Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/097365585EB511F1BE74BAC8CE1D38B0.roa
File: 097365585EB511F1BE74BAC8CE1D38B0.roa (raw, json)
Hash identifier: +TEq00Lm+MHSk91Ie6ivAKyxgIjdvmxXXI2TKflApmw=
Subject key identifier: 67:38:99:DF:CA:9A:80:C5:57:C1:C5:62:F5:71:12:D7:9B:4C:2D:95
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BB68
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/097365585EB511F1BE74BAC8CE1D38B0.roa
Signing time: Tue 02 Jun 2026 18:58:27 +0000
ROA not before: Tue 02 Jun 2026 18:58:22 +0000
ROA not after: Tue 21 Jul 2026 18:58:22 +0000
asID: 212238
IP address blocks: 45.194.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113512 (0x1bb68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 2 18:58:22 2026 GMT
Not After : Jul 21 18:58:22 2026 GMT
Subject: CN=6a1f27d3-3faa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:6c:66:0c:cb:bc:69:d8:af:b7:39:3c:df:01:
59:2e:11:8a:22:ae:3e:41:20:72:4f:cf:9c:6f:f3:
ba:32:4d:7d:4d:19:2c:1b:89:a7:d4:77:50:61:6c:
e2:f2:d5:bc:94:f2:c4:f4:2e:15:dc:30:60:13:60:
35:18:d7:13:2b:71:f3:c1:9a:2b:e9:3a:af:a5:87:
10:56:27:5a:d3:f9:d5:12:6a:1c:e4:ba:d9:be:7b:
06:38:6c:1e:86:cc:a4:be:15:64:03:a9:f6:f8:81:
cb:1c:d7:31:d5:0a:4d:56:af:b0:1d:42:34:29:c1:
8f:2a:be:60:f9:79:ed:37:fd:de:a0:c2:98:33:c6:
ad:a7:f1:c5:e1:e1:46:62:5b:1c:d0:72:4b:0b:19:
27:3b:f1:8b:52:d0:9b:dc:1e:3c:2d:ba:47:77:2a:
5f:f8:4b:d5:b6:48:63:6f:4d:0a:ce:35:88:1e:0c:
e5:1e:61:3e:cd:18:8f:d5:8b:27:dd:2c:f2:09:54:
c4:18:57:1a:be:6b:7f:2b:2e:11:a9:40:69:a1:90:
34:f7:d1:1b:42:27:a7:e8:1b:ba:9c:f2:a6:49:09:
e0:ba:30:87:0c:84:00:a4:13:52:e0:3a:45:2f:ec:
86:01:5e:1d:ec:c5:19:30:17:c5:96:fe:a0:21:65:
f1:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:38:99:DF:CA:9A:80:C5:57:C1:C5:62:F5:71:12:D7:9B:4C:2D:95
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/097365585EB511F1BE74BAC8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.71.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:7c:5a:a3:b0:45:78:bf:c3:21:22:82:55:4a:c0:6c:27:c7:
25:a1:c4:d6:64:e0:cc:5a:ee:80:0f:7f:ed:e4:77:66:ff:f6:
d5:2e:9c:36:57:92:ac:46:de:c1:48:43:f5:95:bd:4c:3f:13:
8a:bd:bc:ad:4d:11:d8:06:22:30:2d:4f:44:79:a0:73:ef:77:
c2:dd:ab:b7:69:de:cb:f0:39:85:bd:59:74:4b:c3:2f:20:2c:
5a:ef:f1:b7:2f:d6:ff:f8:e3:75:ef:9e:60:54:68:b0:a0:c5:
8d:b5:47:1f:50:1c:38:8c:3d:01:f4:e9:3a:04:16:71:73:91:
e0:7a:73:88:bb:76:17:5a:3d:c5:4b:c8:b1:6d:1a:85:18:77:
26:10:b2:87:22:99:21:44:de:0d:2f:e9:6b:4b:16:1b:99:ef:
f7:df:ee:60:9a:89:ed:c2:2e:68:cc:33:01:e2:6e:7d:35:33:
a1:8e:25:0e:d2:9c:2f:14:a3:2b:8e:bf:4c:88:ac:f6:3f:fa:
1b:18:7c:20:c2:0c:d6:73:b7:d7:37:b0:0b:7c:af:8a:cd:88:
da:ed:5e:8c:ef:2c:0a:f4:61:37:b7:0a:8c:ff:0e:81:48:da:
57:42:bb:31:ca:91:a6:21:e7:89:dc:f5:b9:0d:33:ad:f5:0b:
bf:16:13:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:14:07 2026 by rpki-client