Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/105F75A65C2F11F1BFF99EF9CE1D38B0.roa
File: 105F75A65C2F11F1BFF99EF9CE1D38B0.roa (raw, json)
Hash identifier: 5C9S3uxTOQz+DNP0EaKzDR03eG0o00iiE71qyQHablM=
Subject key identifier: 38:87:A1:B7:2B:8F:48:5F:20:38:FA:D5:99:D0:0E:5E:C3:5F:B6:8F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BAE1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/105F75A65C2F11F1BFF99EF9CE1D38B0.roa
Signing time: Sat 30 May 2026 13:54:24 +0000
ROA not before: Sat 30 May 2026 13:54:19 +0000
ROA not after: Wed 12 May 2027 13:54:19 +0000
asID: 140641
IP address blocks: 45.195.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113377 (0x1bae1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 30 13:54:19 2026 GMT
Not After : May 12 13:54:19 2027 GMT
Subject: CN=6a1aec0f-19e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2e:c5:9a:39:76:ac:dd:f7:73:63:91:06:3c:
75:70:a6:b0:84:84:64:3e:f6:8a:98:9f:c5:cc:10:
29:3a:1e:53:98:4a:e5:35:c3:a7:4c:6c:29:af:8e:
70:e2:f7:70:96:a5:59:94:0c:9d:1d:85:3f:d6:27:
63:c9:20:72:3b:42:68:35:8c:de:0f:ea:38:97:c6:
0e:63:e2:58:ae:50:ab:a8:00:7c:29:f3:7f:89:92:
38:86:ef:40:7f:0e:a2:27:b4:f4:1e:91:74:ca:a5:
76:25:0c:25:36:52:f3:ac:0f:d3:d0:08:c4:62:ff:
3e:d7:2c:3e:7d:a6:1d:3d:7f:38:d2:da:3b:73:15:
9a:30:51:c4:f3:cc:aa:18:3b:04:bc:22:d6:9f:7e:
4d:5c:1e:64:0a:43:a1:f6:73:2e:6f:57:c3:0d:6a:
10:b6:02:f7:09:73:5e:99:e1:8c:9f:bb:97:23:f9:
43:26:28:2a:27:e4:6b:68:f1:c1:b0:cf:98:bc:63:
63:51:6c:52:95:01:f9:34:97:e9:e0:9e:71:7f:4b:
9f:c7:3e:97:54:76:ee:57:48:15:6b:5a:02:03:61:
15:a0:77:c6:94:a3:b7:39:3d:19:69:fe:f8:98:b1:
0e:8d:ac:49:c4:6d:1c:90:d0:b8:48:f2:48:ea:a9:
ba:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:87:A1:B7:2B:8F:48:5F:20:38:FA:D5:99:D0:0E:5E:C3:5F:B6:8F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/105F75A65C2F11F1BFF99EF9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.105.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:17:77:17:e9:c8:cc:ec:7b:e3:ec:c8:50:98:a2:2b:0d:a5:
9d:29:d5:30:86:2a:ba:1b:38:20:1c:e1:cf:d0:a5:04:fb:c5:
c6:fd:3e:07:05:e6:99:de:d8:09:e0:55:b2:50:ad:86:6c:bb:
70:12:d7:ab:a6:7f:30:dd:c6:c9:4c:35:35:ce:0a:d6:0c:f2:
82:e5:ff:49:a5:4c:4d:37:13:7d:07:cd:50:60:a9:5e:4b:56:
c7:39:7b:37:5a:34:26:20:6f:8f:ac:0b:71:31:a6:1f:cf:b0:
73:d0:8d:0a:8c:03:77:27:d8:f6:f8:fe:b9:d4:eb:04:9a:2b:
9b:46:bb:ce:c2:d7:0a:62:d7:fd:33:e5:7a:cd:2f:4d:74:63:
a7:c8:38:c1:44:cb:51:50:11:84:6a:08:64:ec:6c:47:47:07:
06:e3:98:96:9a:49:f1:40:02:7d:49:00:46:f3:da:7c:d7:4e:
1c:2a:20:45:fb:6e:19:cf:df:69:eb:1b:93:09:ad:28:d4:91:
7a:fd:0f:90:fa:d2:f6:6c:b2:5f:47:da:5e:6f:2f:0e:d9:82:
df:5a:e2:7a:96:0d:10:9d:f9:21:1d:c1:5d:da:4a:04:cd:65:
35:d2:54:ac:f1:f5:e2:1b:31:50:4d:cc:16:0f:f1:1e:fb:c0:
ab:d1:80:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:07:18 2026 by rpki-client