Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2AE0A24E5C3211F1A653560ACF1D38B0.roa
File: 2AE0A24E5C3211F1A653560ACF1D38B0.roa (raw, json)
Hash identifier: 3oIxto2bRdTv2a8XHXE/CELD0GFczURurPE1e179CFk=
Subject key identifier: 31:C2:E8:01:C4:8B:B9:7C:0E:59:50:47:11:84:B8:AA:AF:F2:C0:D1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BAE7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2AE0A24E5C3211F1A653560ACF1D38B0.roa
Signing time: Sat 30 May 2026 14:16:37 +0000
ROA not before: Sat 30 May 2026 14:16:32 +0000
ROA not after: Wed 08 Jul 2026 14:16:32 +0000
asID: 211459
IP address blocks: 45.194.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113383 (0x1bae7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 30 14:16:32 2026 GMT
Not After : Jul 8 14:16:32 2026 GMT
Subject: CN=6a1af144-b625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:48:e1:13:bf:81:06:af:c5:62:65:5d:e0:63:
1d:57:81:e0:1e:27:5f:a9:6e:11:d8:f1:e6:d5:71:
d8:05:38:2d:eb:0d:16:90:75:77:fd:a1:49:5d:ba:
3e:a4:75:cc:d5:54:22:f5:b1:59:8a:b0:5b:89:64:
42:dc:1f:20:30:2f:aa:7d:c9:c4:78:9e:5e:5e:6b:
7f:4e:64:4c:bf:d7:2c:a3:46:48:8d:be:b6:50:7b:
50:d6:2f:ee:1f:93:e1:c0:88:c9:04:a6:57:93:43:
c7:dd:30:ae:e8:2c:e9:8b:2f:6e:b7:92:96:75:4c:
d0:0a:a0:00:ce:00:5b:a9:85:c7:47:0f:53:b8:cd:
d7:33:88:7a:0a:3f:24:ad:ac:e0:49:eb:9c:dd:c3:
1d:8c:1b:3c:da:50:a4:c4:91:08:83:80:5e:10:86:
5e:fc:90:b3:91:32:34:1a:a6:ec:f6:16:3a:89:48:
38:0b:5f:a5:8b:a1:77:25:ef:3d:31:48:18:10:ad:
4f:eb:46:4e:bb:6f:a4:09:b6:cc:d9:f7:2b:33:e8:
54:c3:c3:17:38:f4:f9:29:5e:8b:bf:2d:c0:c3:05:
8a:f1:07:77:62:c4:12:f1:c8:cc:ca:52:63:f5:57:
64:57:48:c7:c2:e7:0c:4e:7c:4f:f3:88:a9:f5:50:
82:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:C2:E8:01:C4:8B:B9:7C:0E:59:50:47:11:84:B8:AA:AF:F2:C0:D1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2AE0A24E5C3211F1A653560ACF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.79.0/24
Signature Algorithm: sha256WithRSAEncryption
26:b9:59:d1:08:19:5f:6f:7c:81:2d:eb:f4:0d:6f:34:8e:61:
e8:88:38:c1:e7:21:e2:c3:08:9f:af:63:83:cf:af:d6:f6:08:
38:5d:c9:b1:8d:ec:90:25:ce:48:1f:e0:d1:2b:50:58:cd:e1:
5f:ae:16:d1:65:5b:30:3b:3a:e2:ab:c0:67:87:6a:ac:e6:04:
83:b4:35:c1:ec:f6:4e:ff:13:ff:15:34:a9:4e:b0:8e:16:fa:
09:8d:bd:d1:73:a5:b0:9e:3e:e1:d5:a8:a4:99:8f:30:34:47:
b7:03:23:b7:11:4f:f3:7e:13:b0:be:59:6a:eb:f9:af:38:86:
c3:3f:53:18:72:cc:1c:e2:e0:be:c2:c6:f8:af:d8:ba:1a:03:
f4:62:78:a0:00:61:31:0f:10:c7:95:94:f6:ae:cb:ee:8f:a4:
00:88:c8:f6:9f:d2:12:1c:dc:0c:ca:f9:ff:b1:73:c8:dc:e4:
e4:04:de:d9:01:0f:cf:03:53:30:ad:51:62:71:24:82:a5:64:
7e:5b:36:de:62:2b:05:f5:c3:a8:09:b4:f1:25:c3:29:80:5a:
e1:a8:f9:5a:97:44:e3:04:8a:22:a5:26:90:9d:3d:d5:83:0c:
ba:89:ab:07:2d:b7:eb:26:63:1c:3e:9c:78:9b:d4:e5:5a:0e:
2e:50:74:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:07:02 2026 by rpki-client