Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/57EC13164EC411F1BF71B6D4CE1D38B0.roa
File: 57EC13164EC411F1BF71B6D4CE1D38B0.roa (raw, json)
Hash identifier: DwYfGFwlKoAZdSQvpFe34oOsCa9EGGh6ybu1VjLtv8Y=
Subject key identifier: FA:A5:5F:6D:37:5F:BB:5C:4C:98:D0:27:D6:D2:FE:41:33:BE:58:E1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B429
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/57EC13164EC411F1BF71B6D4CE1D38B0.roa
Signing time: Wed 13 May 2026 12:07:42 +0000
ROA not before: Wed 13 May 2026 12:07:37 +0000
ROA not after: Wed 12 May 2027 12:07:37 +0000
asID: 328608
IP address blocks: 45.205.141.0/24 maxlen: 24
45.205.142.0/24 maxlen: 24
45.205.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111657 (0x1b429)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 13 12:07:37 2026 GMT
Not After : May 12 12:07:37 2027 GMT
Subject: CN=6a04698e-6c5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ca:e0:b6:9c:d0:c0:c9:90:4a:3d:c0:7e:91:
34:36:94:97:7f:6e:e1:3a:4f:36:1d:33:3b:b0:b0:
fa:a3:c0:f5:c4:a9:a6:6f:ca:c6:b4:14:1c:03:0b:
50:98:66:fa:2a:91:f1:1c:3b:da:e0:c9:ff:17:39:
76:ba:c6:be:89:20:5c:d3:33:73:6b:0f:14:9f:f4:
ce:c7:7f:f4:08:38:f9:13:d3:e3:1a:e3:c4:31:85:
be:de:50:06:66:50:44:e5:b0:c0:b5:b6:a2:e6:57:
de:4b:92:f0:38:2d:0a:50:c6:59:48:cd:03:6f:92:
24:6c:b4:f6:10:24:83:bb:a5:c6:ad:ab:1c:e4:3a:
9d:d8:af:c0:9f:2f:88:5e:09:b4:fb:93:ca:d9:9e:
52:bf:09:18:40:e4:cf:6c:83:05:27:73:10:b3:f2:
85:03:47:f8:f2:20:37:11:50:15:b5:cc:fe:a7:01:
8f:be:2e:c0:04:70:f8:83:35:6e:54:c4:e2:90:9c:
84:c7:4a:62:c1:a6:a3:c6:e4:d2:5d:40:40:a8:fe:
07:9c:27:0b:3e:5c:e0:09:60:9e:bb:f2:03:5f:28:
0e:26:3b:b4:b6:6d:0f:57:aa:8b:9f:62:74:e1:f7:
af:51:dd:cb:c8:c5:ac:68:0c:8e:87:46:94:f2:3b:
3a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:A5:5F:6D:37:5F:BB:5C:4C:98:D0:27:D6:D2:FE:41:33:BE:58:E1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/57EC13164EC411F1BF71B6D4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.141.0-45.205.143.255
Signature Algorithm: sha256WithRSAEncryption
77:2c:48:5a:24:85:13:db:f9:83:9f:b5:8b:87:d9:04:86:c6:
b6:70:3d:ab:dc:3b:c3:35:9b:15:fb:21:36:46:fe:af:57:2a:
e5:04:45:f4:70:86:af:00:8d:52:2d:30:0d:0a:45:d7:a1:49:
45:c2:4a:fd:e4:3e:a4:5a:38:6f:b3:d9:0a:31:4a:7d:94:37:
5f:25:26:a4:7b:a6:cb:ef:ca:a2:6b:d9:3b:bc:59:72:b7:0d:
9b:b6:01:4b:b4:66:2b:b3:79:f4:7f:11:7d:64:18:c2:a0:59:
62:49:22:2a:fd:88:3d:77:cf:b3:59:76:3c:b0:12:69:9c:9c:
d9:8f:f3:fb:36:fc:17:68:22:d1:98:fd:7e:50:cb:18:29:a5:
ab:2a:8f:07:bc:db:bd:7a:2a:b4:84:c5:20:f5:ba:ae:8b:56:
b1:73:d3:64:6e:de:7b:05:d4:af:84:5c:d2:f2:44:e8:85:2b:
b4:a5:be:cf:36:2b:a4:7f:14:1e:24:b8:4e:ac:cd:2f:d3:ed:
cb:4f:7d:b9:46:3e:5a:a0:9a:61:8f:cd:81:41:a4:bf:93:40:
50:47:48:69:30:a7:c8:af:2b:f7:59:6e:53:f8:b1:89:5e:d3:
e5:eb:5e:d0:d5:45:3f:10:58:a7:30:4c:5a:4e:d5:25:f1:e2:
c1:82:69:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:13:56 2026 by rpki-client