Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/74E405865C3011F1B920CC01CF1D38B0.roa
File: 74E405865C3011F1B920CC01CF1D38B0.roa (raw, json)
Hash identifier: tqtjfLKcRHOcRJEWfwxUvLXv8rzch9zwMEdIUqN1/TU=
Subject key identifier: 26:AA:3C:CF:4F:9E:64:FE:48:AD:35:0C:68:7E:F4:6E:45:35:34:74
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BAE3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/74E405865C3011F1B920CC01CF1D38B0.roa
Signing time: Sat 30 May 2026 14:04:22 +0000
ROA not before: Sat 30 May 2026 14:04:17 +0000
ROA not after: Mon 06 Jul 2026 14:04:17 +0000
asID: 199707
IP address blocks: 45.202.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113379 (0x1bae3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 30 14:04:17 2026 GMT
Not After : Jul 6 14:04:17 2026 GMT
Subject: CN=6a1aee66-0ff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a1:47:a0:8b:65:eb:85:c7:1b:82:33:9a:dc:
b0:96:45:e4:4e:ac:b4:a0:7e:25:4c:8b:a3:64:c8:
ec:75:7d:bc:11:0c:d8:ab:6f:23:69:89:a8:75:6c:
45:09:77:a4:71:46:ea:8c:2d:e0:c1:74:11:52:15:
b0:51:88:e9:fc:fd:b7:e3:b4:38:81:fc:d0:8d:68:
f2:6a:e3:04:99:39:f2:ee:36:fe:39:bd:3b:9c:3a:
91:27:0e:a3:f2:f7:95:2b:e4:c9:47:cd:6a:0a:e3:
0e:e4:5c:68:0d:82:58:cc:18:f8:f2:15:94:e9:08:
a7:b8:23:0c:52:2a:90:61:7e:78:6b:be:f3:bf:e4:
eb:9e:1f:43:10:74:10:99:8f:01:5e:5e:38:da:01:
4a:cf:73:cc:d5:f8:2c:dd:6b:c8:88:65:90:3b:37:
2a:cc:2d:7f:b2:bf:57:e3:15:33:95:73:b7:9a:8a:
0b:b0:dd:25:be:c2:ec:47:1b:6a:05:f2:e8:3a:06:
99:44:98:ef:4d:05:c8:c9:3f:cd:2c:3c:5a:b9:a9:
6e:ed:74:79:ea:e4:57:40:29:5f:86:bd:6a:09:02:
73:d1:74:bd:95:e1:d2:de:7b:4d:a4:13:6e:a0:16:
52:70:44:b8:43:ba:a5:a5:ef:f0:53:82:f3:fa:f8:
2d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:AA:3C:CF:4F:9E:64:FE:48:AD:35:0C:68:7E:F4:6E:45:35:34:74
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/74E405865C3011F1B920CC01CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.107.0/24
Signature Algorithm: sha256WithRSAEncryption
32:79:b0:1e:10:9e:bb:ea:60:0c:4b:2e:37:95:85:dd:b5:42:
f1:68:a9:08:63:71:d6:78:67:cb:00:a3:07:c9:70:4f:15:10:
a9:8a:bd:b9:28:4a:ae:b8:10:85:b7:ec:4d:11:f3:9f:ab:aa:
34:eb:c2:b4:3f:80:4d:23:0b:de:a0:6c:85:5d:87:f4:14:db:
0d:63:25:f5:60:00:bd:3c:3f:54:37:04:5c:40:81:ed:bc:d7:
8a:31:46:40:18:45:7e:46:56:65:38:f8:c4:20:73:0f:18:6f:
ca:18:f4:03:16:8c:e2:3a:a1:d4:4d:eb:81:bd:4f:85:5a:e2:
25:8d:01:bf:6a:b5:0a:61:d9:89:1d:fd:4b:06:cf:b7:22:83:
67:8a:0f:9f:66:b2:cf:a1:87:e6:d6:f6:14:1b:67:62:99:98:
35:64:75:e6:c0:25:27:cc:19:59:0c:3f:a9:f9:4c:0c:a7:46:
8f:66:66:84:55:fe:44:4c:74:8f:04:0b:fa:f2:d3:36:9a:cb:
7c:b1:ca:43:31:16:37:9f:e9:f5:17:ee:ec:d9:46:f2:c8:8c:
ab:53:22:bf:c5:ab:4f:9e:73:aa:a4:72:81:18:43:0b:1e:da:
30:18:52:76:e3:28:2b:62:4a:de:49:1b:c8:b5:a1:38:83:7c:
ed:06:e4:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:14:15 2026 by rpki-client