Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/528B02BE583911F1B2C346EACE1D38B0.roa
File: 528B02BE583911F1B2C346EACE1D38B0.roa (raw, json)
Hash identifier: D9v5mE9vbOBB32ciBd1T+dx9BAZh/Zwpa9se1TujqO8=
Subject key identifier: 96:4A:AE:15:D6:A3:E0:09:17:B2:44:0E:E8:60:C1:90:1D:03:AA:08
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B98E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/528B02BE583911F1B2C346EACE1D38B0.roa
Signing time: Mon 25 May 2026 12:57:45 +0000
ROA not before: Mon 25 May 2026 12:57:40 +0000
ROA not after: Wed 19 Aug 2026 12:57:40 +0000
asID: 152849
IP address blocks: 45.195.112.0/21 maxlen: 24
45.195.120.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113038 (0x1b98e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 25 12:57:40 2026 GMT
Not After : Aug 19 12:57:40 2026 GMT
Subject: CN=6a144749-085e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b7:56:30:60:c5:13:6a:db:96:2e:52:5c:de:
50:25:17:e8:b0:d0:54:7e:6b:dd:57:05:db:06:20:
22:95:21:d6:da:41:24:91:bc:b8:ad:40:2e:e5:cc:
84:f1:7b:03:95:cd:25:8f:0d:e0:2b:d2:94:1c:2f:
2d:7d:70:37:e6:20:c5:9c:c4:ab:fd:51:6d:e5:ea:
22:39:4f:07:27:41:50:d4:22:18:21:ce:20:b0:be:
d2:3e:20:05:ae:9c:bd:8e:94:89:db:2f:a1:9e:0e:
83:bd:de:f6:0e:45:10:b3:72:72:31:90:4d:ad:a8:
88:ba:4a:3d:45:b7:4c:0b:ea:b0:f9:23:b5:82:f8:
61:33:51:b5:bc:8e:78:8f:e9:45:85:94:68:8f:75:
2c:ad:6e:da:fc:2c:28:86:47:7a:ea:74:40:eb:43:
55:31:ef:a2:5e:c9:b5:9d:d3:37:7d:77:99:d2:9e:
85:b4:c4:e7:5a:9d:f3:04:da:12:6c:18:db:b1:46:
40:52:00:4a:a3:39:52:20:87:fe:f3:83:16:96:22:
a1:a6:ea:60:b3:c3:b0:15:d3:05:5f:0b:a0:eb:73:
91:55:fa:74:ed:89:87:81:bc:b6:76:a6:34:20:d9:
15:43:24:f9:2f:d6:67:09:5b:34:26:48:85:c7:44:
9e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:4A:AE:15:D6:A3:E0:09:17:B2:44:0E:E8:60:C1:90:1D:03:AA:08
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/528B02BE583911F1B2C346EACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.112.0/20
Signature Algorithm: sha256WithRSAEncryption
20:38:85:24:ce:47:36:8a:64:54:0c:9f:f4:57:ef:c8:43:31:
89:2a:df:08:df:1c:6e:b9:17:db:90:ef:ea:a4:78:86:a5:38:
03:b7:01:bc:7b:4c:e1:46:50:12:b9:91:14:f7:b0:53:95:5d:
c4:15:38:c3:bc:fd:f6:8b:c9:93:71:f0:45:41:ff:e6:73:70:
cb:b9:24:3b:5a:13:09:0f:1b:9c:ec:7e:17:59:e8:cb:72:a9:
87:06:62:1b:40:7c:0c:c7:f3:57:cc:39:55:37:46:fe:cb:22:
e4:74:03:1a:c7:5e:ea:1e:2f:2e:f2:b5:b0:4e:f3:84:7d:b9:
58:3a:c9:ab:ba:11:8e:2e:2f:ff:83:65:37:43:9b:d3:80:5f:
19:9c:be:eb:28:06:39:8c:e3:59:83:1f:33:dd:36:e6:45:6d:
0a:d0:4d:77:c2:7f:6a:b0:b8:33:5e:29:fa:ab:a2:9e:77:ad:
b0:8b:5a:b2:cf:fd:13:cf:9b:2e:ef:1f:f3:53:3f:ed:14:1c:
79:b6:12:b4:0b:2c:da:28:2e:2f:17:fe:b7:bb:ad:af:e4:65:
2d:1a:a3:f4:23:8f:2a:1d:af:e8:64:96:83:f9:13:ab:60:45:
fb:99:e0:5b:75:76:73:35:c3:99:a1:f0:fe:d2:45:d8:91:96:
43:29:c3:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:07:13 2026 by rpki-client