Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DBD48E84340B11F19BA83AEACE1D38B0.roa
File: DBD48E84340B11F19BA83AEACE1D38B0.roa (raw, json)
Hash identifier: eQAL0TiuE3nxYtGntNsqDsfr2d5uG85LKzsEYh1uvvI=
Subject key identifier: 85:A0:83:FB:78:74:13:5E:03:3A:D9:FC:FD:03:55:87:E1:62:55:C2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AB55
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DBD48E84340B11F19BA83AEACE1D38B0.roa
Signing time: Thu 09 Apr 2026 12:01:36 +0000
ROA not before: Thu 09 Apr 2026 12:01:31 +0000
ROA not after: Sun 19 Apr 2026 12:01:31 +0000
asID: 9304
IP address blocks: 45.198.5.0/24 maxlen: 24
45.198.16.0/24 maxlen: 24
45.198.17.0/24 maxlen: 24
45.198.18.0/24 maxlen: 24
45.201.35.0/24 maxlen: 24
45.201.41.0/24 maxlen: 24
45.201.42.0/24 maxlen: 24
45.201.48.0/24 maxlen: 24
45.201.61.0/24 maxlen: 24
45.204.132.0/24 maxlen: 24
45.204.154.0/24 maxlen: 24
45.204.181.0/24 maxlen: 24
45.204.248.0/24 maxlen: 24
45.204.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:26:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109397 (0x1ab55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 9 12:01:31 2026 GMT
Not After : Apr 19 12:01:31 2026 GMT
Subject: CN=69d79520-6d8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:c7:49:bb:fb:50:ef:57:22:20:d6:81:c4:a7:
e7:c0:29:bc:54:3e:c3:e7:ab:90:57:1e:e7:51:60:
14:64:06:ac:bc:41:35:29:9f:cb:51:d4:f8:2e:1a:
f0:62:bf:a6:5b:20:57:a5:05:44:e6:c9:90:33:80:
df:f5:2a:f9:fe:93:0c:97:e8:05:c7:c7:66:f6:2d:
03:88:35:bf:63:c0:c5:32:74:c2:7f:2c:f0:68:7a:
d8:d7:2c:74:93:9f:0d:aa:51:40:9c:81:d4:ea:e9:
39:0f:00:e2:74:fa:c4:0f:bd:05:57:6e:eb:35:9d:
5c:02:fc:92:65:50:2e:c9:96:82:ef:26:80:32:8f:
bf:44:0f:ec:9d:20:d3:13:37:4b:5b:d5:4e:6f:8e:
c8:88:f5:fb:b1:fa:d5:c6:e2:08:4d:9a:38:f5:e1:
cf:31:87:56:88:6b:5c:7a:0c:da:33:04:89:99:bf:
9b:46:d2:ee:f2:ea:f6:96:19:39:97:d6:20:e1:25:
f0:89:89:c0:bc:3c:f0:0e:17:d4:62:73:e5:d5:4d:
f2:f0:ab:e2:7e:89:72:25:ef:70:a7:38:8b:47:b8:
1c:84:51:84:45:b3:6a:4c:e3:fe:dc:d0:7c:03:80:
74:45:ef:d9:68:9d:4d:de:c3:26:e8:d9:a9:75:da:
16:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:A0:83:FB:78:74:13:5E:03:3A:D9:FC:FD:03:55:87:E1:62:55:C2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/DBD48E84340B11F19BA83AEACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.5.0/24
45.198.16.0-45.198.18.255
45.201.35.0/24
45.201.41.0-45.201.42.255
45.201.48.0/24
45.201.61.0/24
45.204.132.0/24
45.204.154.0/24
45.204.181.0/24
45.204.248.0/24
45.204.255.0/24
Signature Algorithm: sha256WithRSAEncryption
28:fb:a1:de:91:23:74:61:14:9b:e5:0c:82:10:a9:1d:a8:f0:
a1:0d:d8:e2:82:da:73:46:67:6f:b8:6a:29:17:0c:03:7a:e2:
80:b0:43:5b:e0:18:8e:c3:4a:11:8d:4b:4f:c7:f4:27:ce:f4:
4f:6e:9a:f2:ff:c4:9b:b8:c9:94:4a:3d:27:10:ce:5f:9d:6b:
2e:ae:f1:dc:9d:4b:23:8c:60:e3:ca:bc:60:08:98:56:34:ce:
46:df:db:90:68:5e:ec:3d:ce:4f:52:c3:b6:35:94:cb:cd:c3:
4d:bd:62:7e:fa:b7:a4:78:21:9e:f5:35:c3:49:60:2f:ef:92:
66:dd:e5:15:aa:c1:53:3d:03:46:48:a2:7c:85:c5:0b:5f:a1:
46:cc:83:41:a8:43:91:2e:4f:bb:18:2e:f0:34:d2:cc:03:b4:
d1:2e:2e:b7:4b:95:e7:f5:0c:68:b8:76:d8:8b:e6:e6:22:05:
d5:5a:30:44:6f:45:ca:cc:7b:22:1c:a9:42:a6:75:56:21:84:
9f:39:ef:c6:68:c7:af:98:db:da:d8:94:54:4a:35:86:98:e0:
aa:6d:31:36:aa:bf:fd:eb:54:ef:6a:83:3c:e3:9a:22:62:16:
6b:18:d9:88:66:6b:e4:bc:a0:fe:e6:1e:c9:26:90:ab:4e:94:
67:cc:4d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:37:29 2026 by rpki-client