Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CED02A5A0F1111F1BAB249B7DAE4EC9C.roa
File: CED02A5A0F1111F1BAB249B7DAE4EC9C.roa (raw, json)
Hash identifier: geBV2efMujtLkA72HzJi0941i/quD+zgBJvXh8hgw/U=
Subject key identifier: 63:7D:5E:19:95:38:B0:71:4B:0B:50:87:1F:BE:BE:61:B3:13:4E:2D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019F6D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CED02A5A0F1111F1BAB249B7DAE4EC9C.roa
Signing time: Sat 21 Feb 2026 10:40:58 +0000
ROA not before: Sat 21 Feb 2026 10:40:54 +0000
ROA not after: Sat 28 Mar 2026 10:40:54 +0000
asID: 44559
IP address blocks: 45.195.170.0/24 maxlen: 24
45.195.174.0/24 maxlen: 24
45.195.175.0/24 maxlen: 24
45.195.176.0/24 maxlen: 24
45.195.177.0/24 maxlen: 24
45.195.179.0/24 maxlen: 24
45.195.181.0/24 maxlen: 24
45.195.186.0/24 maxlen: 24
45.199.209.0/24 maxlen: 24
45.199.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 106349 (0x19f6d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 21 10:40:54 2026 GMT
Not After : Mar 28 10:40:54 2026 GMT
Subject: CN=69998bba-9b80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a5:cf:73:87:8b:fe:79:79:d7:de:c7:af:70:
c6:b3:65:dc:bf:de:b9:d9:f1:c9:8f:d8:b7:cf:4c:
85:19:83:e8:10:65:79:ea:db:03:69:c2:f1:f5:01:
24:60:8f:bd:02:09:19:3a:b7:78:d5:da:cf:ae:0c:
47:ad:93:e7:f1:03:3e:b4:05:4b:fd:b7:75:cf:ed:
b0:6f:d0:41:a1:b5:da:5b:79:c9:3f:4f:d9:4b:ee:
70:2d:60:4c:b5:2f:fd:0e:5f:3b:d4:f6:20:31:44:
30:f9:d3:68:4c:a9:1e:9e:5a:81:d4:42:b4:a9:ef:
17:1e:20:a4:02:64:85:ff:73:49:02:a3:7e:31:e8:
68:54:08:55:dc:28:82:65:50:f9:1d:bb:bf:9d:58:
70:ad:b2:db:7a:4a:19:fe:7a:71:c8:9d:75:08:24:
57:de:18:8b:16:39:71:03:63:35:69:11:6f:1c:5e:
8e:87:a5:a8:2c:2b:2d:f6:2c:47:0f:eb:ad:18:5d:
86:1b:ac:42:05:47:17:6f:81:08:13:00:4a:6b:83:
a8:af:31:24:c4:2a:5c:52:82:2f:fb:62:16:18:16:
f1:12:8c:de:d5:06:76:d5:35:11:be:5f:e1:12:ee:
aa:e8:63:94:e5:c3:53:06:2a:5d:cb:1e:7a:8a:19:
c6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:7D:5E:19:95:38:B0:71:4B:0B:50:87:1F:BE:BE:61:B3:13:4E:2D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CED02A5A0F1111F1BAB249B7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.170.0/24
45.195.174.0-45.195.177.255
45.195.179.0/24
45.195.181.0/24
45.195.186.0/24
45.199.209.0-45.199.210.255
Signature Algorithm: sha256WithRSAEncryption
0f:de:cf:0b:46:dd:2f:e3:35:5d:24:fa:18:20:4e:fc:c4:ef:
f6:64:28:c3:2d:48:7b:b8:19:ec:85:52:30:57:f6:1a:5d:40:
b8:c3:32:2f:a7:be:47:e8:e3:e5:34:54:4e:1b:ec:0b:8c:c2:
2b:35:18:f8:a5:55:63:c6:40:49:f1:52:aa:72:fa:df:7e:13:
30:53:f2:2b:ff:2a:a1:ce:95:32:e8:24:4d:80:47:42:70:cc:
3c:4c:b7:12:c2:3c:05:a5:02:13:71:8b:6c:df:73:5e:3b:ef:
09:47:b7:32:67:67:ce:bd:af:0d:4b:3c:2b:53:00:f8:5f:24:
db:84:6c:19:7a:9c:9f:7c:07:ef:77:75:da:78:65:97:88:b4:
ba:34:6d:66:04:1f:8f:bb:98:f6:91:63:70:fd:6c:8e:4d:d3:
6e:20:36:59:2f:45:da:54:84:0e:0a:98:87:d8:f8:13:ac:47:
32:62:09:95:38:b7:c8:03:88:b3:c2:70:75:95:62:ca:97:be:
97:79:6c:dd:d6:2a:6f:f5:94:5b:fd:b1:a6:e4:7e:bd:c7:ae:
3c:ea:d8:c1:64:44:14:6c:d3:24:8a:f7:76:ad:ff:d2:e9:e8:
7d:43:a5:3f:c0:29:d4:2d:e0:1d:56:2c:f7:f2:96:ba:c8:62:
b0:3c:86:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:10:13 2026 by rpki-client