Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3DE2356A56D311F1B450EAE0CE1D38B0.roa
File: 3DE2356A56D311F1B450EAE0CE1D38B0.roa (raw, json)
Hash identifier: RWpQKEzB7+Hh+334iwrcWnC+T3q2R+XF/3eoozE1gLg=
Subject key identifier: 8E:39:37:5E:4F:8D:DB:C6:A5:B4:F6:44:70:67:ED:CF:6D:06:55:AC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B8A3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3DE2356A56D311F1B450EAE0CE1D38B0.roa
Signing time: Sat 23 May 2026 18:14:30 +0000
ROA not before: Sat 23 May 2026 18:14:26 +0000
ROA not after: Sun 28 Jun 2026 18:14:26 +0000
asID: 152711
IP address blocks: 45.202.209.0/24 maxlen: 24
45.202.210.0/24 maxlen: 24
45.202.211.0/24 maxlen: 24
45.202.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112803 (0x1b8a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 23 18:14:26 2026 GMT
Not After : Jun 28 18:14:26 2026 GMT
Subject: CN=6a11ee86-f278
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1d:f9:d7:70:ea:0e:01:9d:70:6a:67:e2:8e:
ae:47:6b:08:3d:66:67:e0:17:19:65:d1:62:44:2a:
d1:11:62:7c:db:74:d0:df:c8:12:21:50:db:a1:44:
22:54:d0:e7:ba:89:c9:01:e9:c9:9c:18:1f:f1:9a:
7a:e6:99:5b:d3:44:79:04:f4:30:c2:2d:a6:ae:5d:
ab:db:b4:61:d0:fb:c5:ec:63:30:c7:76:1b:6a:1b:
e0:70:91:a2:7e:1a:5b:d1:25:25:8d:c8:e7:5a:4d:
96:29:96:ea:6a:b3:94:f0:81:87:54:40:6d:43:e5:
f0:22:f1:dc:63:5c:30:6a:6d:f3:ef:bd:45:b1:e8:
ce:ee:f1:6c:02:2e:1a:3c:e6:c0:37:94:bc:25:37:
ab:e0:19:01:26:83:cf:01:c1:a6:a2:38:74:7e:5e:
1a:0c:3f:cd:02:e4:ea:5c:f4:81:8f:1e:9f:c2:ed:
a3:e9:3b:54:41:f1:a6:ba:aa:c2:aa:8c:cb:f1:7a:
0f:8a:8d:19:45:7f:70:26:9b:1f:41:ed:06:34:72:
67:e2:26:05:ec:98:9c:4e:29:31:41:4e:03:ff:5d:
50:c7:43:4c:c7:2d:fc:8a:33:0d:f7:fa:1a:65:aa:
be:bf:a7:a4:98:cb:b8:d8:de:b9:0c:7b:f2:b8:ff:
ad:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:39:37:5E:4F:8D:DB:C6:A5:B4:F6:44:70:67:ED:CF:6D:06:55:AC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3DE2356A56D311F1B450EAE0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.209.0-45.202.212.255
Signature Algorithm: sha256WithRSAEncryption
45:f2:c0:b2:5b:d0:b6:56:d8:fe:7a:71:b2:1a:b3:e1:a7:77:
54:59:da:7d:29:d4:e3:18:7d:6d:70:29:2f:be:ef:2c:96:ba:
82:ff:66:9d:35:50:39:bb:88:a2:1a:21:82:60:61:ee:1c:ce:
32:0b:17:8f:30:67:39:09:70:35:fb:48:10:5b:f8:50:78:d0:
11:21:22:61:c2:50:a4:10:7e:f7:f7:17:55:13:3a:86:4f:75:
ab:01:b2:07:ea:e0:37:a0:9c:93:8c:24:46:3b:bd:29:9e:f6:
fc:8b:10:e6:65:16:3b:2c:67:55:95:a9:6b:ac:29:a6:64:a9:
b2:68:b2:b8:d1:24:f5:27:e6:e4:71:ae:c1:3f:fb:88:f1:bc:
96:e9:36:94:ea:08:49:7e:d1:98:76:69:cc:ba:ee:27:45:4f:
17:53:a8:bc:c1:91:33:80:6d:d5:fe:55:c1:e6:9c:4e:f7:71:
0b:c4:0d:7b:9a:38:5a:27:7e:78:94:5f:11:f3:32:f7:3f:80:
7b:5f:10:7b:98:a2:25:f8:92:34:b7:6f:22:22:0e:4e:c7:b5:
19:06:3b:13:ff:1a:83:1d:91:91:61:0a:09:20:16:a5:92:cc:
0a:87:e9:e9:80:69:ed:1a:9f:d2:e2:ec:4f:a6:ac:fc:8d:5a:
6b:53:59:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:07:17 2026 by rpki-client