Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5A0A7E8C794C11F1BECB48B2CE1D38B0.roa
File: 5A0A7E8C794C11F1BECB48B2CE1D38B0.roa (raw, json)
Hash identifier: UOsXe1Yg0r3vKqMnse8mNQgsQ+mEVN5pnmMiJGAUofU=
Subject key identifier: E7:10:39:44:F8:84:7E:DC:70:3C:CF:FC:69:7C:F6:6E:0E:EE:0F:8E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C349
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5A0A7E8C794C11F1BECB48B2CE1D38B0.roa
Signing time: Mon 06 Jul 2026 15:07:06 +0000
ROA not before: Mon 06 Jul 2026 15:07:02 +0000
ROA not after: Sat 01 Aug 2026 15:07:02 +0000
asID: 32043
IP address blocks: 45.204.54.0/24 maxlen: 24
45.204.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115529 (0x1c349)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 6 15:07:02 2026 GMT
Not After : Aug 1 15:07:02 2026 GMT
Subject: CN=6a4bc49a-658f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d3:60:0b:7e:90:f1:f7:c9:33:46:61:19:76:
a8:0a:8b:60:89:84:67:d2:20:f9:ad:85:fd:62:3b:
a1:94:f9:a1:de:b7:3e:5e:b5:8e:e0:99:76:7d:30:
4f:09:e3:f4:10:10:a2:4b:73:83:c7:82:b7:de:ab:
eb:56:ce:9b:f4:27:a4:7b:3e:26:f3:cb:f4:87:f3:
ca:40:89:8c:b5:17:ff:70:22:54:e8:f4:e9:cd:f3:
5f:7b:a6:ac:f4:98:df:c9:b2:ad:82:ab:52:0a:1e:
74:7f:f4:f3:9e:81:e7:03:f0:21:03:05:c7:5c:81:
42:b4:0a:36:62:e2:16:d4:48:26:c3:5a:39:8a:36:
fd:0f:85:5f:35:f3:cf:55:1c:c4:56:02:a6:59:67:
3e:4a:84:71:10:59:eb:67:46:13:2f:a2:e7:54:73:
dd:69:7f:1f:b6:74:e6:dc:5c:d8:2c:54:32:fe:dc:
58:c3:cc:67:9f:34:b1:f5:a8:6e:f7:41:c5:18:3f:
73:46:6b:f7:84:d1:53:e6:fc:1e:92:7b:73:62:de:
6d:59:5a:0e:c0:48:2b:b7:89:50:d2:d3:ac:a4:1f:
c6:95:03:fe:9a:c2:e2:bf:fe:b2:cf:c0:70:c1:b2:
ae:be:4a:40:a2:d4:9a:80:3a:5e:4b:c5:82:20:6a:
e1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:10:39:44:F8:84:7E:DC:70:3C:CF:FC:69:7C:F6:6E:0E:EE:0F:8E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5A0A7E8C794C11F1BECB48B2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.54.0/23
Signature Algorithm: sha256WithRSAEncryption
40:90:3b:24:3d:f8:32:3d:be:c8:2a:44:3d:47:94:d1:e7:64:
f8:c7:3e:1c:99:4e:ed:76:17:10:68:03:5e:1a:a9:20:66:f3:
e6:e2:6f:f7:af:01:07:16:78:a4:42:e4:c0:23:9d:15:1e:dc:
e0:d6:7a:74:b8:13:67:cd:cf:d4:6f:1b:10:2a:ce:ed:b3:ab:
cc:df:50:b2:fc:b4:1a:c9:21:32:07:78:f5:f2:14:7c:11:18:
34:5e:8b:3f:07:8d:1a:34:94:7a:b9:93:d4:90:f9:c5:63:7d:
c7:56:90:80:c8:24:63:d7:f9:e5:1c:fd:2e:53:81:79:86:98:
69:74:ea:31:1e:a3:8b:41:cb:fc:5f:3d:10:26:18:57:a0:79:
5b:4e:94:88:b7:99:55:4b:be:10:93:c0:c7:2f:dc:a6:72:73:
5c:90:54:de:e5:65:f8:50:a4:d6:95:8f:60:50:b5:05:9f:1c:
36:93:09:cb:04:6c:6b:9b:92:93:32:39:ec:02:38:82:72:7d:
ba:7b:f1:42:de:e8:b9:4a:ee:bf:ed:18:64:29:a0:4b:86:90:
bb:7f:30:30:3a:14:ac:f6:eb:4f:9b:d5:69:69:0f:aa:65:ab:
ef:e1:8d:b8:13:fc:da:95:ce:ca:78:13:a6:4f:80:76:fe:8b:
2a:ea:1b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:41:42 2026 by rpki-client