Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C6F6AE434CB11F1BA3418DBCE1D38B0.roa
File: 6C6F6AE434CB11F1BA3418DBCE1D38B0.roa (raw, json)
Hash identifier: 0EJ2LrnLF9ndhMdkiLUHeBkJJ7GU44Pyf75F/n4v/Wk=
Subject key identifier: 83:D3:D5:FF:05:A7:AB:85:9C:BE:65:CB:63:76:EE:71:0B:6C:38:4A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01ABAA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C6F6AE434CB11F1BA3418DBCE1D38B0.roa
Signing time: Fri 10 Apr 2026 10:52:53 +0000
ROA not before: Fri 10 Apr 2026 10:52:48 +0000
ROA not after: Sat 23 May 2026 10:52:48 +0000
asID: 272951
IP address blocks: 45.195.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Apr 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109482 (0x1abaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 10 10:52:48 2026 GMT
Not After : May 23 10:52:48 2026 GMT
Subject: CN=69d8d685-7d92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:77:d8:68:84:41:b4:7f:65:43:b4:eb:b4:72:
d8:76:99:71:d9:d3:94:1d:b3:bc:12:be:23:53:ca:
ed:d3:ec:00:95:9d:50:66:05:f8:6c:26:bf:21:02:
db:ba:06:2e:dc:90:c1:38:95:25:86:3b:ea:5e:80:
95:36:75:d6:d9:a9:13:cf:5a:03:72:48:45:bc:31:
9a:70:4c:d9:f6:02:07:c5:cf:94:12:6e:05:88:91:
71:e9:38:39:da:fb:6d:df:85:62:40:16:4f:4f:b1:
74:c6:a2:0d:1c:e0:d9:14:15:62:54:f6:a4:06:48:
2e:af:f7:a7:b0:d3:81:95:be:87:9d:4d:9b:a8:49:
51:e8:92:c2:ad:05:ad:0e:75:b8:bb:0a:94:ea:d4:
ee:d3:82:52:40:ab:b0:37:f0:fc:dc:8f:6d:7a:25:
ba:7f:61:dc:ac:76:49:df:ed:68:03:5b:b9:a6:df:
b7:9e:75:bc:72:4a:61:12:1f:ac:c0:9a:78:a5:8d:
fa:af:16:9a:b8:76:e0:08:25:a9:73:73:7a:0a:0c:
84:9e:0e:18:8d:ce:33:fe:44:c3:37:cb:97:7d:23:
1d:6b:e8:b5:08:c2:1a:81:86:ba:0b:c2:5c:c2:35:
72:2d:e1:ac:51:f1:fb:ad:5a:17:df:52:b9:36:a5:
c5:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:D3:D5:FF:05:A7:AB:85:9C:BE:65:CB:63:76:EE:71:0B:6C:38:4A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6C6F6AE434CB11F1BA3418DBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.94.0/24
Signature Algorithm: sha256WithRSAEncryption
98:10:87:12:88:d7:07:0a:b5:92:fa:31:5b:4a:ee:7c:ae:8c:
ee:5e:5d:4e:cd:51:3a:73:6a:b3:2c:c1:b6:33:e1:c8:51:f6:
57:7b:d0:a0:49:c6:c3:e4:b8:94:5b:bd:ca:39:26:34:c5:34:
fe:45:a6:40:b1:7c:f1:b0:8b:84:73:4e:2e:d4:f2:06:4b:39:
0d:00:3d:a2:cc:69:bf:46:90:fb:d1:27:4c:58:46:02:d1:ea:
67:e9:91:eb:af:70:d8:e7:80:6a:ca:bb:60:a1:df:60:b9:11:
f5:da:45:62:56:12:b2:bf:b7:de:b3:a0:bd:48:e8:f5:32:43:
62:03:a5:a8:76:70:ce:9b:f9:0e:a3:f9:99:a9:0b:2d:82:f5:
1e:9c:19:9b:2f:af:1e:f6:25:a4:58:27:ad:e3:77:5a:72:c8:
59:31:4a:c2:09:ed:9c:ea:ea:36:8c:88:4d:d9:7d:33:e5:fd:
9b:e9:15:23:60:fd:ca:52:2b:0f:6b:ac:91:dc:d2:5f:2d:47:
9e:1d:54:41:37:fc:0e:39:7d:e8:51:4f:20:fb:da:98:fb:c4:
06:8d:02:de:9d:2a:43:96:df:a3:6d:d0:6a:5d:fd:97:a1:46:
89:52:72:92:7f:df:67:b1:03:e1:77:ff:71:d5:e0:05:7c:b0:
e9:18:0b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 14:30:02 2026 by rpki-client