr 2026 18:19:12 +0000
ROA not before: Thu 16 Apr 2026 18:19:07 +0000
ROA not after: Thu 14 May 2026 18:19:07 +0000
asID: 212238
IP address blocks: 45.194.71.0/24 maxlen: 24
45.198.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:26:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109909 (0x1ad55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 16 18:19:07 2026 GMT
Not After : May 14 18:19:07 2026 GMT
Subject: CN=69e12820-3980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1e:c5:c2:72:f5:50:ff:59:89:b3:5d:7c:6b:
c5:b1:0e:46:3d:f1:47:eb:fa:58:bc:fe:a0:49:0a:
8a:38:9a:b5:a0:08:2a:cf:1b:e6:39:c5:f8:18:87:
bb:01:6d:c8:24:5f:9e:be:0f:4b:08:71:c1:fb:a0:
fc:af:9a:96:7c:d4:de:7d:35:97:5b:a0:5b:e2:6f:
90:63:ec:c3:2f:f7:03:9e:60:cf:97:f3:d7:97:48:
89:71:b8:07:6d:90:09:9c:62:ae:39:9e:0c:ab:b1:
02:96:6e:1b:49:c5:1b:5e:82:21:11:4a:6d:51:6a:
26:f9:5d:94:6a:b0:9c:a4:14:0b:20:b2:e2:2e:e5:
d9:62:fe:44:07:8a:54:9c:60:f6:9d:c2:6c:dd:fb:
76:91:28:25:a4:a2:71:d9:a1:a2:20:a5:6d:ae:96:
21:16:8d:a0:94:dc:f6:1a:74:17:d7:e9:a0:e5:dc:
3c:37:04:92:fc:cd:f8:80:f4:4a:f5:e6:a2:a5:f1:
86:ca:26:df:20:f3:7d:a7:c6:f2:10:c2:94:56:ea:
bc:0f:23:4d:9f:63:2f:33:8f:6e:cf:b4:ad:39:76:
67:f7:c1:0b:5d:0a:39:41:76:c3:ab:a4:ca:45:62:
46:c5:54:f5:7a:61:8b:16:fb:e3:fa:35:ea:60:df:
11:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:F4:D5:BE:F0:A8:60:D6:36:58:E2:05:18:B4:27:95:FB:5A:7B:35
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C47B457439C011F1810ECBA5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.71.0/24
45.198.80.0/24
Signature Algorithm: sha256WithRSAEncryption
59:83:15:72:e8:67:4a:e0:50:64:6b:39:9a:01:71:f7:2d:4c:
d9:61:08:79:b7:f2:14:96:8f:db:c5:c8:37:79:84:63:f4:bf:
b1:d4:b5:6c:f9:6a:0f:33:52:f6:ae:16:9a:2c:48:a9:7a:de:
c8:37:b7:c3:8a:55:2e:62:e4:83:f1:45:61:38:07:8a:e4:83:
94:2e:91:83:66:38:31:6e:16:49:dd:ce:7b:6c:26:c9:c4:e4:
88:a4:cb:c4:06:25:26:e4:45:a8:55:11:09:3e:5b:09:5f:da:
1e:4d:3c:bc:b1:46:61:6e:bd:4d:ef:70:0e:31:c7:83:47:d7:
3c:57:fe:58:21:03:d9:de:20:d1:4e:47:d8:d2:bb:5e:87:0d:
e9:10:2e:77:30:a0:f4:24:27:d9:3b:86:23:e5:e6:6a:1b:1f:
49:26:46:dc:a2:41:62:54:9a:10:3c:3d:9d:01:bd:a5:cb:41:
89:36:68:aa:24:91:38:12:21:43:2e:c5:34:d2:83:82:f8:5d:
a9:95:57:77:d9:4f:ae:ea:89:17:7b:4d:ce:46:b9:7f:22:6d:
5e:a6:55:0c:1e:1f:e5:68:ba:34:38:96:88:1b:b9:3f:c7:58:
f8:cf:89:67:e6:d5:5a:27:14:14:b5:fe:4b:e9:df:57:c2:2d:
ba:36:bf:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:38:35 2026 by rpki-client