Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6F28CC6E54C211F1A971DDC1CE1D38B0.roa
File: 6F28CC6E54C211F1A971DDC1CE1D38B0.roa (raw, json)
Hash identifier: u2F5AUrUNNr/xX2Wq8HwE0etwtPJj3ADrtUBu09SsMo=
Subject key identifier: 10:2E:A0:97:C5:3A:90:EB:B3:D3:32:28:F1:EA:F5:A6:AF:24:B5:B9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B6A1
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6F28CC6E54C211F1A971DDC1CE1D38B0.roa
Signing time: Thu 21 May 2026 03:09:09 +0000
ROA not before: Thu 21 May 2026 03:09:03 +0000
ROA not after: Wed 01 Jul 2026 03:09:03 +0000
asID: 136501
IP address blocks: 45.207.128.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112289 (0x1b6a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 21 03:09:03 2026 GMT
Not After : Jul 1 03:09:03 2026 GMT
Subject: CN=6a0e7755-c835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fa:8d:fd:d1:2f:10:21:59:73:a6:b4:92:fc:
d2:4f:a5:31:d7:d9:c9:cb:98:f8:f8:ec:9f:5e:3d:
69:69:3d:91:27:27:45:2e:76:aa:aa:b0:19:16:25:
7f:c7:df:1d:cb:2e:51:ac:22:7c:7b:56:71:94:18:
f1:db:23:83:a7:c3:f7:96:1f:36:e2:60:07:71:ba:
d6:ed:38:63:9e:c9:df:52:fc:a1:a2:3d:0d:50:66:
31:f9:f7:dd:2f:f8:b9:24:a1:5f:2d:9d:7b:74:98:
fd:db:f5:0d:a8:bc:f1:d0:dd:92:85:ec:a2:fe:e9:
cb:b1:e4:ec:e8:e7:f1:34:69:19:4a:ff:48:08:1d:
2d:7f:4a:2d:cc:91:e7:77:8f:fb:f4:fe:5e:e4:a2:
47:3c:2b:61:9b:3d:90:6c:97:35:65:1c:5b:9a:e5:
44:00:4e:53:c5:35:a3:be:51:b7:8a:51:a7:65:d6:
97:dc:19:bc:8d:32:21:3f:3d:69:4c:7b:6d:e3:05:
c8:3e:4b:e9:27:b8:65:74:23:1e:9c:65:e5:9d:fc:
75:8b:12:ba:05:40:49:90:8f:45:a1:a9:2c:af:43:
e6:cc:b2:83:ca:b7:f8:68:5e:cb:19:0a:3a:19:5e:
31:d6:20:71:38:0b:30:a0:e3:4c:b0:cf:49:f3:97:
64:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:2E:A0:97:C5:3A:90:EB:B3:D3:32:28:F1:EA:F5:A6:AF:24:B5:B9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/6F28CC6E54C211F1A971DDC1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.128.0/20
Signature Algorithm: sha256WithRSAEncryption
aa:5f:19:44:d3:59:fe:3d:31:cb:1a:75:50:61:15:93:c3:bb:
0e:02:41:f0:8a:73:37:62:5e:04:2b:c5:e2:61:d8:5e:d8:3f:
86:61:59:31:77:90:0a:86:ca:5d:be:4d:c5:a6:a0:2b:79:1b:
8c:69:ee:fe:d0:46:24:b7:b6:ff:39:b2:f8:ff:b3:26:5f:bf:
08:08:c4:40:ec:8f:3a:8d:09:85:c2:1a:11:1f:5f:c8:6e:7d:
ec:e1:2f:1e:84:af:ff:bb:46:a7:93:ef:04:55:87:98:16:40:
47:dc:56:a5:d7:b5:27:c1:9e:23:72:93:3d:ac:a7:e6:79:b9:
aa:2b:fe:d9:5f:66:ce:2b:a8:bc:74:cf:a3:09:06:f1:cb:4f:
14:fe:21:6e:39:07:5e:6e:3d:3d:89:31:7f:f5:76:62:6f:33:
78:1c:54:4b:c2:95:ec:fd:dd:23:9e:88:04:3a:7f:6e:f3:33:
ff:b4:c4:a0:26:4c:91:a6:3c:e8:91:b8:f7:cb:95:cd:b7:0e:
e0:1e:f7:55:9d:5c:ea:a2:0b:47:02:2d:a1:a0:d4:51:88:cf:
13:0c:e2:b5:76:e8:d9:98:61:86:db:84:3a:92:22:5b:6a:40:
7f:04:2c:26:3f:f9:81:00:6a:e1:56:43:6b:81:47:eb:fd:4c:
40:22:0a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:06:51 2026 by rpki-client