Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/177C4520510911F190F094A3CE1D38B0.roa
File: 177C4520510911F190F094A3CE1D38B0.roa (raw, json)
Hash identifier: Vjs3ov5mIAauuVfwjgP9RImH+ZVTvgy3TW9oaLaB9Fw=
Subject key identifier: B2:63:27:BE:83:BC:9B:A4:5D:45:B4:E4:FC:3C:01:63:E9:A0:0B:5D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B513
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/177C4520510911F190F094A3CE1D38B0.roa
Signing time: Sat 16 May 2026 09:24:52 +0000
ROA not before: Sat 16 May 2026 09:24:47 +0000
ROA not after: Tue 05 Oct 2027 09:24:47 +0000
asID: 63199
IP address blocks: 45.196.16.0/23 maxlen: 24
45.196.18.0/23 maxlen: 24
45.196.20.0/23 maxlen: 24
45.196.22.0/24 maxlen: 24
45.196.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111891 (0x1b513)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 16 09:24:47 2026 GMT
Not After : Oct 5 09:24:47 2027 GMT
Subject: CN=6a0837e4-01e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:7d:97:ff:cd:4b:f8:b5:d7:83:1d:2c:6b:f5:
68:72:19:1b:8f:dd:0d:d1:7d:8c:9a:e7:8d:4c:82:
1b:b2:d8:e1:73:b2:bf:65:28:d6:01:31:82:f4:ff:
33:a8:0b:2f:8f:5a:72:26:88:88:ec:b4:d6:4d:8d:
76:91:0e:5a:6b:60:d3:fd:47:10:95:20:02:dc:b8:
19:4f:90:b3:0a:09:73:3f:28:0c:f9:cf:e4:71:e8:
b9:73:05:c5:44:53:f5:f6:85:4a:dd:25:7f:41:3e:
dd:5e:a7:b0:a6:d3:b6:9f:12:84:36:b4:ce:46:de:
47:e3:d4:b3:12:ae:e1:e0:67:04:d5:f7:80:e5:70:
1e:02:e0:6a:ae:b4:bf:c5:05:93:b8:cc:ac:53:7d:
28:66:69:63:32:28:e1:5c:99:dc:74:a6:85:95:a4:
d1:53:bb:a2:ae:c7:af:81:a2:b4:d7:3c:e5:2e:19:
41:50:5f:e8:12:7a:d0:87:1a:f3:2b:5c:2f:75:29:
57:4c:1a:3c:ea:d9:50:7b:17:48:10:6e:b1:18:d9:
c8:62:cb:ae:d7:6a:a3:27:37:d0:9d:aa:e3:05:b9:
c5:18:12:50:8e:ad:54:4f:77:95:7a:84:d7:ff:14:
8a:b8:2e:15:33:1b:c9:06:20:64:7d:7b:83:8a:b7:
75:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:63:27:BE:83:BC:9B:A4:5D:45:B4:E4:FC:3C:01:63:E9:A0:0B:5D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/177C4520510911F190F094A3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.16.0/21
Signature Algorithm: sha256WithRSAEncryption
bb:38:b1:27:7a:a8:70:9c:d6:a9:b1:b6:f5:23:5e:fc:b0:12:
46:18:3b:94:38:c0:86:6a:a7:58:08:a6:b0:89:4e:5f:8b:5a:
32:ae:95:08:00:23:d6:05:a6:95:4b:be:40:c6:1f:07:29:42:
db:35:e3:68:2f:22:27:d0:2a:78:8b:3c:05:b1:fe:d9:b0:b0:
1c:fd:df:37:79:cf:d7:07:0c:db:8c:f2:ad:7f:56:31:7a:b6:
c1:63:c0:c7:12:e2:f2:b5:87:94:70:d6:5d:56:4e:bc:34:3f:
45:c6:26:73:57:b9:96:d6:29:2b:53:12:94:85:fb:29:07:d9:
3a:15:c6:8b:10:02:64:a7:58:fe:85:82:4a:e3:8c:fe:68:cc:
73:d0:df:ed:f3:69:2d:e1:a8:dc:ce:9b:c1:9b:72:51:f6:c1:
27:ec:10:e5:86:08:26:fa:94:cb:33:c1:8c:5d:36:4a:ba:b5:
7b:5d:3c:f5:3e:6b:dc:1a:68:e3:4b:00:1f:49:a5:28:5e:26:
a0:67:d3:38:f4:2c:d8:1e:87:33:83:8a:83:18:70:18:df:2d:
b2:79:de:e8:ac:0e:b6:41:2c:42:cf:e3:20:57:bf:89:2d:61:
98:df:0c:ab:f3:9b:22:55:80:30:e9:d4:12:58:51:57:6d:37:
58:89:0c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:21:29 2026 by rpki-client