Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2925496856C011F1A512D7EECE1D38B0.roa
File: 2925496856C011F1A512D7EECE1D38B0.roa (raw, json)
Hash identifier: NvIDf1zMXTcgQUKeTUp5v3hojPpPAS1Yv//BJoXNUFY=
Subject key identifier: 90:62:E4:5A:0A:3E:44:0F:43:4E:36:E0:9E:D7:55:2F:FE:52:DB:1F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B89B
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2925496856C011F1A512D7EECE1D38B0.roa
Signing time: Sat 23 May 2026 15:57:55 +0000
ROA not before: Sat 23 May 2026 15:57:50 +0000
ROA not after: Wed 19 Aug 2026 15:57:50 +0000
asID: 139923
IP address blocks: 45.195.112.0/21 maxlen: 24
45.195.120.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112795 (0x1b89b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 23 15:57:50 2026 GMT
Not After : Aug 19 15:57:50 2026 GMT
Subject: CN=6a11ce83-effc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2c:69:68:f9:aa:a9:9d:4f:2c:24:70:f7:bf:
cf:3e:38:27:e3:7d:61:5a:f3:b1:8f:9c:26:f7:f4:
3b:b1:f0:90:48:92:f9:83:67:db:1e:02:6c:ab:0d:
ec:bf:28:79:06:a2:11:e7:f6:61:ca:ca:3c:d9:1d:
c4:0a:25:28:fa:7a:39:a7:ca:dd:55:61:12:19:8c:
e5:27:45:b1:f8:0c:f5:32:e6:22:28:74:2d:d0:c3:
9b:be:57:ea:37:1a:e8:57:e0:22:b8:f1:79:ca:da:
3e:e6:5f:a3:13:eb:f0:4e:cf:d1:5e:dd:44:92:c0:
09:cf:b7:e2:a4:b6:61:37:4a:5e:68:9a:02:ed:8d:
ec:64:f2:e8:14:04:54:d5:1a:87:e9:f6:64:26:77:
6f:6d:99:ad:a8:3d:4c:7f:66:3e:1b:70:11:9f:fa:
f4:e3:5d:2a:0f:90:23:68:80:f5:93:6b:70:e1:fa:
a6:a7:9d:f7:14:8a:19:cb:63:08:aa:52:3a:56:87:
f4:7f:61:68:82:a9:d3:9d:1e:28:23:b1:d5:ea:32:
02:08:fe:47:32:10:07:7e:3a:ca:dc:6e:41:db:6d:
c1:ae:09:af:52:ee:7b:8b:42:dd:07:d2:84:f6:08:
39:98:a6:44:b0:37:2d:3d:8f:4f:73:a6:96:f2:28:
f0:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:62:E4:5A:0A:3E:44:0F:43:4E:36:E0:9E:D7:55:2F:FE:52:DB:1F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2925496856C011F1A512D7EECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.112.0/20
Signature Algorithm: sha256WithRSAEncryption
b5:c0:86:80:b0:df:58:64:e3:eb:cf:d9:39:9a:35:27:98:da:
d6:95:32:ba:c2:ea:59:98:3a:ed:58:eb:15:bf:cf:fc:e6:6f:
be:2b:30:9d:0c:74:ed:9c:78:f9:5b:88:bc:f6:36:66:1c:6c:
79:4d:2c:db:ef:b5:c0:32:2b:2e:6b:0e:3a:a6:cc:c4:9b:19:
6c:2b:30:98:42:e5:f4:d0:11:73:25:2b:a7:b8:1d:04:b8:72:
03:dd:70:a2:1a:74:86:4c:61:13:17:e4:7a:9f:cd:0f:cf:ac:
8b:a5:17:30:15:83:62:ac:3e:99:2b:1b:d8:42:f8:65:b3:39:
79:45:79:2e:f0:aa:7a:26:be:23:f1:d9:fa:00:5f:b5:4d:30:
d0:6f:16:63:86:02:89:4b:88:f3:40:4c:a1:12:48:d4:a1:9f:
f0:bf:12:6d:2b:36:f8:b1:e7:7c:d7:6c:5e:d2:16:0c:e0:84:
18:93:52:44:59:e3:f7:70:52:bf:56:93:1f:91:3d:94:27:8c:
37:cd:ed:bc:7b:22:ab:6f:61:a6:7c:bd:32:0b:7b:a7:99:11:
06:47:12:12:3c:4e:99:42:0a:79:98:05:d7:4b:1c:ea:fc:de:
6f:e7:02:b1:59:72:0a:a6:8e:52:d7:b3:e0:44:15:c3:95:4d:
d5:10:cb:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:14:37 2026 by rpki-client