Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/361E7C6C5C0511F1A6CE4E01CF1D38B0.roa
File: 361E7C6C5C0511F1A6CE4E01CF1D38B0.roa (raw, json)
Hash identifier: +83Waq07cY3HU9cg1Y0WGXdH/L48/fn4O5Hvd8pA0Lc=
Subject key identifier: F3:ED:6B:F9:3C:1B:76:42:E6:73:4F:30:76:C6:5C:99:6B:79:1D:9D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BACF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/361E7C6C5C0511F1A6CE4E01CF1D38B0.roa
Signing time: Sat 30 May 2026 08:54:48 +0000
ROA not before: Sat 30 May 2026 08:54:42 +0000
ROA not after: Fri 11 Sep 2026 08:54:42 +0000
asID: 211459
IP address blocks: 45.194.79.0/24 maxlen: 24
45.195.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113359 (0x1bacf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 30 08:54:42 2026 GMT
Not After : Sep 11 08:54:42 2026 GMT
Subject: CN=6a1aa5d8-ada5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d4:4a:bc:dc:31:dc:c3:01:82:41:8b:89:f6:
c7:73:ba:09:97:09:bf:a8:8d:65:27:48:d7:4c:ab:
8b:75:61:3b:4b:a0:b5:6b:e3:78:59:d7:7f:14:82:
cf:ca:a5:ba:70:4c:1d:f5:42:d9:7a:68:8a:55:94:
6f:85:68:e9:03:d5:6f:8d:b6:dd:42:a0:7f:21:52:
72:f9:eb:01:33:13:e2:78:5d:3d:61:86:66:b5:77:
fd:07:9a:a5:e9:6f:48:a2:f4:53:36:5a:51:38:0b:
8b:70:f6:73:4a:4e:9a:e0:7c:24:2d:ed:a6:48:31:
62:28:91:fd:7f:d1:ba:a0:1f:53:cf:5f:c5:b6:75:
6b:c4:90:9f:27:7f:10:1c:b8:2a:ff:b3:c6:81:61:
20:b4:32:8e:73:f7:43:37:e5:a0:d5:5f:d9:f3:93:
6c:5d:20:54:62:8a:09:5c:f0:24:30:8c:61:9f:7b:
47:4d:bb:bf:15:61:aa:d4:0b:6e:38:08:4e:55:ae:
fc:7c:2f:7f:bf:28:59:b9:fe:10:e6:4c:02:1d:f6:
c0:28:b6:c4:36:b8:c9:3d:05:27:e8:6a:de:fe:06:
01:45:b1:03:ff:e4:4c:2e:65:4d:21:2d:a7:9e:7a:
aa:0e:c0:36:67:92:07:30:83:2d:e9:8e:64:36:f7:
11:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:ED:6B:F9:3C:1B:76:42:E6:73:4F:30:76:C6:5C:99:6B:79:1D:9D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/361E7C6C5C0511F1A6CE4E01CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.79.0/24
45.195.251.0/24
Signature Algorithm: sha256WithRSAEncryption
01:8d:0a:af:a4:cb:06:00:77:b4:5f:a1:11:81:f1:83:ae:9f:
19:5a:69:1e:c5:11:83:ad:c1:0c:f7:90:f1:90:0e:30:0f:de:
a3:3e:05:05:0e:6e:75:f9:34:5c:fd:a4:b7:58:14:e8:d7:6a:
c5:88:47:15:9a:b9:ae:f1:d9:fa:71:d1:b5:a8:dc:ce:f6:b9:
00:e9:c9:bb:86:c7:1d:c9:56:dc:d5:59:cc:41:7f:21:1f:46:
53:59:85:05:b0:97:d8:55:06:68:6a:17:cd:e7:f8:74:15:69:
e5:ea:5f:9f:ac:da:de:32:c5:d2:a7:ac:fe:02:1f:77:52:74:
98:44:b2:70:2d:e1:bf:5e:ff:e3:75:c0:39:70:1d:4a:a3:5f:
cc:92:57:cd:ed:5f:98:88:85:9d:30:c2:de:9a:71:04:83:52:
44:cf:00:ce:51:8d:e3:9b:05:e1:03:a0:65:4f:ff:3f:ec:99:
59:df:6c:35:27:fd:fc:92:58:19:0f:7d:cf:ff:47:73:3f:f5:
1c:9d:a2:f3:c0:1d:29:b6:83:1a:7f:92:ea:67:2d:f5:1e:f7:
93:42:49:19:de:64:e1:5e:59:aa:50:30:7a:0a:6a:5f:42:08:
fa:80:cb:0e:1a:f1:c8:6b:ce:9d:6d:1e:aa:45:12:b8:8a:b2:
d6:7a:f5:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:14:39 2026 by rpki-client