Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5CB7FCF0706D11F18BCCC1CDCE1D38B0.roa
File: 5CB7FCF0706D11F18BCCC1CDCE1D38B0.roa (raw, json)
Hash identifier: VlAVfx/vdrUJ/TtFQxw3M2agJP5ESiBSsCaJQ3DxPSc=
Subject key identifier: CE:AA:B9:B9:60:6B:F3:EC:CC:FA:1B:7A:54:A4:1D:90:FC:9A:D2:E5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C06A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5CB7FCF0706D11F18BCCC1CDCE1D38B0.roa
Signing time: Thu 25 Jun 2026 08:10:44 +0000
ROA not before: Thu 25 Jun 2026 08:10:38 +0000
ROA not after: Thu 23 Jul 2026 08:10:38 +0000
asID: 17497
IP address blocks: 45.192.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114794 (0x1c06a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 25 08:10:38 2026 GMT
Not After : Jul 23 08:10:38 2026 GMT
Subject: CN=6a3ce284-a0e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d5:05:60:33:07:c2:ba:04:39:bc:0a:ba:f6:
99:7d:f6:c8:3d:27:87:a9:a0:eb:1c:b1:cf:69:c2:
dd:e2:14:70:dd:e8:c5:1c:24:37:36:bb:00:7f:25:
fe:ee:19:5f:51:9e:8b:35:d6:a7:bf:fc:fc:29:68:
a8:c5:38:46:37:50:e0:27:bf:8b:c6:a2:b9:02:ec:
70:9f:65:0f:51:5f:d7:0a:ef:a1:75:4f:28:73:e6:
7b:d5:34:24:d7:58:e0:82:2e:8e:e5:2d:2c:5c:ff:
48:97:7a:7b:03:8b:9d:22:3e:69:90:0a:89:54:f3:
74:6b:b1:7b:07:be:f4:40:52:88:18:07:e1:80:cc:
7c:0a:28:39:02:e3:63:6a:41:fe:34:a3:3a:c1:e2:
81:2b:07:61:6c:cd:c9:19:8b:a0:68:c5:30:45:8a:
69:d0:4b:a0:f4:4b:94:90:a4:e3:80:cb:8f:2f:ba:
26:a9:24:5a:9b:51:7b:2b:e1:54:64:c6:29:10:95:
3e:a8:1c:54:2e:68:2a:07:02:8a:c0:44:31:a1:d4:
32:4f:72:fa:45:ae:0c:b1:5b:14:26:19:a4:43:bc:
42:e3:67:95:b9:ec:2c:34:85:93:fa:0e:f4:f1:47:
65:0f:1f:ef:e7:cb:cd:fc:ba:4b:ab:0b:80:23:28:
6e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:AA:B9:B9:60:6B:F3:EC:CC:FA:1B:7A:54:A4:1D:90:FC:9A:D2:E5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5CB7FCF0706D11F18BCCC1CDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.132.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:50:69:83:a3:54:3a:ac:76:d9:ab:f2:1f:fd:5b:a4:f4:d3:
17:72:c7:d8:35:cb:a4:bf:3d:8f:93:69:4f:40:5e:bf:ff:7b:
1f:21:07:9d:ae:e3:1a:2e:9b:66:93:cf:30:20:84:14:3e:97:
34:9f:30:c1:7f:0c:f9:0b:a5:3f:52:cf:e3:16:dd:05:37:d0:
31:ea:49:6a:21:32:ef:ee:22:ef:8a:1f:26:4a:00:21:b9:8a:
96:55:1c:4b:15:5a:0d:bd:e1:23:0a:c7:2d:ed:7a:bb:16:cf:
25:3f:89:e6:e6:70:da:78:b4:39:ce:70:82:03:ed:de:8b:03:
e9:e6:07:c1:b1:69:2b:c2:6a:be:57:d8:9b:2f:81:8c:fd:da:
e7:b0:88:6e:3d:18:7c:35:bc:d4:cc:57:89:6f:6d:2b:f6:ed:
d6:12:c4:e3:dc:14:43:88:b6:74:a6:24:07:ba:f4:e1:e0:12:
ad:7f:4e:ed:0a:62:79:a0:a1:04:ba:0b:b0:43:92:22:70:74:
5e:fa:17:4c:4d:f5:aa:c2:b1:5f:26:c1:a1:c1:14:6d:d2:cb:
34:4f:94:70:37:41:4f:b3:c1:f6:16:de:88:c1:20:88:59:c3:
18:1b:60:72:d3:70:c8:3f:49:70:0a:af:0d:72:ec:74:14:f5:
95:b9:90:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:47 2026 by rpki-client