Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0CC731245BCE11F1965F40A4CE1D38B0.roa
File: 0CC731245BCE11F1965F40A4CE1D38B0.roa (raw, json)
Hash identifier: OsnT+45fvqsvuM07xobB8gMIAu+0XgeQhHVLm6+3s9o=
Subject key identifier: E7:6D:6B:B0:5A:52:A7:93:F5:D6:09:BE:C8:2F:50:FF:5F:76:76:B5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BAC7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0CC731245BCE11F1965F40A4CE1D38B0.roa
Signing time: Sat 30 May 2026 02:19:56 +0000
ROA not before: Sat 30 May 2026 02:19:50 +0000
ROA not after: Mon 08 Jun 2026 02:19:50 +0000
asID: 212552
IP address blocks: 45.195.200.0/24 maxlen: 24
45.195.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113351 (0x1bac7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 30 02:19:50 2026 GMT
Not After : Jun 8 02:19:50 2026 GMT
Subject: CN=6a1a494c-b4db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:df:2c:e9:9d:4b:33:c0:a9:73:91:8c:a0:ab:
18:0b:4d:fd:88:fd:a5:94:e5:e8:cd:d4:88:be:96:
6a:fe:c5:43:86:e3:6e:05:4a:bf:e6:61:45:bf:f5:
2d:7b:1a:f6:64:4e:03:62:e8:6b:f4:89:5b:36:45:
cf:8b:6d:c6:9b:3a:2b:4d:24:ae:40:33:ec:6d:ae:
f2:0c:a3:27:e3:42:8a:0d:90:e3:fe:03:04:74:8e:
da:51:31:26:83:a4:3f:60:70:c0:20:97:8f:23:e6:
f9:e9:82:e4:a6:0a:8b:51:f0:b3:6d:61:df:08:67:
db:a3:ef:06:3b:91:53:7b:70:ea:52:3c:c5:e7:eb:
2e:08:95:63:c7:e2:4b:c4:20:01:78:66:ec:f6:5a:
1e:2f:ca:4f:2b:bb:e4:22:9f:dd:91:d7:cd:57:d0:
4c:af:db:9a:81:0c:99:7e:fa:3c:4c:02:d2:9a:9d:
40:e4:f1:d2:1a:3b:1b:94:ff:2d:d2:11:f7:26:ac:
b7:52:74:78:ad:71:09:00:12:9b:ec:99:46:4d:34:
f6:f0:05:25:52:46:d2:df:68:77:41:65:df:e5:f3:
09:07:62:87:df:b0:47:9f:ac:6d:3a:b1:bc:dc:71:
2e:61:97:b7:b9:a7:31:5a:5d:14:a3:34:88:32:8e:
ed:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:6D:6B:B0:5A:52:A7:93:F5:D6:09:BE:C8:2F:50:FF:5F:76:76:B5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0CC731245BCE11F1965F40A4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.200.0/24
45.195.250.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:a8:d9:bf:bb:14:a0:4e:1d:fc:39:f9:73:61:39:bc:88:24:
18:55:82:4a:9d:2b:41:80:9c:dd:01:c8:7c:4b:3f:29:5b:64:
92:5d:e6:1d:37:e5:1f:27:02:76:74:77:8a:b3:8a:f1:a6:a8:
c0:ff:9a:a9:8e:da:3a:b6:76:36:99:63:0d:a8:5d:ad:13:10:
eb:17:61:2e:62:f3:ee:96:5e:98:51:95:dc:72:74:29:41:e0:
56:1b:de:51:31:af:12:d6:95:29:ca:89:be:41:d5:cc:89:04:
8b:04:09:5b:7e:e5:f3:91:5d:73:08:f2:05:5c:77:1a:c9:6b:
a4:fb:71:d0:ed:27:15:9a:7b:83:39:f8:e5:26:de:e4:a2:38:
8c:72:ab:65:f7:72:e7:3c:3b:e2:ee:35:fe:f9:da:46:98:2f:
dc:08:b4:88:17:2f:ef:82:5a:36:7b:85:37:f5:de:c4:22:7a:
a4:7d:63:4e:90:46:96:0c:0e:a5:a9:54:ff:40:24:0b:26:2a:
08:ac:1c:3f:73:16:c6:9f:74:25:2b:00:13:08:df:ee:b3:9c:
e4:3c:9e:05:3f:f7:3b:6f:ef:37:ae:13:3d:e8:f0:5e:cd:44:
96:04:35:31:8b:25:9f:4c:b7:d7:be:e2:fa:21:06:cd:82:48:
35:32:18:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:35:40 2026 by rpki-client