Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/39C3B6203E6911F1854DBABBCE1D38B0.roa
File: 39C3B6203E6911F1854DBABBCE1D38B0.roa (raw, json)
Hash identifier: 68mTXhIpbimCAhRdDR0O4rb6K58vrmLukKMaWe3uC0g=
Subject key identifier: 11:D8:39:64:37:B1:ED:6B:05:87:D8:2E:66:5B:27:09:2A:27:31:C8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AE3F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/39C3B6203E6911F1854DBABBCE1D38B0.roa
Signing time: Wed 22 Apr 2026 16:35:09 +0000
ROA not before: Wed 22 Apr 2026 16:35:04 +0000
ROA not after: Sun 31 May 2026 16:35:04 +0000
asID: 63099
IP address blocks: 45.192.14.0/24 maxlen: 24
45.192.235.0/24 maxlen: 24
45.196.226.0/24 maxlen: 24
45.198.226.0/24 maxlen: 24
45.202.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 08 May 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110143 (0x1ae3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 22 16:35:04 2026 GMT
Not After : May 31 16:35:04 2026 GMT
Subject: CN=69e8f8bd-d1a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:f1:95:3c:fd:02:35:8e:ce:c8:3d:da:c1:21:
ea:c4:d1:3f:82:d2:4d:2d:2c:86:47:aa:83:74:3a:
26:d6:81:41:cf:57:25:d1:a5:7c:a7:6d:9d:9e:86:
60:38:d5:8c:e3:11:46:70:16:92:64:8f:fc:20:8e:
42:a0:34:f6:fa:57:fb:bf:62:c6:ba:7e:04:5c:3a:
6d:52:29:84:f5:ea:cf:a3:a1:f8:09:c3:d7:5a:7c:
3f:fa:8c:4b:35:59:70:c5:43:5f:f1:e1:eb:ac:f5:
a9:f0:67:74:31:ba:12:f9:b3:57:cf:bf:5a:4d:9e:
b3:ca:96:a1:b0:8e:f9:64:32:0e:c8:7f:77:bb:11:
b4:96:c2:ad:ff:e0:b9:2e:80:d2:9a:cc:24:d8:57:
b4:a9:13:a5:7d:df:a2:b3:da:4e:f3:90:a5:d5:ae:
5f:e9:01:bd:12:74:64:b8:eb:c5:17:53:8f:eb:1c:
89:38:fa:9a:43:b7:80:37:a2:73:91:9f:87:18:fa:
82:e7:1f:09:43:d9:c3:a5:47:fd:d7:a8:bd:91:6e:
d8:f3:d6:87:7d:c3:0c:8f:13:d5:32:6a:85:d5:6f:
8f:4e:a2:ca:9e:ba:aa:4e:37:2b:29:19:fe:37:59:
6c:76:87:1f:03:73:c9:59:ed:7a:9e:6e:f9:6c:65:
a7:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D8:39:64:37:B1:ED:6B:05:87:D8:2E:66:5B:27:09:2A:27:31:C8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/39C3B6203E6911F1854DBABBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.14.0/24
45.192.235.0/24
45.196.226.0/24
45.198.226.0/24
45.202.111.0/24
Signature Algorithm: sha256WithRSAEncryption
87:49:2a:f1:6f:6d:dc:91:2f:e3:25:d8:93:cd:65:03:ea:73:
99:5e:57:87:87:22:d4:2d:a0:54:a3:07:e8:bf:60:a9:0d:eb:
7d:fc:d0:1e:da:64:e3:53:d0:0c:20:16:33:b7:ea:47:a8:1e:
24:00:b7:20:3f:e7:da:01:69:83:4e:c9:99:e2:64:95:90:d4:
fc:2d:96:21:df:73:4d:bb:ad:4b:73:ed:af:b5:41:fc:56:b7:
ad:e7:a0:ef:b1:d4:9e:23:d6:0e:f8:af:5b:2b:ea:6a:34:69:
40:67:eb:a4:da:d6:c1:be:55:45:23:39:52:5f:e6:69:b2:d5:
9f:b3:ea:1e:bd:38:c4:a8:00:92:9f:78:ed:5a:ae:52:9c:41:
bb:00:1c:d3:5e:e4:e5:42:0a:56:75:6a:75:9d:0d:72:a2:8e:
3d:a7:ca:2a:e0:ed:91:49:07:24:62:5f:0c:5b:23:4f:37:a4:
a4:91:19:97:cf:ff:87:9b:dc:74:bb:89:51:64:1c:40:bf:88:
7d:4e:8e:17:f1:10:6f:e1:c5:e0:da:25:14:3a:81:e3:32:fc:
f6:73:6b:bc:64:37:68:70:cc:a9:b8:8b:d0:eb:11:f6:b1:a7:
52:74:d1:9d:14:a9:d9:4b:b3:3b:9a:74:28:96:66:99:09:38:
a8:85:f4:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 09:06:09 2026 by rpki-client