Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/09083D3A4F6211F1B86C4318CF1D38B0.roa
File: 09083D3A4F6211F1B86C4318CF1D38B0.roa (raw, json)
Hash identifier: XS+ZTdsAj7moYRF0iF30IJwCCLSOI1MEkAJyjxdysgw=
Subject key identifier: 5D:B5:6F:1A:2E:32:D1:B1:41:1A:A2:F3:73:99:66:8D:13:61:67:B3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B469
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/09083D3A4F6211F1B86C4318CF1D38B0.roa
Signing time: Thu 14 May 2026 06:56:30 +0000
ROA not before: Thu 14 May 2026 06:56:25 +0000
ROA not after: Sat 13 Jun 2026 06:56:25 +0000
asID: 273980
IP address blocks: 45.192.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111721 (0x1b469)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 14 06:56:25 2026 GMT
Not After : Jun 13 06:56:25 2026 GMT
Subject: CN=6a05721e-8747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:74:41:d3:66:18:e6:dd:91:8c:da:cc:ee:77:
fc:f5:a7:be:86:18:ce:fa:9f:5c:2b:a9:8f:9f:3f:
f2:37:de:13:fd:67:e9:28:19:42:16:e0:d6:ea:89:
80:4f:37:24:cd:bb:da:9b:7f:a0:26:03:12:78:25:
9b:9c:08:f9:45:cf:fc:aa:c5:9d:7c:c9:51:15:ab:
77:99:74:fd:83:3e:c8:4e:4a:a0:57:8b:15:b9:a5:
cd:4c:67:5e:91:cd:75:eb:0e:69:c5:5c:7b:92:25:
07:3a:72:24:45:ee:ec:63:46:00:40:9f:bb:ce:06:
c5:45:23:87:5d:7c:f3:eb:f7:e9:93:c8:04:17:10:
97:dc:c3:fa:fa:fa:4e:b6:87:a3:6d:75:88:fc:6e:
de:e9:5d:10:53:85:c0:66:6f:81:37:01:89:f0:32:
c1:b0:10:f3:d3:ea:34:1f:b7:0a:b4:9b:f7:af:f3:
a8:ad:bc:19:f1:c6:9f:14:06:ea:2c:b5:f2:da:96:
cc:42:df:bc:78:46:f2:a3:3f:34:52:9e:e4:40:f4:
11:e2:b0:07:2b:1d:63:2a:52:20:02:05:d1:ba:eb:
cb:4d:89:a9:a0:2e:02:90:0a:dc:f6:34:d1:87:b2:
a0:39:50:e9:c3:73:ff:46:12:1c:04:c8:e6:03:0b:
ab:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:B5:6F:1A:2E:32:D1:B1:41:1A:A2:F3:73:99:66:8D:13:61:67:B3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/09083D3A4F6211F1B86C4318CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.3.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:ac:a8:d2:12:52:5e:84:30:04:ef:5d:98:1e:c3:bc:e4:90:
eb:73:0b:03:b7:74:cc:98:e2:b2:65:ad:38:9d:d5:95:d0:64:
0c:5a:2f:39:fa:d2:31:07:07:a3:08:41:7d:97:91:df:af:49:
64:41:ab:dd:29:12:78:7c:0f:b7:f6:76:cf:54:bc:64:e3:ea:
aa:ce:72:d4:ee:0c:45:82:74:dc:69:8c:e2:b4:4c:dd:ea:c7:
6f:74:a2:0f:2a:a7:6a:c4:db:40:7a:fe:0c:db:15:7d:85:b4:
5a:5e:a4:b2:be:6c:74:29:74:82:2b:72:2c:58:b5:77:b1:97:
2d:bc:8a:ae:a5:20:f2:23:99:94:20:23:c3:86:50:2d:d0:45:
5c:60:b3:e5:e4:c7:5a:d6:7e:bf:16:ec:8d:6a:ef:9f:f1:38:
ef:27:76:7f:e3:2c:e5:37:a0:69:53:8c:62:72:bd:8f:ae:f9:
8f:b9:3f:a8:f3:a4:85:b9:36:8b:a3:02:a9:c8:3e:6d:91:ae:
51:8b:e9:3f:4d:1a:44:b1:60:44:38:6a:24:f5:6d:8d:4c:56:
31:96:0a:74:9a:94:a1:67:7e:54:e0:59:e2:08:e4:7a:64:9e:
30:f7:92:f1:a1:9e:ea:b0:7b:73:73:9a:d2:84:a1:80:8b:cf:
1b:69:54:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:07:07 2026 by rpki-client