Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/44AF866E544D11F1B7424AFACE1D38B0.roa
File: 44AF866E544D11F1B7424AFACE1D38B0.roa (raw, json)
Hash identifier: LpwOfLb87TRJXmebuj5nhOj78lSHK+Pph9Y4aYdbS1Q=
Subject key identifier: 11:59:10:86:B2:33:A0:6E:C7:D4:DF:8E:01:2F:39:95:37:45:41:A3
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B652
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/44AF866E544D11F1B7424AFACE1D38B0.roa
Signing time: Wed 20 May 2026 13:10:27 +0000
ROA not before: Wed 20 May 2026 13:10:22 +0000
ROA not after: Tue 25 Aug 2026 13:10:22 +0000
asID: 395839
IP address blocks: 45.202.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112210 (0x1b652)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 20 13:10:22 2026 GMT
Not After : Aug 25 13:10:22 2026 GMT
Subject: CN=6a0db2c3-000c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:26:1e:57:15:3f:50:ab:67:bc:6e:1e:cd:c2:
9f:22:85:54:bf:b7:70:23:57:6c:94:ee:b7:7e:4c:
28:36:79:21:73:b7:dc:7e:fd:b6:b5:55:44:34:7d:
a1:95:15:1c:46:a2:36:80:5c:20:83:69:8e:03:58:
68:5e:e2:f0:d2:7e:0c:fb:fa:f9:0e:b3:be:7f:86:
84:e4:4b:5e:1d:3a:cb:b9:32:c2:2b:66:3c:23:37:
b2:3c:2a:16:c0:68:7d:bb:94:b6:70:91:0c:b5:8e:
87:62:9d:b6:47:75:33:c8:58:21:b2:8e:f0:0b:fd:
24:bc:c3:e9:09:f1:b8:b7:0d:f0:f6:8d:7e:bd:17:
57:81:52:bb:68:28:d0:e5:fa:a1:6e:81:58:43:17:
e1:93:2e:c0:c4:59:db:7a:7d:f6:f6:55:74:f0:ad:
15:09:da:0e:32:5d:21:1c:5e:6b:37:b9:7a:4e:54:
28:a5:61:bb:22:46:73:6b:21:a2:57:e3:3a:02:fc:
86:bf:34:e7:96:67:64:3a:c7:ab:38:cf:e7:02:ca:
2b:99:e3:6b:f1:66:58:d4:df:50:76:ed:da:d4:ca:
4b:ff:97:16:85:a5:88:bf:90:b1:a0:9d:1e:84:2a:
e4:0e:39:20:24:20:3d:de:fc:d1:f6:5f:a7:fd:a3:
64:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:59:10:86:B2:33:A0:6E:C7:D4:DF:8E:01:2F:39:95:37:45:41:A3
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/44AF866E544D11F1B7424AFACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.113.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:e1:d5:f2:a1:6d:0a:df:39:5b:33:ff:ca:cd:0d:24:6d:b8:
d5:e4:52:3b:d0:48:e3:eb:cc:6b:7b:04:99:cd:01:44:cb:91:
a2:b7:4a:54:29:2e:c2:db:5a:a1:b7:2c:c0:cc:a4:44:1e:01:
37:ca:48:3c:d0:6b:18:26:13:be:84:c1:18:0f:fd:16:4c:ba:
38:6d:40:b1:d4:de:e9:9f:31:5c:39:cc:e5:8b:06:07:a1:61:
b3:ca:43:63:af:f5:99:3c:84:c2:bc:fe:63:52:1d:98:d5:ef:
1c:77:8c:d1:99:d5:85:1b:92:ea:e2:c6:06:d9:bf:85:03:16:
95:e8:f7:de:ef:c0:58:da:4d:1b:d4:ed:b9:c0:b3:2f:59:3a:
da:c1:e7:a2:0d:42:97:f9:9b:89:66:07:ae:23:e4:77:4a:c4:
1c:7a:95:e7:1d:de:44:1b:61:86:c7:4b:99:8d:f1:f4:c9:ef:
d7:9b:79:6c:d0:bc:75:75:9c:d8:c4:24:3e:fa:6c:81:b0:b7:
e7:84:b3:86:d0:74:68:ab:ac:da:85:27:1b:b3:81:2d:7e:cf:
d6:23:63:75:b0:f3:50:87:79:af:56:f9:e1:f8:37:ae:78:d6:
d8:4a:fe:b8:8e:73:70:5a:a5:28:e0:73:c0:38:eb:6b:24:62:
63:80:24:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:06:56 2026 by rpki-client