Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/36FC30BC79E611F183C681DFCE1D38B0.roa
File: 36FC30BC79E611F183C681DFCE1D38B0.roa (raw, json)
Hash identifier: TTKk4dGnice0zCW1HSzNaDHyfngidwW8BA6TXAMorC4=
Subject key identifier: 06:94:7B:BB:B1:4E:A7:C5:07:D7:7E:E0:93:FE:17:26:5F:9E:76:26
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C370
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/36FC30BC79E611F183C681DFCE1D38B0.roa
Signing time: Tue 07 Jul 2026 09:28:30 +0000
ROA not before: Tue 07 Jul 2026 09:28:25 +0000
ROA not after: Sat 29 Aug 2026 09:28:25 +0000
asID: 133073
IP address blocks: 45.196.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115568 (0x1c370)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 7 09:28:25 2026 GMT
Not After : Aug 29 09:28:25 2026 GMT
Subject: CN=6a4cc6be-8849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9f:fc:44:24:31:46:48:5d:11:5d:37:1a:e6:
96:97:6d:69:96:76:19:a3:cd:ea:95:a7:9b:35:c9:
27:45:26:d7:d8:26:4a:29:ae:1d:cc:46:e6:01:7c:
eb:2e:b7:9b:da:09:b3:a3:09:20:38:f0:3e:03:2a:
76:8e:f2:b4:f6:df:be:8b:64:8d:d6:63:98:51:8f:
05:a9:0e:88:da:2c:12:88:49:93:0a:0a:46:4f:cd:
dd:13:65:1e:01:be:97:45:7a:4f:10:ca:0c:4d:c1:
1a:89:a1:4f:6c:77:81:49:31:6a:43:f4:cc:43:82:
15:4d:b0:92:b4:14:e8:b9:ed:db:d9:2a:d6:b5:3c:
b4:a5:d4:2c:04:8f:72:72:36:8e:18:70:6a:7b:a3:
a1:9e:41:8e:5c:33:4e:65:d7:46:84:0a:95:7a:f9:
0b:2d:54:c3:ab:9a:b4:01:43:8d:f0:4a:69:64:bd:
07:14:d6:b0:0e:4f:c7:4c:06:8f:29:34:d5:75:c4:
38:4f:d0:50:34:ee:28:9e:4e:38:aa:05:62:21:44:
3f:57:d9:30:fe:41:07:fd:f4:99:65:b1:2d:e9:d6:
3c:53:d0:87:5c:4f:3b:6a:18:16:ea:bb:fe:47:2d:
13:f2:2b:34:b6:ba:43:dd:18:f8:72:84:69:bc:45:
f7:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:94:7B:BB:B1:4E:A7:C5:07:D7:7E:E0:93:FE:17:26:5F:9E:76:26
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/36FC30BC79E611F183C681DFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.100.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:fe:28:3e:c0:d2:aa:b0:26:8e:aa:fe:3b:d8:04:b0:6d:aa:
30:cd:b6:0b:e9:1e:0a:dd:69:a6:1a:76:f5:b9:15:dc:9f:61:
60:51:50:95:d3:ab:02:eb:9c:21:eb:f1:34:af:92:b4:87:e9:
cb:9e:1a:35:2d:59:0e:14:33:66:66:3d:81:9e:e7:4a:fa:80:
3b:d2:0b:70:69:b2:2a:54:06:08:68:0f:8e:0a:9d:6b:72:70:
3c:48:2c:9e:9c:c1:6e:80:33:6a:73:72:a3:e6:d8:06:66:de:
7f:cf:35:54:8e:0d:86:9c:ae:83:7c:26:ae:af:a3:a5:3e:29:
27:b7:e6:c1:34:31:9f:66:4e:65:13:b1:ec:9f:91:f0:9d:86:
c1:79:4a:08:14:13:34:e3:f5:8c:e0:bc:5f:cd:ee:df:b3:cd:
a0:1b:1e:ba:e4:7e:d9:5f:07:b8:90:62:c0:5a:2c:12:f7:47:
6b:48:ff:07:c2:70:39:37:a1:a7:1c:bc:fa:a9:86:1a:0d:cd:
5e:31:e9:b7:78:4c:0d:0c:fe:1a:b2:51:b0:27:fd:80:6a:de:
7a:9b:fe:57:3f:40:ac:34:06:13:3e:9a:e6:94:84:2b:17:e0:
ec:db:f6:3f:73:53:5e:75:12:fd:1d:40:9d:c6:9c:a1:12:49:
3b:43:ec:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:19 2026 by rpki-client