Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EC30332C38C111F1A2A14017CF1D38B0.roa
File: EC30332C38C111F1A2A14017CF1D38B0.roa (raw, json)
Hash identifier: XXpzeOJbUkiLj2gM341FLmFmx141GJC8/eM6OMdIFBQ=
Subject key identifier: 9F:70:A4:B9:89:B0:D2:0E:A7:7C:7F:52:C1:E7:26:44:14:8A:CE:9F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01ACE4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EC30332C38C111F1A2A14017CF1D38B0.roa
Signing time: Wed 15 Apr 2026 11:54:57 +0000
ROA not before: Wed 15 Apr 2026 11:54:52 +0000
ROA not after: Thu 21 May 2026 11:54:52 +0000
asID: 271875
IP address blocks: 45.195.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109796 (0x1ace4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 15 11:54:52 2026 GMT
Not After : May 21 11:54:52 2026 GMT
Subject: CN=69df7c91-c2ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:db:89:4d:96:d7:8c:9c:f1:13:04:65:9b:af:
c4:81:b5:d1:93:b1:b6:68:2c:c5:59:35:0b:f4:88:
c7:b5:a7:07:9d:13:f1:d3:3b:ca:bc:d9:10:5d:ef:
72:35:cd:c4:eb:bc:f7:b2:03:f5:b4:8e:75:c2:c9:
25:56:e8:cc:f5:16:6f:6a:01:7c:d5:17:d0:c9:8f:
2a:44:e8:02:8f:be:3c:95:e3:3e:4e:c3:b3:f3:ec:
8b:03:ef:f2:c0:89:7a:6b:cb:5d:90:eb:94:85:d5:
f2:c0:19:24:2f:a3:8b:01:58:03:98:5d:41:25:36:
d3:75:59:e1:6c:d3:a4:1c:c0:6e:08:b4:ec:9f:3e:
c9:23:54:19:10:20:f9:5e:7c:ca:bc:9d:6a:6d:b1:
95:bc:be:f5:8f:7a:7c:2c:f6:3f:a0:7d:95:28:ce:
3e:78:3c:51:ca:44:af:fe:fe:c5:29:50:5e:37:cf:
22:11:69:b9:56:28:55:86:f0:a2:74:c0:a3:a2:c2:
72:51:b7:c9:b1:bc:14:ba:4a:3b:66:b3:bc:f0:eb:
3c:3b:21:ba:22:51:bc:62:0b:10:9f:54:55:57:ac:
9f:62:a8:a9:ae:bd:f5:42:af:9f:af:c9:ee:6a:d6:
1a:2a:f9:21:7c:84:ee:a1:b1:f3:82:53:f0:b4:ef:
bb:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:70:A4:B9:89:B0:D2:0E:A7:7C:7F:52:C1:E7:26:44:14:8A:CE:9F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/EC30332C38C111F1A2A14017CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.25.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:c3:94:46:ea:82:fe:32:54:b5:b1:75:2a:9f:7c:82:46:cb:
c0:ea:af:5f:ce:33:27:61:ff:65:14:81:a2:b7:d8:6e:5c:ac:
6d:d7:1a:52:90:f8:8a:c7:e2:6e:0e:c3:90:98:2d:33:7a:ab:
18:59:c2:fe:44:94:a8:d3:23:d3:67:69:34:f6:55:07:25:52:
9d:c5:a6:3d:df:ac:77:75:23:05:f3:2b:89:0d:fa:11:a6:a6:
48:c9:2d:d4:bb:e9:1f:fe:59:9a:8c:9b:cd:25:50:d9:1b:dc:
92:c4:b2:58:40:3c:02:85:96:c1:db:22:4a:46:ff:62:10:ae:
ee:27:55:12:9f:0d:3a:4a:b7:30:d6:c7:97:73:cb:6b:a9:8f:
59:bc:f1:28:62:f6:05:b5:27:2d:ed:c4:4e:03:43:0c:c7:80:
82:26:f7:7e:b9:14:8f:a0:44:04:86:6c:48:6b:44:16:42:fc:
ec:91:2c:aa:41:95:8a:4d:64:6e:55:5a:af:27:93:3a:32:f9:
a0:cd:ae:3e:65:07:9a:2c:bc:85:94:41:ba:b6:18:a0:d6:69:
7e:8e:32:0a:8f:f9:83:81:b8:d8:0c:a0:7e:66:85:ce:54:7c:
ea:aa:a9:f2:3f:86:30:e3:bc:c0:52:74:a1:d2:bd:e7:0b:88:
d8:13:19:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:54:50 2026 by rpki-client