Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0FCFFF3C81B111F1B4D7D8CECE1D38B0.roa
File: 0FCFFF3C81B111F1B4D7D8CECE1D38B0.roa (raw, json)
Hash identifier: bpUa8eY7L/g+GcTEmssvlR3pv/rs8GGmlgde+76I4FQ=
Subject key identifier: AC:1A:3A:CA:4C:DA:42:08:55:A7:F4:20:CD:01:05:E7:F3:40:3B:36
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C5A2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0FCFFF3C81B111F1B4D7D8CECE1D38B0.roa
Signing time: Fri 17 Jul 2026 07:28:10 +0000
ROA not before: Fri 17 Jul 2026 07:28:06 +0000
ROA not after: Tue 17 Jul 2029 07:28:06 +0000
asID: 17561
IP address blocks: 45.192.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116130 (0x1c5a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 17 07:28:06 2026 GMT
Not After : Jul 17 07:28:06 2029 GMT
Subject: CN=6a59d98a-2c98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c3:24:9b:e3:d3:68:d0:40:39:a8:f3:d7:60:
32:6e:de:4a:4f:a7:79:b6:be:91:71:6b:5a:34:0c:
dc:dc:46:6e:23:ec:15:b7:cc:e7:af:3b:e6:82:42:
de:3c:8b:d2:aa:3d:5e:35:6d:98:c2:81:98:90:e9:
dc:f0:0c:29:35:ea:d9:88:09:51:44:9b:df:44:89:
15:0f:1d:e7:0b:1b:fc:02:f4:ee:50:f7:10:81:5d:
e6:09:3a:a3:17:43:b6:90:8f:e3:d0:de:9e:b4:8e:
15:6e:d1:13:5a:66:df:83:5b:29:58:02:b6:36:f8:
3d:73:aa:39:74:86:58:dc:b8:23:b5:2a:3d:23:92:
b8:5e:8d:60:57:05:67:9b:90:59:d2:49:ed:63:f4:
97:32:85:83:61:1a:4e:d7:1f:6d:60:2e:ff:6b:fb:
f2:0f:1d:e0:38:1b:f9:0c:b0:b4:65:cf:a4:ea:05:
b1:12:29:98:a1:51:3b:11:c2:22:1a:88:b8:47:28:
91:ad:0a:56:e8:93:55:ce:6c:df:8d:dd:59:3a:69:
e5:b9:90:30:d3:37:e9:16:af:21:c8:04:f3:65:2f:
8d:3d:28:f2:9d:1d:95:4b:7e:df:98:1d:f1:10:2c:
25:dc:eb:56:f2:65:79:f2:39:71:ac:2c:d1:a4:d9:
a9:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:1A:3A:CA:4C:DA:42:08:55:A7:F4:20:CD:01:05:E7:F3:40:3B:36
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0FCFFF3C81B111F1B4D7D8CECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.129.0/24
Signature Algorithm: sha256WithRSAEncryption
07:82:e4:17:75:84:bd:3c:98:c3:ba:8a:37:2d:b2:a0:52:94:
b0:69:f7:58:cd:3e:24:a1:6c:72:74:ed:39:b2:d4:b5:c7:6f:
8f:23:07:c7:15:64:a8:56:90:4c:48:c4:11:52:b2:01:96:fe:
f8:e6:c8:45:21:e1:50:d2:e5:41:c4:78:e4:fb:b7:09:a6:44:
bf:1e:89:7e:b6:6b:95:12:bf:8e:f7:3d:36:44:9a:76:d6:7f:
0a:ea:04:71:da:78:01:6d:16:01:5e:35:01:58:68:10:40:53:
14:93:07:05:55:51:ba:40:c4:cb:ff:b3:e0:f3:ca:2b:c6:14:
b1:7e:92:f3:03:bc:a6:a1:f2:17:e2:98:b0:c4:8e:8e:a7:28:
5e:f1:81:dc:4e:79:9d:84:63:35:e9:60:31:3a:ff:9e:c1:77:
15:cc:27:40:7f:30:6f:e0:21:0c:71:4b:d9:13:34:2d:a5:02:
6d:13:dd:08:06:52:5b:e1:7b:66:00:27:f0:75:1c:e0:dd:41:
ed:46:69:2a:4d:b3:00:05:76:6d:df:7c:d2:ca:b3:6e:2f:9d:
65:28:4e:0d:bd:30:e1:ea:23:a3:c9:5e:98:af:2a:d0:29:9f:
24:07:30:9f:e5:d1:7b:2e:47:45:79:f9:67:02:46:07:08:ac:
bf:76:8c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:45 2026 by rpki-client