Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CDB7FF8030D611F18A5D97C5DAE4EC9C.roa
File: CDB7FF8030D611F18A5D97C5DAE4EC9C.roa (raw, json)
Hash identifier: TugW86YRoZdz5/ELVzO5jw2Mjq1Y/CjBqj0i8ZVjGvc=
Subject key identifier: C1:58:3D:9E:B8:EB:7C:21:40:2D:69:67:AB:DE:DF:28:B1:40:48:9B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AA18
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CDB7FF8030D611F18A5D97C5DAE4EC9C.roa
Signing time: Sun 05 Apr 2026 10:04:16 +0000
ROA not before: Sun 05 Apr 2026 10:04:11 +0000
ROA not after: Sun 03 May 2026 10:04:11 +0000
asID: 61112
IP address blocks: 45.192.240.0/24 maxlen: 24
45.192.241.0/24 maxlen: 24
45.196.96.0/24 maxlen: 24
45.196.97.0/24 maxlen: 24
45.202.244.0/24 maxlen: 24
45.202.246.0/23 maxlen: 24
45.202.246.0/24 maxlen: 24
45.202.247.0/24 maxlen: 24
45.202.248.0/22 maxlen: 24
45.202.248.0/23 maxlen: 24
45.202.248.0/24 maxlen: 24
45.202.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109080 (0x1aa18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 5 10:04:11 2026 GMT
Not After : May 3 10:04:11 2026 GMT
Subject: CN=69d233a0-e443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:79:d5:2f:75:0e:2d:ed:78:e9:8a:28:eb:27:
56:24:c3:9e:42:91:a6:2d:f4:90:7a:5a:9b:66:96:
43:e8:f7:ad:6a:8f:fd:c6:58:ae:d3:f9:20:1c:e8:
2a:10:33:ef:f2:06:61:e3:7e:d6:41:f8:00:f6:4d:
79:51:9d:27:44:6e:39:bd:5a:80:52:7f:18:49:5d:
9f:2e:df:52:0c:2b:a7:10:fd:2d:e2:a3:49:4a:ec:
94:57:ee:a0:07:70:74:83:82:a7:a7:c3:63:e0:88:
f1:b4:de:0c:f4:99:fa:a2:2d:d1:39:99:73:27:cc:
b8:c7:c9:27:5a:0a:9e:b0:bd:e6:c9:69:08:a9:07:
53:69:50:a0:c8:61:9e:68:97:a3:b1:6f:ee:18:95:
dc:e9:a5:84:4c:7e:e6:b6:a4:0f:a6:3c:d9:d5:a3:
cf:87:79:fb:f2:7e:e0:c4:76:22:c0:c5:19:33:1d:
6b:a2:85:16:45:8e:ef:f5:4a:34:da:cb:d5:2a:91:
07:4d:9e:87:8c:c8:0c:d1:0a:31:e0:14:7e:03:e6:
85:f3:2b:13:9d:c2:f8:eb:5f:30:d6:26:92:21:59:
c8:ce:a2:5c:8a:51:08:98:30:7a:cc:7c:b9:6c:c3:
4c:98:ad:79:02:60:06:b7:13:e2:c1:5c:f4:20:9b:
30:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:58:3D:9E:B8:EB:7C:21:40:2D:69:67:AB:DE:DF:28:B1:40:48:9B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CDB7FF8030D611F18A5D97C5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.240.0/23
45.196.96.0/23
45.202.244.0/24
45.202.246.0-45.202.251.255
Signature Algorithm: sha256WithRSAEncryption
3d:22:92:81:b8:c0:e9:64:83:9e:5f:7f:77:32:ca:87:97:b8:
63:fa:fc:ac:a0:4e:6d:95:75:b8:02:78:19:84:78:42:0d:d1:
03:76:26:c0:c5:6f:11:dc:98:ad:3e:fe:2e:6a:7c:d9:ed:47:
ed:3b:34:1f:3c:ee:91:7e:35:9e:ae:b1:68:ad:d8:2d:64:9a:
0f:2d:b1:a9:fd:31:28:c9:64:c6:38:81:66:cc:c0:5e:9e:22:
ba:8a:30:bc:dd:b6:77:43:17:d5:66:63:f1:3a:2d:15:ad:fd:
d4:f0:71:f2:02:de:6b:2c:07:35:34:21:1a:fd:eb:ba:f4:43:
ea:4a:c3:61:56:99:dc:45:ee:9e:b1:50:5b:e0:38:2c:7f:db:
dd:fc:cb:23:51:2b:3b:97:06:9c:c3:b3:a1:09:a5:6c:bf:a1:
9b:6d:39:5b:3b:6e:cc:bc:dd:5d:62:7b:57:f7:f7:8b:89:3c:
67:79:06:f8:fe:41:bb:44:2b:d1:f8:3f:ca:88:38:c8:8e:3a:
59:ba:89:8b:32:a1:66:78:cb:97:76:e3:4c:58:29:3d:5e:3b:
cd:89:62:5b:71:c2:6a:f6:4d:df:dd:b4:d2:7f:a4:2b:19:1f:
d2:06:80:19:a4:06:8c:95:39:f9:a4:7d:9b:d2:d0:97:a9:9d:
2f:f5:ec:35
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:55:12 2026 by rpki-client