Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E2B39B8404B111F1B80CD5F2DAE4EC9C.roa
File: E2B39B8404B111F1B80CD5F2DAE4EC9C.roa (raw, json)
Hash identifier: YhbXBtH8o7zXmYM/qX3x6pveiMC3fNsk90BsLd38AzY=
Subject key identifier: 77:71:35:D1:35:2B:3A:12:22:1C:3B:D3:24:4C:A8:C5:6B:68:94:F3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 019C46
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E2B39B8404B111F1B80CD5F2DAE4EC9C.roa
Signing time: Sun 08 Feb 2026 05:49:09 +0000
ROA not before: Sun 08 Feb 2026 05:49:03 +0000
ROA not after: Sun 08 Mar 2026 05:49:03 +0000
asID: 147176
IP address blocks: 45.195.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 03 Mar 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105542 (0x19c46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Feb 8 05:49:03 2026 GMT
Not After : Mar 8 05:49:03 2026 GMT
Subject: CN=698823d5-184d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:da:82:bd:d1:0e:c2:52:a6:cb:13:45:d0:3a:
f8:f3:c3:18:16:63:69:5f:03:97:3b:13:94:1f:e6:
44:6a:5e:fe:80:7c:d2:82:16:42:53:9a:9d:9f:5f:
04:84:1d:aa:17:05:fe:e5:c0:d6:0d:03:5f:cf:8c:
20:9d:1c:87:7f:98:52:57:ca:24:ce:1f:b8:16:b1:
37:1b:a5:b3:78:b1:41:5c:b7:c7:7b:77:1d:b4:ce:
f5:9a:d3:98:9f:06:1f:04:8b:74:41:c9:be:03:67:
a5:9c:2f:04:60:f0:6a:e3:d8:25:b8:72:25:63:77:
49:fe:ca:3e:08:3f:d1:2e:1d:de:14:81:95:35:44:
f5:4a:6a:8b:be:02:2e:71:c3:8a:69:15:1a:24:56:
e9:31:6d:8e:49:e3:03:21:cd:9b:a2:a8:f9:e0:5d:
2e:7c:4c:63:0f:8e:46:b7:e6:20:a0:5b:1e:23:c4:
cf:ea:7b:28:59:81:aa:13:24:0a:c9:b4:be:18:9a:
c2:c7:ce:0e:c4:b8:7e:09:40:7d:a7:8e:24:90:89:
4f:6f:4a:55:a6:62:2d:bf:82:dd:2a:11:09:19:97:
a5:72:c7:44:33:9a:07:bc:2f:de:0e:e6:91:95:15:
9e:44:6d:df:08:7c:e6:24:80:32:2f:47:d5:1f:74:
3b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:71:35:D1:35:2B:3A:12:22:1C:3B:D3:24:4C:A8:C5:6B:68:94:F3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E2B39B8404B111F1B80CD5F2DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.152.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:28:fc:ed:f4:e1:e4:e4:5f:0c:36:10:bb:90:ec:f7:98:a4:
b4:23:46:4a:ee:9d:f2:fc:b3:28:d4:8a:c9:7b:fa:de:ab:4f:
6e:b3:06:ea:6f:fd:cf:a9:00:b9:9d:0b:c1:25:3f:87:a2:f5:
1f:62:24:8b:02:03:b1:fb:e7:10:90:87:67:d5:48:67:30:ac:
0f:b1:b1:28:c8:d2:b6:0c:25:df:6f:e8:c0:8e:5b:f8:b0:50:
8c:a4:c3:d2:44:36:ed:58:6f:61:e3:12:14:3c:a6:73:4c:49:
bc:35:cd:fe:c8:d8:4f:00:c2:02:7f:5e:fa:d8:b0:e7:6d:7c:
de:f6:23:58:b0:80:02:e1:84:bc:24:dc:7a:bc:90:99:a2:b1:
be:dc:f6:56:d9:e6:d0:f6:69:91:77:08:f4:9f:48:30:8b:27:
74:c3:7d:4e:6d:f1:b6:09:07:3f:22:4d:dc:c8:ee:db:1d:12:
e4:08:7b:ac:c6:0a:90:12:c7:9e:07:d7:f2:ed:b9:fe:b5:2b:
0b:ff:65:80:8a:a6:72:81:f9:a8:41:db:28:0a:55:ca:12:6e:
08:f2:8b:e6:29:dc:69:e3:69:76:f6:53:be:a7:ca:9f:15:5b:
f8:28:2e:d3:07:64:81:c5:b2:bf:ea:9e:c3:9c:90:d6:7c:e5:
25:db:3b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:19:29 2026 by rpki-client