Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3EA32ACC7E8811F192FA83CECE1D38B0.roa
File: 3EA32ACC7E8811F192FA83CECE1D38B0.roa (raw, json)
Hash identifier: qokPDo9eREGMzfTu04bPNhqHUuXt8EwBNsca5LN44FY=
Subject key identifier: 61:40:3A:66:F0:F3:E3:C7:0F:DD:8B:6B:7E:CA:3C:C2:0D:8C:4F:C0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C4D1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3EA32ACC7E8811F192FA83CECE1D38B0.roa
Signing time: Mon 13 Jul 2026 06:58:26 +0000
ROA not before: Mon 13 Jul 2026 06:58:21 +0000
ROA not after: Wed 19 Aug 2026 06:58:21 +0000
asID: 131609
IP address blocks: 45.204.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115921 (0x1c4d1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 13 06:58:21 2026 GMT
Not After : Aug 19 06:58:21 2026 GMT
Subject: CN=6a548c92-7e63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6d:3b:44:fe:c6:bd:31:fc:d2:5d:c9:c4:8c:
d7:90:0a:43:f9:5d:b4:ea:86:f9:58:bd:70:c1:e6:
5a:60:51:2b:73:6c:47:2c:94:7d:7e:44:99:ea:4e:
8e:f1:95:96:62:2a:0b:ca:94:f2:a9:ae:77:46:89:
33:ab:a1:4f:1c:79:5a:7c:7b:7f:df:75:a9:2b:f8:
cb:fe:83:f9:fd:b7:ef:43:a9:f0:73:01:d6:68:c0:
f2:9d:c6:7d:60:39:d8:9f:e9:cf:e7:62:27:65:b4:
b6:07:46:5a:3e:18:ba:73:9c:a0:77:91:56:c6:a4:
14:bd:4b:9b:0b:5b:bc:4e:a7:aa:46:32:d4:d0:a5:
18:f2:d3:65:44:cf:bd:1e:88:77:6d:24:99:75:4b:
0b:82:a7:24:d0:8e:b2:96:05:7d:75:f5:6c:48:dd:
c9:cf:05:ef:b2:21:29:2f:d9:b6:88:ca:bc:83:ee:
f2:08:67:e7:09:bb:ea:5d:fa:68:f2:d0:aa:ff:c0:
4a:ee:d2:cb:5b:9b:8c:4f:19:e7:18:99:ce:4f:08:
59:68:68:7d:48:23:56:3a:6a:45:91:d1:e1:f3:dc:
35:7c:30:93:03:0b:43:0f:fe:d6:cb:66:94:ce:a7:
ef:1e:89:71:d8:1d:9f:ea:46:f8:ad:c9:35:19:61:
92:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:40:3A:66:F0:F3:E3:C7:0F:DD:8B:6B:7E:CA:3C:C2:0D:8C:4F:C0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3EA32ACC7E8811F192FA83CECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.133.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:1d:46:dd:6b:f4:b9:62:03:b5:e1:6a:87:50:fc:a1:ef:2f:
ca:ee:12:97:86:35:81:08:ad:e4:a6:0c:0c:64:81:a7:57:66:
a2:96:5a:47:8d:5c:47:60:03:c0:53:2e:08:55:40:c0:2b:31:
30:06:20:49:5a:05:55:73:c1:40:10:8b:85:97:99:9d:f1:97:
22:b6:b8:bd:71:6b:7d:80:a0:35:10:d2:d8:64:18:a4:5b:c4:
d9:bb:05:98:78:47:29:01:d7:b6:8d:cc:b7:30:36:3d:db:6e:
ef:50:8d:3d:29:89:18:9d:6f:e4:86:62:62:b4:bc:87:47:ff:
48:f2:34:ca:d4:04:bf:d9:cd:13:7c:88:f8:12:ce:ac:02:0a:
82:f8:cd:e3:f9:59:9b:f8:d5:f7:f3:4e:84:99:07:5e:20:e5:
4e:38:d7:80:98:26:37:23:e3:ce:0e:89:fb:89:96:fb:8a:da:
ca:3c:1c:b2:9e:70:22:83:1a:a3:1e:e6:f6:a5:84:55:00:98:
8a:fc:39:30:88:11:71:75:f4:1e:db:de:70:d8:96:79:a3:3c:
e4:51:d5:4d:69:c5:b5:26:5b:c4:bb:e5:d6:3b:4a:69:f3:45:
fa:9e:96:5b:d7:93:4d:88:93:e6:56:51:63:f5:44:4b:4d:25:
a2:2e:9d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:39 2026 by rpki-client