Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3F6DF59681BB11F185B3360BCF1D38B0.roa
File: 3F6DF59681BB11F185B3360BCF1D38B0.roa (raw, json)
Hash identifier: F2TrroC+djoZ/6YK2EqE+2oxG+ahkOeKN/Jw4zdld4c=
Subject key identifier: 74:F1:0C:F5:06:35:7E:B2:3D:F3:20:85:11:68:AC:58:FB:B7:B1:00
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C5BC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3F6DF59681BB11F185B3360BCF1D38B0.roa
Signing time: Fri 17 Jul 2026 08:41:05 +0000
ROA not before: Fri 17 Jul 2026 08:41:01 +0000
ROA not after: Wed 19 Aug 2026 08:41:01 +0000
asID: 11404
IP address blocks: 45.195.0.0/24 maxlen: 24
45.196.92.0/22 maxlen: 24
45.197.224.0/21 maxlen: 24
45.204.32.0/20 maxlen: 24
45.205.176.0/20 maxlen: 24
45.205.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116156 (0x1c5bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 17 08:41:01 2026 GMT
Not After : Aug 19 08:41:01 2026 GMT
Subject: CN=6a59eaa1-284c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6c:24:89:bc:c6:62:1b:f3:d3:f9:fd:be:22:
df:bd:dc:de:89:c4:df:a0:46:71:30:e5:01:d8:d9:
ae:c8:85:f3:90:48:b7:6c:6a:c6:01:a4:00:ff:ba:
f3:27:3c:45:e8:cb:50:2f:cc:1e:1b:33:ae:02:22:
32:f8:95:49:5b:7f:23:1e:49:3e:cb:82:a6:92:01:
38:7d:aa:36:56:d8:7a:07:a2:fb:b5:0f:e6:94:82:
7c:08:d9:01:3f:8e:83:a2:ff:d3:29:91:a2:94:f3:
8e:81:83:a2:4d:bd:45:e4:c5:09:86:66:55:9b:67:
ad:71:cf:ef:c8:e8:c4:d4:79:f3:b2:19:95:a4:78:
7d:ee:12:a1:30:4f:46:a0:d2:1b:29:90:b8:f8:08:
0c:18:a9:e5:1c:d7:ba:a7:2b:aa:e8:18:92:80:9b:
47:fd:b3:34:f2:30:58:45:a9:cb:1f:7d:72:80:13:
e0:38:9b:af:0c:59:93:64:45:ff:a8:32:da:5c:3a:
f2:67:09:a7:bb:19:9a:b7:9f:c1:48:df:96:61:48:
cd:0a:f4:ab:52:ce:28:a1:45:75:8a:d5:e5:29:1a:
7d:70:09:78:14:40:90:d7:03:58:3f:e5:c1:98:72:
ec:80:c2:cd:13:be:05:29:6b:80:72:68:b2:6b:ea:
49:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:F1:0C:F5:06:35:7E:B2:3D:F3:20:85:11:68:AC:58:FB:B7:B1:00
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3F6DF59681BB11F185B3360BCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.0.0/24
45.196.92.0/22
45.197.224.0/21
45.204.32.0/20
45.205.176.0/20
45.205.240.0/20
Signature Algorithm: sha256WithRSAEncryption
91:13:f0:f4:df:c7:a5:bd:dc:df:ad:8e:0c:d2:58:f7:c4:0f:
2c:d5:3c:c8:1d:e1:b4:81:34:37:19:3d:ca:5f:9e:be:f1:61:
3b:b7:13:65:7d:c1:c7:2d:00:57:5d:e7:89:1a:5e:d4:ef:c5:
5d:4e:4d:12:68:e0:5b:97:c8:4f:bc:a2:f7:89:60:eb:9a:79:
1d:7e:96:59:cc:d8:1b:25:98:d9:89:cc:50:66:70:49:43:e7:
1b:18:5c:9c:d8:6f:a7:fa:91:ef:05:4b:aa:e4:7b:ac:e4:6d:
cb:6f:fb:f7:cc:67:cf:f3:8b:8e:aa:ee:a3:73:7b:79:99:bc:
de:e3:90:79:f3:8f:94:07:e1:09:a5:29:45:e0:4d:be:d7:be:
e7:59:b1:22:ae:a2:73:ab:56:4d:7f:2d:5e:63:46:f4:fa:f4:
0c:8e:1a:01:af:54:95:95:08:e7:73:a6:e0:0c:f6:d8:a2:e5:
a5:90:bf:de:36:f6:45:79:6e:5e:40:0b:a6:c6:c8:45:d9:58:
16:2c:ef:96:52:4b:a9:bd:1e:a9:d1:75:62:cc:85:ed:f7:96:
52:cc:b1:77:1c:43:4b:c1:47:94:e1:28:06:93:d9:4e:a8:83:
48:8d:56:fa:88:ae:3e:dc:40:8b:78:2c:76:98:65:e6:4d:ea:
d1:59:65:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:36 2026 by rpki-client