Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/544925F855EC11F19E5A33E3CE1D38B0.roa
File: 544925F855EC11F19E5A33E3CE1D38B0.roa (raw, json)
Hash identifier: AHxpdN8w/omqMN1gZaiuXvHpWSVCRo+ZumfN21uHgzs=
Subject key identifier: AA:D1:FF:C0:1A:E9:47:A8:E7:58:3F:91:0D:FC:31:DF:F3:04:CF:8F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B814
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/544925F855EC11F19E5A33E3CE1D38B0.roa
Signing time: Fri 22 May 2026 14:41:34 +0000
ROA not before: Fri 22 May 2026 14:41:30 +0000
ROA not after: Fri 26 Jun 2026 14:41:30 +0000
asID: 7029
IP address blocks: 45.194.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112660 (0x1b814)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 22 14:41:30 2026 GMT
Not After : Jun 26 14:41:30 2026 GMT
Subject: CN=6a106b1e-c6c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ac:71:b7:33:d9:e9:44:f6:bd:48:ee:e0:7a:
cc:bf:03:8e:13:f7:15:ed:35:38:71:b6:0a:22:3b:
3a:4d:b4:31:e2:4a:4b:3c:fb:7a:ce:50:33:72:92:
19:11:5f:76:5d:61:5b:e5:06:8d:e2:99:f6:0a:e0:
af:8c:e2:c9:58:63:6e:bb:44:b2:75:df:16:c0:c3:
c7:4f:89:56:b5:1f:dd:a6:2f:2d:9d:1c:46:4c:cb:
9a:2c:eb:20:00:1e:7a:04:f2:42:e6:db:ca:83:75:
0b:41:a9:d8:24:a4:c2:91:95:ce:89:25:74:6e:96:
b6:98:16:f8:c8:30:2f:d8:05:5e:9b:d9:9a:50:dc:
a0:b4:bb:75:fa:80:38:57:29:a1:86:af:ce:c8:b6:
f6:03:78:1f:fd:8b:80:8b:db:c5:e0:5d:de:24:82:
b5:78:80:4e:99:56:9f:72:41:3b:79:a2:e1:db:bb:
4a:77:e8:df:55:ec:38:fe:62:2f:40:47:8e:4b:4e:
0b:bf:89:ee:ed:73:1f:a5:e8:55:2e:cb:db:5a:e7:
b4:b3:63:06:20:27:23:b6:b4:4f:46:5b:08:6c:56:
34:3d:17:f7:ea:16:df:80:cb:38:2c:65:00:ce:ee:
1c:7c:4a:ca:7b:f5:5c:ba:7b:79:f7:9b:a6:3f:fe:
58:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:D1:FF:C0:1A:E9:47:A8:E7:58:3F:91:0D:FC:31:DF:F3:04:CF:8F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/544925F855EC11F19E5A33E3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.40.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:e5:59:74:80:63:44:51:97:ee:97:b7:a7:3a:d1:83:b4:8d:
ef:97:85:af:7d:41:de:14:f0:e4:9b:9d:b2:0d:db:ac:80:ec:
f2:3a:82:bf:0a:51:3f:79:06:ba:57:89:98:32:b1:df:11:23:
f2:81:4a:7a:d4:0c:71:e1:36:cf:fe:94:1d:da:66:47:f8:99:
30:3e:cd:7d:96:c7:e0:1d:39:5b:9d:cc:36:86:ca:df:69:6e:
54:70:da:eb:8d:84:5c:bb:93:0a:34:f5:06:07:00:ed:6a:1b:
b3:07:13:27:2e:8a:23:66:95:e6:3c:aa:29:28:7f:27:81:e6:
b4:65:ee:d1:5c:4d:9b:92:d9:e4:33:d1:bd:40:87:b8:cc:b1:
f4:b7:33:15:e8:ae:c2:24:70:db:5d:3d:ac:84:3b:92:15:0a:
39:ea:e8:17:49:35:cf:8d:72:05:10:97:e2:60:4d:ff:00:8d:
70:54:32:fa:f7:42:c4:91:fc:1b:d5:28:f0:02:36:69:2c:62:
ae:80:74:58:18:7c:d5:58:d8:80:df:7e:fd:37:0b:a4:d3:18:
84:e7:0f:ab:9a:5e:39:2a:7b:78:5e:9b:b2:fb:98:9a:1d:d0:
82:fc:8c:ab:f8:6d:b7:d9:aa:ef:5c:87:37:f2:af:c5:aa:77:
f3:24:74:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:06:51 2026 by rpki-client