Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/00A04B74553E11F1AC3E5DB9CE1D38B0.roa
File: 00A04B74553E11F1AC3E5DB9CE1D38B0.roa (raw, json)
Hash identifier: K7CdHpYAM+ITaJjDxRICzugxyehTOljtQQUUhP6u2y0=
Subject key identifier: D7:4A:96:9B:9D:2C:03:F3:78:2B:E1:D7:7F:C1:0A:BE:FF:6E:E5:87
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B789
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/00A04B74553E11F1AC3E5DB9CE1D38B0.roa
Signing time: Thu 21 May 2026 17:53:41 +0000
ROA not before: Thu 21 May 2026 17:53:37 +0000
ROA not after: Tue 23 Jun 2026 17:53:37 +0000
asID: 138910
IP address blocks: 45.195.240.0/24 maxlen: 24
45.195.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112521 (0x1b789)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 21 17:53:37 2026 GMT
Not After : Jun 23 17:53:37 2026 GMT
Subject: CN=6a0f46a5-3802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e6:e3:54:b0:be:05:58:59:91:ef:16:2c:70:
c7:5d:0f:0d:f0:33:23:54:b7:fb:8f:06:ba:92:77:
29:fd:c0:f3:17:54:41:6c:f1:72:f2:f3:b2:ed:6a:
5b:3b:6f:97:74:eb:d0:24:15:a2:55:eb:0e:1f:e6:
b2:76:91:74:ea:5e:a7:a3:d3:f5:cc:4c:01:e1:63:
a9:8d:1d:8f:46:09:b7:94:81:3c:93:e5:45:92:bf:
b1:47:30:c7:8e:aa:86:db:de:59:3e:51:c0:bc:c7:
76:84:51:c1:30:90:d4:15:c3:ce:3e:b2:32:13:9b:
2e:31:fa:9a:93:e3:3b:18:75:55:04:2c:e1:70:e6:
6a:3e:f7:5e:ca:73:c9:23:f9:b6:ed:8b:75:8f:c4:
b4:f7:0a:4f:ad:86:fc:2c:3d:24:ec:16:43:7b:2e:
8f:47:94:3d:6b:15:e6:a3:73:17:b3:5e:3f:91:ff:
73:c3:5d:64:8e:ea:d9:87:69:95:5b:1d:81:f9:12:
10:56:64:4b:23:2a:c7:aa:71:6e:c2:92:e6:6d:e6:
7c:ea:91:a4:47:5e:bc:4e:ff:60:92:0e:77:99:ac:
c6:dd:81:5d:b9:7c:88:49:52:61:4a:ac:11:c9:81:
c8:03:e5:22:5d:a0:80:95:2a:8a:9d:6e:ad:a0:4b:
3e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:4A:96:9B:9D:2C:03:F3:78:2B:E1:D7:7F:C1:0A:BE:FF:6E:E5:87
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/00A04B74553E11F1AC3E5DB9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.240.0/23
Signature Algorithm: sha256WithRSAEncryption
97:21:29:2e:33:72:14:4b:6d:25:c1:2f:2c:3e:e4:ae:ea:d7:
5e:c8:a2:3d:cc:eb:15:ee:29:8d:4b:80:0c:ed:33:3e:df:84:
1c:82:c9:38:e4:64:9b:2d:52:b8:27:69:fd:14:d5:bc:76:d1:
67:62:08:56:70:39:95:ea:f5:06:cc:16:a7:ef:36:04:0d:14:
c9:79:97:b3:6a:d9:13:e3:0a:c6:1e:7a:6b:e2:a2:1d:45:c3:
2f:e9:2b:47:e1:0f:26:37:fc:e5:17:79:b9:ae:0f:a5:2c:54:
3e:57:94:ea:05:b6:0d:38:46:4a:ab:d4:51:b1:6a:6e:15:b1:
a6:1d:cb:89:ae:e8:3b:5b:f2:23:3f:a7:0c:d4:70:43:c8:84:
f4:f0:95:dd:92:24:38:73:33:c8:a2:6a:f0:b7:55:97:fa:ac:
8b:87:2a:a7:3f:24:fd:4e:76:f2:e2:75:c6:f8:fa:d5:f4:62:
a4:f5:88:79:67:af:06:6d:d2:7e:f7:21:17:3f:89:aa:f8:fc:
c6:10:23:86:2b:d2:d3:14:00:ac:11:27:19:5f:b4:03:9b:de:
19:c0:8f:fb:06:5e:c4:dd:a6:9b:0c:5e:99:d1:1e:da:56:fc:
8b:ed:c4:7f:7c:4c:ff:6a:4a:b6:60:43:2b:e4:97:ad:7a:7a:
8f:7f:0c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:28:56 2026 by rpki-client