Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/586FC580535B11F1841061C0CE1D38B0.roa
File: 586FC580535B11F1841061C0CE1D38B0.roa (raw, json)
Hash identifier: sdkWYvZgDxZeB5rCU630FShge+4NqTU0Rj2aZTePmhU=
Subject key identifier: 75:D1:77:04:DB:7C:17:27:2B:E3:05:8D:B5:C8:FD:A5:92:4A:6D:3E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B5B9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/586FC580535B11F1841061C0CE1D38B0.roa
Signing time: Tue 19 May 2026 08:18:42 +0000
ROA not before: Tue 19 May 2026 08:18:37 +0000
ROA not after: Tue 23 Jun 2026 08:18:37 +0000
asID: 272951
IP address blocks: 45.195.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 31 May 2026 06:35:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112057 (0x1b5b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 19 08:18:37 2026 GMT
Not After : Jun 23 08:18:37 2026 GMT
Subject: CN=6a0c1ce2-69af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8b:bd:2c:51:98:66:4a:98:01:1c:04:9e:e7:
f4:73:30:b5:87:f1:78:3e:f6:d7:e1:0e:62:8f:7d:
ab:30:fe:1c:41:fd:19:4c:bc:34:f3:81:a5:17:bb:
17:5e:ec:60:5c:5a:d2:fe:5f:5a:f0:3c:d5:0b:50:
94:96:1b:32:03:91:e2:0a:e8:45:84:35:7e:ed:8d:
de:c5:18:e8:ae:83:48:37:74:27:80:26:bb:29:ba:
6c:fa:c8:fa:5e:74:63:aa:5e:db:2a:ba:f7:0f:30:
96:22:b6:3b:6b:87:5c:ab:da:ef:80:e5:b0:d3:71:
d1:aa:08:95:6d:e9:28:fc:ed:9f:df:a4:8b:02:8a:
7f:b1:52:54:52:d9:f4:b3:71:eb:8b:74:11:96:31:
bf:12:a2:f4:87:94:51:ea:43:53:a7:6e:16:d5:f3:
c0:29:ef:7b:d5:2e:1e:3d:20:51:ec:2d:4b:93:b7:
36:37:3f:e9:d7:0d:b6:25:e7:d5:0c:d2:5f:0a:32:
6b:9c:a9:53:9a:3b:ac:dd:b7:91:ba:ed:be:10:62:
fe:83:8f:ac:bb:e2:1d:6e:c7:c5:7f:ec:c0:32:3f:
d2:a6:0b:85:67:69:56:d9:0b:f3:89:cd:e6:2a:53:
63:a1:95:d2:dc:77:99:c0:ea:3a:e3:c4:61:7a:37:
44:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:D1:77:04:DB:7C:17:27:2B:E3:05:8D:B5:C8:FD:A5:92:4A:6D:3E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/586FC580535B11F1841061C0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.94.0/24
Signature Algorithm: sha256WithRSAEncryption
05:d7:50:95:b6:b6:ab:c9:2c:4d:77:9d:85:a8:c7:c5:5c:0b:
1c:75:eb:e1:77:d5:20:04:f5:a1:cf:d7:87:18:e9:87:8a:b9:
ac:0b:d5:56:96:40:7a:04:15:aa:2e:53:7d:32:56:15:fb:76:
b4:6a:6f:4f:8a:9f:c8:68:54:1a:1f:82:92:ce:b0:bd:b1:4b:
b8:2e:70:ac:f3:6f:aa:26:f8:7d:04:f0:4d:10:c2:a7:49:c3:
91:95:5f:5a:7f:b5:46:e4:53:cb:4c:b4:db:9f:42:03:4e:62:
ae:02:0f:57:fd:ca:23:d3:21:19:d0:44:02:b5:41:00:db:a6:
61:20:67:89:97:38:69:1f:f1:2a:46:d1:8a:d4:21:86:9b:c9:
de:02:e7:85:49:77:57:f0:ed:b5:be:a0:35:8a:53:7f:a3:57:
73:20:89:af:25:46:45:77:9d:91:ad:69:fa:ab:ec:3b:a1:2d:
a2:ce:b2:7a:52:13:ec:76:ba:89:ab:56:20:6c:b7:3e:d0:12:
66:a2:6e:bf:b4:63:ac:84:e3:1d:cc:4c:c8:6d:63:55:89:74:
4f:cf:a7:5f:d8:ef:3f:19:ed:f7:ef:bc:9d:3e:f4:c0:11:c6:
73:f5:3d:d4:e7:06:1a:0b:18:15:65:3c:74:0d:16:84:f2:a0:
37:05:2b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 00:02:02 2026 by rpki-client