Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5DA3B438553D11F1A0A95CB5CE1D38B0.roa
File: 5DA3B438553D11F1A0A95CB5CE1D38B0.roa (raw, json)
Hash identifier: UF05AH1CWO2T7DPmS0kYW2aNE7EVDMmmOR7hgGmq/Zs=
Subject key identifier: A5:A7:53:DE:C1:2A:6A:38:CB:C8:79:A6:71:6A:10:6F:0F:EB:E3:9D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B787
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5DA3B438553D11F1A0A95CB5CE1D38B0.roa
Signing time: Thu 21 May 2026 17:49:08 +0000
ROA not before: Thu 21 May 2026 17:49:04 +0000
ROA not after: Sun 12 Jul 2026 17:49:04 +0000
asID: 9009
IP address blocks: 45.195.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112519 (0x1b787)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 21 17:49:04 2026 GMT
Not After : Jul 12 17:49:04 2026 GMT
Subject: CN=6a0f4594-6b86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:0a:4b:9b:01:ef:a8:41:3d:d6:73:66:5f:04:
17:1d:81:48:a4:9e:07:e4:cd:87:3a:75:2e:68:d0:
29:ed:cc:1c:f2:12:e9:66:87:f6:f6:bd:26:ff:4e:
ed:87:94:52:8b:f8:e0:2f:80:de:f5:b3:b6:99:37:
8a:c9:7e:6c:e8:2b:ca:d0:23:89:90:38:43:b5:4b:
54:f1:aa:04:11:4e:46:96:5e:6e:b1:a3:d2:ff:29:
59:a8:47:d2:6a:91:e9:51:2f:84:16:ff:54:a3:86:
79:fb:f3:36:7d:0d:74:0b:48:1c:22:9f:10:68:2d:
87:90:f3:2f:bd:bb:37:47:e8:aa:5b:41:98:fe:ec:
b6:52:cb:95:6a:d2:c4:27:82:25:13:49:d5:ce:d6:
d9:80:d8:fd:b0:28:df:5a:06:c5:75:07:97:83:f2:
82:b3:e4:9c:68:50:d5:50:88:00:3d:65:f2:28:c4:
54:6f:6a:c4:13:77:7c:5a:f3:3c:7a:2a:d7:2b:91:
b3:4b:4c:19:6b:a0:f7:3c:c0:3c:85:a7:54:8b:71:
dc:f3:a0:5a:27:d4:71:b0:86:3a:87:c5:1f:62:09:
d6:58:2f:03:13:2c:37:36:aa:7d:d6:ec:d1:82:b9:
62:60:20:ca:48:4d:11:5d:a7:05:72:28:69:fb:ad:
23:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:A7:53:DE:C1:2A:6A:38:CB:C8:79:A6:71:6A:10:6F:0F:EB:E3:9D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/5DA3B438553D11F1A0A95CB5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.110.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:e9:3b:c9:e2:fe:d6:7f:a3:14:4b:16:18:33:a5:5e:d8:b8:
05:10:ba:05:1a:41:b9:95:c9:13:21:31:4b:c0:2d:f5:aa:b7:
ab:04:65:25:70:e6:9a:7a:ed:04:b6:2e:56:07:e6:60:d2:8c:
a2:48:2c:0c:b1:45:29:2d:46:76:0b:77:ab:3a:c2:ae:45:c2:
75:3e:74:60:bb:89:f2:c9:22:26:93:cb:2a:e9:fd:a8:23:0e:
95:ff:d1:21:c7:09:cf:48:bf:06:0d:e4:e4:55:a7:58:80:ee:
95:a4:fb:14:c2:1b:85:2b:ee:55:de:b7:2a:b2:a9:57:66:da:
d1:bd:fe:2f:a3:af:98:23:11:77:7c:50:8e:f9:2b:27:ba:0f:
48:c6:e9:37:70:d6:10:35:33:39:41:d7:ba:e6:26:2c:96:15:
0e:db:c0:c8:87:b8:fa:83:11:23:60:b3:8e:7c:0b:98:89:56:
78:08:33:a4:9f:24:be:89:23:23:18:c2:69:2b:56:17:1d:25:
3f:05:6d:ec:6b:dc:4f:57:80:3a:eb:9a:ec:73:50:92:20:00:
cc:8f:16:a3:dd:2d:c6:c2:83:c8:43:d7:13:75:c5:4a:34:0f:
40:57:88:1d:bf:f7:c9:cd:cf:d8:7c:7e:c8:d8:ce:3b:94:41:
8a:e3:10:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:14:22 2026 by rpki-client