Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D6E7A226FF7C11F088ABC7E8DAE4EC9C.roa
File: D6E7A226FF7C11F088ABC7E8DAE4EC9C.roa (raw, json)
Hash identifier: VRpA8rBTDm6oCRqIyxwg51tWC+gEp9GUF+K9b6hjm54=
Subject key identifier: D7:2D:C4:C9:5D:A2:10:2A:F6:7C:AA:DB:14:E3:C0:4B:53:87:3B:E4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019B4C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D6E7A226FF7C11F088ABC7E8DAE4EC9C.roa
Signing time: Sun 01 Feb 2026 14:46:50 +0000
ROA not before: Sun 01 Feb 2026 14:46:44 +0000
ROA not after: Sat 07 Mar 2026 14:46:44 +0000
asID: 61112
IP address blocks: 45.202.244.0/24 maxlen: 24
45.207.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105292 (0x19b4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 1 14:46:44 2026 GMT
Not After : Mar 7 14:46:44 2026 GMT
Subject: CN=697f675a-d03a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:42:a9:9f:dc:c5:80:9a:f1:78:1f:fb:bf:c1:
76:9b:1c:fb:ec:76:7c:e2:6f:05:93:6b:1c:54:9c:
7b:20:b0:5a:87:7b:d4:84:50:e3:7e:f2:f0:78:a8:
94:e6:64:ab:58:2e:a7:08:6b:57:71:6b:c0:dd:aa:
9d:c3:1a:8f:f1:af:0d:41:11:90:97:4b:f1:8f:c8:
2d:9c:52:94:ca:59:24:34:08:11:7d:4f:33:dc:c4:
c0:95:20:b1:95:af:d3:61:ce:af:19:77:d9:9b:00:
08:31:d4:17:fa:42:0d:ec:f4:90:00:b2:77:41:66:
e0:ad:cc:19:9e:0c:63:17:f0:cd:4d:75:d6:9c:58:
b3:fe:d8:9a:1b:ac:1c:18:b6:86:0e:04:f1:5a:10:
84:75:56:96:d0:e8:52:ad:a2:60:f0:01:6b:dd:41:
98:90:2b:b2:80:fe:80:e8:90:7f:64:4e:f4:73:53:
e8:67:3e:ed:b8:25:56:1e:53:d8:5d:da:cb:0e:eb:
80:f4:5a:aa:97:a2:d5:14:be:0b:74:21:cc:fb:ce:
4b:a9:aa:43:88:70:11:79:d7:db:39:71:6b:84:96:
0a:86:63:f0:c1:25:d8:51:9b:87:c2:1f:7f:b1:87:
87:db:4a:e6:9b:f9:e0:d3:fb:61:7d:e2:0e:5c:01:
e0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:2D:C4:C9:5D:A2:10:2A:F6:7C:AA:DB:14:E3:C0:4B:53:87:3B:E4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D6E7A226FF7C11F088ABC7E8DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.244.0/24
45.207.59.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:c5:7b:b6:6e:cb:02:98:79:2b:a8:b7:33:dd:8d:97:66:b8:
9d:f4:eb:f4:de:8e:f8:6a:b0:5b:fe:4d:e3:d6:5c:22:0a:bf:
9b:45:25:58:5c:1c:90:b6:56:73:d5:eb:5a:58:cc:d9:9a:bb:
4a:6c:7c:d0:0d:ee:26:a2:96:5f:ee:3e:da:48:37:d8:8c:9f:
e2:46:57:f4:82:55:ad:c2:58:f0:a9:56:8d:4a:71:9a:a8:80:
01:a8:53:8e:69:63:56:c6:d3:a7:fb:6f:43:c6:89:35:e9:f1:
64:b1:e3:f7:40:67:75:0c:13:b2:06:a6:98:32:24:8f:47:f2:
d2:3c:04:7d:88:d3:b9:0c:2a:c6:16:49:80:16:55:9b:ff:eb:
4b:63:08:34:a5:ae:cb:4e:c0:eb:5a:e3:87:c5:82:4d:ca:42:
35:85:28:b4:94:04:55:31:9d:4b:69:87:32:28:5f:af:5b:8a:
3e:b9:30:fd:4f:8a:4c:44:87:6d:30:b2:a9:a3:97:60:71:72:
b6:51:f3:4e:44:5b:f8:d2:ea:fe:4c:01:bf:25:c5:65:2a:de:
b6:1f:66:33:8b:fe:76:70:fd:4e:f1:11:46:5d:e7:74:3b:ea:
bd:ff:31:04:a6:22:37:cd:09:2e:91:cf:c5:fe:76:86:f9:17:
66:b9:6e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:16:46 2026 by rpki-client