Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0E8B09BE583A11F1874862EECE1D38B0.roa
File: 0E8B09BE583A11F1874862EECE1D38B0.roa (raw, json)
Hash identifier: ubAnTKe7dOcdPG40m8xhAWAyOkluog5gazEpD2MKEOU=
Subject key identifier: 10:CF:DD:E9:CF:FA:D4:55:27:91:25:AC:F0:C7:B5:9D:95:75:69:F7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B990
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0E8B09BE583A11F1874862EECE1D38B0.roa
Signing time: Mon 25 May 2026 13:03:06 +0000
ROA not before: Mon 25 May 2026 13:02:54 +0000
ROA not after: Wed 19 Aug 2026 13:02:54 +0000
asID: 139923
IP address blocks: 45.195.112.0/21 maxlen: 24
45.195.120.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113040 (0x1b990)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 25 13:02:54 2026 GMT
Not After : Aug 19 13:02:54 2026 GMT
Subject: CN=6a14488a-a9a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:db:46:96:2b:17:da:16:ae:20:74:1e:63:a2:
1b:b7:da:78:c6:81:8e:ad:18:e8:7c:d8:8e:46:f9:
87:de:34:5b:4e:21:f5:6e:be:4f:00:c0:29:db:6f:
72:15:48:12:03:21:f7:7b:47:52:29:7e:0b:49:e3:
ac:b2:af:12:0b:38:e6:e7:50:78:a3:3d:1e:0a:9c:
18:63:4c:c4:9e:b2:97:72:97:ad:f3:d5:e6:97:c2:
ad:be:45:28:9e:55:d0:d7:51:08:47:4b:da:58:bd:
e0:94:58:30:bb:e1:83:1e:3a:4c:47:a7:76:f0:62:
06:7e:27:82:23:33:f0:96:5c:db:f8:0b:be:e4:2b:
45:c5:3a:01:75:af:f7:8c:c9:65:11:34:da:bd:fd:
07:68:c4:0e:b9:eb:8a:54:dc:c2:b9:ec:7b:6b:40:
52:63:e2:59:74:9c:86:bc:97:6b:36:bb:04:bd:49:
d1:50:19:3a:c4:ff:3f:c9:66:67:42:5e:12:70:6f:
76:fc:df:72:c2:38:34:21:81:6c:ae:9c:8d:97:d2:
6a:8b:10:68:aa:63:ac:ee:fa:cd:f1:06:4d:50:1c:
b3:8d:e6:12:fa:e8:57:a4:46:8f:84:a1:54:56:7d:
fe:55:0d:f7:e4:27:aa:96:11:f9:4a:e7:5f:b0:2e:
3e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:CF:DD:E9:CF:FA:D4:55:27:91:25:AC:F0:C7:B5:9D:95:75:69:F7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0E8B09BE583A11F1874862EECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.112.0/20
Signature Algorithm: sha256WithRSAEncryption
67:21:0e:40:b6:ea:09:4e:48:c2:97:71:42:ef:22:45:e0:73:
76:61:83:2d:40:8f:20:1c:e5:57:d9:1c:7b:28:60:a2:7f:63:
53:7c:1f:d1:36:36:94:da:63:78:7e:96:10:9e:b9:6a:04:a6:
42:6d:9c:1b:f3:0f:31:11:c1:77:fe:e4:6d:2a:0f:84:d0:45:
74:dd:19:f1:d7:86:d4:9f:26:96:c3:91:bb:d5:f0:80:a6:4b:
3e:0b:bc:8a:0d:1c:67:48:7c:f0:20:b3:07:63:82:65:e7:96:
70:16:0d:82:e4:04:b3:45:7b:ef:72:0c:e2:43:f9:03:52:ef:
63:5e:70:a8:19:0b:a7:23:ef:7c:bb:3e:e7:9d:bf:f3:be:bc:
39:af:18:d1:55:ea:10:da:fb:ac:79:94:b2:1e:c0:17:c7:c7:
55:b6:17:07:6f:11:82:2a:8c:1e:79:4b:d4:05:ce:cf:ca:1b:
f6:05:64:a5:f2:61:f8:23:8b:62:5a:86:3e:51:80:c6:4f:73:
d9:48:4d:dc:81:97:81:b0:39:39:08:69:c7:0c:a7:10:ff:48:
7a:d4:10:88:3b:29:5a:c4:f0:69:87:0c:a5:f0:48:07:27:4b:
86:d8:eb:52:3b:cd:e4:ec:7d:20:f0:f4:0c:44:b5:59:33:87:
58:27:0b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:07:31 2026 by rpki-client