Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3F75921A88B911F1A1BAF4AECE1D38B0.roa
File: 3F75921A88B911F1A1BAF4AECE1D38B0.roa (raw, json)
Hash identifier: fFnnfRIE3bGuZ0A4kH30Y5KKlvv5aI+y4ZaDZwkWTh0=
Subject key identifier: 91:42:22:EC:64:14:46:06:C8:15:A3:9A:F1:96:D1:6E:E6:5B:A2:0A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C802
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3F75921A88B911F1A1BAF4AECE1D38B0.roa
Signing time: Sun 26 Jul 2026 06:14:24 +0000
ROA not before: Sun 26 Jul 2026 06:14:20 +0000
ROA not after: Mon 24 Aug 2026 06:14:20 +0000
asID: 201814
IP address blocks: 45.192.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 28 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116738 (0x1c802)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 26 06:14:20 2026 GMT
Not After : Aug 24 06:14:20 2026 GMT
Subject: CN=6a65a5c0-c67b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:32:b6:09:0c:87:76:f3:14:bd:da:f5:92:41:
50:04:c6:f4:be:23:44:e8:56:03:5b:4f:64:16:e6:
3f:13:ac:25:59:13:46:6b:b5:7f:83:58:94:f5:3c:
76:81:f2:07:2d:79:09:87:28:f5:19:43:15:5b:b0:
e2:f6:62:1b:a1:41:3d:aa:1f:22:fb:46:9e:e6:d3:
93:e3:6c:a0:5a:05:38:f7:b1:ec:44:8c:c6:e1:10:
ef:f6:76:6e:85:1e:ce:f2:1c:cf:b2:1e:36:99:55:
e8:fa:b0:1f:7e:e8:f0:47:e1:d1:d1:bb:b0:1f:69:
90:0b:45:c0:2e:c3:b3:23:91:7b:d8:fd:8c:58:df:
b0:ca:81:46:59:86:a6:6c:36:0e:f1:e7:b2:bc:ea:
5f:cd:ad:0b:7d:83:01:ca:b3:a1:1e:de:6d:1f:8f:
29:e4:9a:c6:6c:79:ef:46:df:91:35:04:55:74:5e:
58:4b:0d:bc:6c:a4:41:c1:da:12:89:4d:48:20:da:
62:9d:a0:12:46:4b:9d:d7:a3:a2:11:a1:93:b1:c2:
ed:35:69:5a:d7:04:1a:43:98:42:88:84:9f:fd:b4:
15:08:36:9e:cc:a8:57:d2:23:2c:41:b4:1f:21:3c:
d2:0b:69:f9:e5:70:44:7a:97:00:ce:f4:83:e6:d8:
ff:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:42:22:EC:64:14:46:06:C8:15:A3:9A:F1:96:D1:6E:E6:5B:A2:0A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3F75921A88B911F1A1BAF4AECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.12.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:82:c1:e6:b2:40:9a:36:87:fd:b1:fb:33:6c:68:83:1e:02:
48:83:1d:09:f5:50:25:54:7c:24:54:a8:dc:26:69:7b:25:77:
53:ad:4f:2d:a7:5e:47:fa:30:59:50:d4:f7:dd:00:74:77:7c:
b3:f1:7e:71:d5:39:5e:4f:3a:14:c1:5d:5c:e6:aa:e4:b9:cd:
1c:0c:0c:26:7a:3f:a0:38:b1:8b:0d:e6:de:9e:e6:88:09:f0:
26:b3:37:75:42:91:ce:ed:8f:e8:b8:ae:07:7e:71:69:1a:4b:
b3:d0:83:a0:74:80:03:45:c5:91:80:cf:9e:b3:0f:ad:31:97:
2e:25:be:79:7d:f3:de:3e:10:e1:06:19:f5:68:e8:c3:32:ef:
87:27:19:c7:c6:df:02:09:51:fa:96:bd:29:32:af:93:6c:72:
f9:ca:19:de:09:9b:16:86:44:14:9e:da:11:0e:d0:e2:17:55:
9b:68:c0:c7:28:54:16:29:16:88:8c:2e:7c:45:3e:16:d6:79:
19:50:64:ac:a6:06:46:71:47:35:8e:75:5a:2c:bd:21:b6:e1:
fa:2f:3e:31:bd:ea:8a:59:a3:61:f9:e5:32:fb:2e:c2:a8:13:
98:14:dd:f6:14:9e:26:8d:28:ee:6e:33:eb:62:eb:ee:92:a0:
58:47:37:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 23:30:10 2026 by rpki-client