Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/69C825A6552D11F18B409DD4CE1D38B0.roa
File: 69C825A6552D11F18B409DD4CE1D38B0.roa (raw, json)
Hash identifier: ZTWbdP1EAMU1lA1oxXn+qJtWYxGwTDyQm6ygEhbPs5c=
Subject key identifier: 8D:D5:41:15:9F:81:33:E2:BB:09:AB:58:1D:56:FD:84:00:BC:E5:BC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B75C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/69C825A6552D11F18B409DD4CE1D38B0.roa
Signing time: Thu 21 May 2026 15:54:56 +0000
ROA not before: Thu 21 May 2026 15:54:52 +0000
ROA not after: Sun 21 Jun 2026 15:54:52 +0000
asID: 395272
IP address blocks: 45.196.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112476 (0x1b75c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 21 15:54:52 2026 GMT
Not After : Jun 21 15:54:52 2026 GMT
Subject: CN=6a0f2ad0-3950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:bc:e3:be:e1:ab:52:1f:fa:e8:c7:bb:fb:d1:
d9:1c:05:81:7c:33:29:1f:64:83:55:c2:a7:08:ed:
ff:29:fa:ce:0a:19:a2:45:ff:d8:ec:62:ab:13:d8:
5d:33:cc:a2:43:e6:64:34:de:36:a0:8a:8c:f0:93:
63:05:aa:03:cc:70:18:54:0a:15:63:a5:ae:2a:4d:
6f:41:80:cb:f6:00:96:05:24:4e:98:ca:27:f3:fa:
cb:d2:9b:71:2d:1c:10:ad:64:02:f7:27:64:6c:bb:
91:ad:4e:90:3a:43:38:d0:9d:e8:d1:8d:00:24:f8:
c2:d4:e1:c5:4e:2e:f6:45:18:b1:8c:8c:4c:0a:b4:
fc:91:ec:c1:6f:d3:99:96:9a:34:88:93:0f:6e:b4:
74:82:f8:f3:3f:39:75:f9:d2:32:f9:b6:71:b2:77:
c5:05:8f:fb:fe:6e:d5:48:64:94:45:8d:0f:70:ff:
f0:3c:c6:64:40:f4:dd:7f:b2:4f:42:55:4d:e4:18:
41:52:7c:be:58:1c:37:6f:17:10:26:85:2c:75:2d:
0c:83:e4:d6:e1:f4:38:d7:1c:c0:b6:3b:9c:ab:67:
c8:51:3f:e4:6e:81:64:08:cd:c6:b1:97:91:93:9a:
8f:27:7d:e0:51:b9:4a:9b:49:f4:c1:8c:fe:44:85:
b8:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:D5:41:15:9F:81:33:E2:BB:09:AB:58:1D:56:FD:84:00:BC:E5:BC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/69C825A6552D11F18B409DD4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.177.0/24
Signature Algorithm: sha256WithRSAEncryption
20:10:f8:50:11:59:bb:8a:b2:e4:63:14:52:e1:f4:a8:59:25:
9e:6d:be:de:ed:ef:9d:99:e9:59:3c:cd:bf:62:04:ab:4e:f5:
45:3a:b9:6f:ac:9c:a9:e2:6c:28:77:22:57:33:c0:8b:81:18:
60:a4:a5:c9:7e:8f:a8:ff:4e:ce:3f:76:14:2e:50:66:09:12:
29:f8:3f:5e:8e:9b:15:62:f5:2b:03:b5:9e:d9:30:af:78:95:
5f:1b:40:38:6e:92:69:81:1c:3b:1b:f0:76:27:fc:c4:23:72:
f4:79:83:46:15:f4:85:25:5b:63:da:87:85:78:16:59:1f:60:
c7:0d:f2:bf:49:94:d5:a3:6b:c8:06:8a:bc:dd:31:67:92:94:
aa:54:41:6d:f1:41:f2:b2:ff:da:7c:e0:51:c8:ce:b6:36:33:
22:9d:63:b9:59:a3:fe:2e:17:ce:d5:be:bd:e0:f5:06:7d:cc:
14:8e:69:cc:0e:f0:13:17:54:3b:d2:37:d0:92:d6:3c:6e:93:
85:ef:56:25:5c:c1:b4:5a:10:14:3c:6f:ca:da:56:4c:55:b2:
33:24:5b:8c:57:cc:61:67:b6:62:9c:4f:a0:10:7d:de:6d:57:
42:52:37:03:a4:d8:ab:9b:f4:58:c8:49:53:7c:39:14:b0:dc:
6c:57:78:4d
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAbdcMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNTIxMTU1NDUyWhcNMjYwNjIxMTU1NDUyWjAYMRYw
FAYDVQQDEw02YTBmMmFkMC0zOTUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA7bzjvuGrUh/66Me7+9HZHAWBfDMpH2SDVcKnCO3/KfrOChmiRf/Y7GKr
E9hdM8yiQ+ZkNN42oIqM8JNjBaoDzHAYVAoVY6WuKk1vQYDL9gCWBSROmMon8/rL
0ptxLRwQrWQC9ydkbLuRrU6QOkM40J3o0Y0AJPjC1OHFTi72RRixjIxMCrT8kezB
b9OZlpo0iJMPbrR0gvjzPzl1+dIy+bZxsnfFBY/7/m7VSGSURY0PcP/wPMZkQPTd
f7JPQlVN5BhBUny+WBw3bxcQJoUsdS0Mg+TW4fQ41xzAtjucq2fIUT/kboFkCM3G
sZeRk5qPJ33gUblKm0n0wYz+RIW4+wIDAQABo4ICojCCAp4wHQYDVR0OBBYEFI3V
QRWfgTPiuwmrWB1W/YQAvOW8MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC82OUM4MjVBNjU1MkQxMUYxOEI0MDlERDRDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcSxMA0GCSqGSIb3DQEBCwUA
A4IBAQAgEPhQEVm7irLkYxRS4fSoWSWebb7e7e+dmelZPM2/YgSrTvVFOrlvrJyp
4mwodyJXM8CLgRhgpKXJfo+o/07OP3YULlBmCRIp+D9ejpsVYvUrA7We2TCveJVf
G0A4bpJpgRw7G/B2J/zEI3L0eYNGFfSFJVtj2oeFeBZZH2DHDfK/SZTVo2vIBoq8
3TFnkpSqVEFt8UHysv/afOBRyM62NjMinWO5WaP+LhfO1b694PUGfcwUjmnMDvAT
F1Q70jfQktY8bpOF71YlXMG0WhAUPG/K2lZMVbIzJFuMV8xhZ7ZinE+gEH3ebVdC
UjcDpNirm/RYyElTfDkUsNxsV3hN
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:07:15 2026 by rpki-client