Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0413AE5A454D11F1A35913C2CE1D38B0.roa
File: 0413AE5A454D11F1A35913C2CE1D38B0.roa (raw, json)
Hash identifier: JlYqc+vvPo4hkG1rVft7Ih/gLD1AYupTflV9d12+pFU=
Subject key identifier: B7:C0:5B:A3:6B:24:AD:1A:48:2C:F6:A6:BF:44:38:BE:83:DB:7A:F3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B075
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0413AE5A454D11F1A35913C2CE1D38B0.roa
Signing time: Fri 01 May 2026 11:00:51 +0000
ROA not before: Fri 01 May 2026 11:00:47 +0000
ROA not after: Thu 24 Sep 2026 11:00:47 +0000
asID: 209242
IP address blocks: 45.195.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110709 (0x1b075)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 1 11:00:47 2026 GMT
Not After : Sep 24 11:00:47 2026 GMT
Subject: CN=69f487e3-8193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:9e:79:17:0a:74:a1:a8:34:c7:07:17:58:a6:
b5:fa:48:c8:ea:8d:cd:bf:82:df:03:95:3a:22:c7:
47:fa:a6:5c:00:38:79:29:14:7c:0f:24:43:d2:a3:
be:e3:24:a3:be:3d:14:84:02:b5:55:49:d6:41:6a:
65:43:61:08:a4:20:62:7f:31:e9:2a:34:fc:56:41:
02:02:a1:1b:76:78:b5:60:48:48:f1:8c:07:bb:f8:
d4:a1:b4:2e:0e:cf:91:b5:9f:ea:81:ac:f4:2c:1a:
a6:46:28:6b:cd:73:75:e8:65:2c:69:a5:88:8f:e0:
6e:c6:01:ae:b0:47:a0:91:b9:af:fd:f0:94:ab:5f:
cc:9b:41:45:f3:60:07:69:cc:06:75:e5:42:aa:81:
83:d8:1d:ab:04:45:41:65:67:14:03:69:f1:85:68:
4b:c5:08:fa:e8:df:a5:99:d2:98:41:20:ff:8b:e9:
1e:24:86:76:8e:03:d5:37:f5:cb:c0:dd:4f:27:9b:
2c:52:45:2b:76:b5:b2:cd:4f:48:b8:e9:d7:da:91:
a5:db:25:f7:fc:76:c1:17:e2:8d:a3:8d:d7:08:cc:
b8:82:04:32:ab:ea:8a:1d:3e:db:f5:6d:d9:a9:32:
de:28:07:23:9e:16:0d:b5:d7:94:b1:0c:84:05:10:
7b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:C0:5B:A3:6B:24:AD:1A:48:2C:F6:A6:BF:44:38:BE:83:DB:7A:F3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0413AE5A454D11F1A35913C2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.14.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:92:c2:5c:cc:bf:e1:de:f8:6e:be:b3:e6:b3:00:4d:26:a9:
46:bf:e6:bd:b2:f0:19:5e:e0:38:26:7f:23:66:e4:6b:64:da:
45:0b:7b:d0:02:e9:91:9c:7c:6d:ac:03:9c:6a:f0:01:8a:b0:
0b:c0:9a:20:ed:ac:01:a4:bf:52:c7:17:1f:48:d5:02:3c:08:
bd:cd:71:6d:46:ea:88:85:66:c4:9a:79:1d:74:b2:98:91:d3:
6d:bd:45:ef:47:02:c9:e4:b5:b8:3d:89:96:ad:a0:4f:3a:c2:
8e:db:bb:6c:30:36:e9:40:3a:7a:3c:31:f1:7f:b1:12:3e:0c:
5a:dc:d6:f3:51:50:c0:fc:66:02:9e:1c:17:41:9f:be:70:42:
bf:07:c8:7a:3e:8f:0d:5b:62:bb:6e:61:a7:50:c3:05:a7:f1:
53:84:95:50:d1:d6:3f:73:6d:78:df:80:d4:97:35:41:59:aa:
91:98:78:53:22:f8:3b:01:bf:d1:d7:13:35:05:37:2f:0a:73:
5e:9e:7b:63:d2:f2:35:e8:12:c8:aa:70:f7:79:ad:25:f0:da:
83:d8:22:3f:c0:5b:32:04:e7:89:0f:ce:61:6b:15:db:f5:5f:
0f:0d:35:16:b4:4d:cc:74:f9:b8:5d:6a:a5:d6:2e:98:c7:dc:
a0:f5:6a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 12:31:59 2026 by rpki-client