Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3BF31B9A80FC11F1A9F7EBFCCE1D38B0.roa
File: 3BF31B9A80FC11F1A9F7EBFCCE1D38B0.roa (raw, json)
Hash identifier: TcrJssFAm0OHCYTOKZtPf6RRGaBZlzuKEoWDdG3jAr0=
Subject key identifier: 1C:CB:1C:9E:88:5A:B2:2D:1E:1C:26:07:5F:3A:34:1B:96:FA:46:E8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C55F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3BF31B9A80FC11F1A9F7EBFCCE1D38B0.roa
Signing time: Thu 16 Jul 2026 09:53:45 +0000
ROA not before: Thu 16 Jul 2026 09:53:41 +0000
ROA not after: Sat 22 Aug 2026 09:53:41 +0000
asID: 273986
IP address blocks: 45.194.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116063 (0x1c55f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 16 09:53:41 2026 GMT
Not After : Aug 22 09:53:41 2026 GMT
Subject: CN=6a58aa29-1266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fe:60:d2:32:23:fb:49:e0:81:5c:3e:e0:7a:
73:99:27:21:0f:71:1b:5e:df:d9:57:35:92:15:b4:
61:41:be:b4:04:0c:92:9b:19:fb:9d:a7:87:82:70:
5c:6d:a5:53:70:c2:7a:41:ee:58:68:36:11:c0:06:
3e:2f:ca:22:76:36:39:4c:2f:ad:e5:73:ad:05:19:
21:7c:79:79:a5:ee:8c:38:86:7a:06:58:f7:c4:49:
93:0f:37:df:33:66:2a:f0:e0:44:10:2f:5a:68:f3:
28:e9:1b:f6:73:f7:6c:37:50:1a:e5:83:aa:72:79:
33:87:06:25:d6:d0:bb:44:6e:fd:38:69:c7:1d:7f:
6f:7f:8c:c4:de:61:a5:9b:80:53:c1:a1:a6:5a:4c:
bb:96:95:46:6e:a8:df:86:4d:0a:13:c9:c3:2f:e4:
f1:c4:f8:4b:a0:4a:bf:e9:50:00:a9:3d:c8:a6:5d:
26:e1:7d:90:9f:b0:82:94:5a:50:a2:b5:62:c4:80:
23:a4:01:48:91:47:40:f2:fc:2a:d0:94:3d:14:44:
2c:2a:af:a8:49:12:5d:fd:f4:56:db:11:2b:a5:6e:
27:b8:6c:b3:f0:a5:9f:ce:01:cb:36:ee:db:33:d4:
59:8f:5a:82:5c:e3:52:68:c6:09:5c:b6:5e:6b:f6:
62:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:CB:1C:9E:88:5A:B2:2D:1E:1C:26:07:5F:3A:34:1B:96:FA:46:E8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3BF31B9A80FC11F1A9F7EBFCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.119.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:f7:f3:82:36:92:94:5f:28:be:96:29:f4:52:63:3a:80:1a:
6b:14:69:51:f6:9d:b6:67:4f:e4:c3:ef:90:f1:e7:b1:39:2c:
9c:48:77:37:19:b4:3a:8c:cf:40:26:a1:2b:e5:9d:6f:8f:cc:
d2:d8:5d:22:60:cd:75:e4:f4:7e:ec:d9:de:20:e3:e2:25:9e:
c7:c7:7b:3e:cd:1a:f1:14:82:32:a8:cc:5e:02:19:23:07:aa:
56:32:1f:6a:d3:ce:55:14:0e:1c:09:3b:c3:62:54:50:2b:96:
fd:50:d9:34:e3:4a:67:7a:49:53:2d:b2:47:e8:17:bf:c1:c3:
5e:db:3c:a9:69:56:c9:cd:dd:01:d0:0d:96:f4:95:f5:e7:42:
c3:bb:67:f8:75:9f:e2:28:56:2b:80:1e:ba:2d:fb:4a:b1:fb:
c1:78:88:66:5c:13:ce:f5:d1:61:0c:a5:a4:4b:81:13:12:5a:
d7:e8:50:ad:4b:6a:56:71:74:54:8f:34:d7:64:42:c6:36:46:
df:91:8d:30:de:51:e4:7b:cd:f5:5f:ac:10:03:8c:21:be:cd:
65:6a:0d:e2:3c:53:8b:34:ca:fa:f1:ed:79:50:dd:78:90:49:
e7:3f:b6:17:cf:ea:7f:0b:1c:08:7a:83:64:58:3a:6c:cd:d4:
6e:de:46:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:53 2026 by rpki-client