Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7A7662C0599F11F1850941F1CE1D38B0.roa
File: 7A7662C0599F11F1850941F1CE1D38B0.roa (raw, json)
Hash identifier: mzUR9olfoNt98VXcpK+lzlSANCEZ29h0+FH9ecfnfmw=
Subject key identifier: 05:0D:EF:75:B8:24:E7:68:1E:19:32:B1:41:A9:F9:FA:34:96:A8:8C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BA29
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7A7662C0599F11F1850941F1CE1D38B0.roa
Signing time: Wed 27 May 2026 07:41:32 +0000
ROA not before: Wed 27 May 2026 07:41:27 +0000
ROA not after: Tue 14 Jul 2026 07:41:27 +0000
asID: 137643
IP address blocks: 45.196.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113193 (0x1ba29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 27 07:41:27 2026 GMT
Not After : Jul 14 07:41:27 2026 GMT
Subject: CN=6a16a02c-1d13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ba:a0:e2:de:2b:f4:7e:81:69:be:88:16:40:
9c:9d:d8:70:4d:8c:fb:95:28:ae:9a:5e:5b:f0:96:
23:ec:44:3c:9f:03:d9:bd:8b:f9:f1:44:f7:b3:83:
1f:da:b8:ca:e4:e3:e2:a6:34:1a:99:b8:fa:8d:f1:
43:29:0b:ab:f4:21:68:b0:dc:5f:7c:ab:85:0e:a6:
64:cd:97:68:37:c7:d4:89:3f:6f:61:f9:fe:af:9e:
07:59:58:ae:12:66:bb:f1:1e:71:f7:9f:5d:44:ab:
06:d4:7f:d2:bb:34:5d:18:06:39:02:14:b9:22:0a:
e0:2a:7b:56:f2:db:ef:1e:4e:7f:8a:a3:63:5a:19:
19:6a:3b:1c:f9:e1:39:d2:6e:da:a1:aa:3e:81:2d:
f4:cf:b1:ab:e6:55:c3:fd:f7:00:77:3c:38:fb:e1:
da:f0:fd:a9:02:fa:ba:13:df:91:d9:c2:c8:5c:e0:
5f:b8:88:09:e3:99:98:52:02:97:76:9a:88:85:b9:
59:d5:2d:09:29:e0:c4:bc:2d:57:9d:53:aa:61:95:
dc:8c:08:ec:b0:25:58:aa:00:76:22:02:24:3c:cf:
99:f3:57:3d:d8:11:b2:19:25:f5:13:12:a3:0f:f7:
f5:c6:92:90:6d:14:c3:73:5c:c6:92:4e:68:3b:1c:
ba:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:0D:EF:75:B8:24:E7:68:1E:19:32:B1:41:A9:F9:FA:34:96:A8:8C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7A7662C0599F11F1850941F1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.196.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:64:11:46:2a:fd:46:a1:f0:d9:c0:f9:2a:16:f3:77:53:37:
90:de:11:ff:fe:ab:57:84:5f:5b:c3:f7:9a:ff:10:94:73:58:
c6:a6:00:11:2e:5b:06:73:e6:66:5f:00:a6:37:0b:a6:17:f9:
b6:63:e2:f5:4d:e1:91:3c:a0:6d:cc:d3:5c:0f:f8:53:d6:65:
be:0a:81:9c:bd:d4:ed:e3:a3:a6:79:7b:04:98:24:da:73:ba:
37:3a:6a:d1:4f:3a:0b:e6:d4:c2:3d:1a:79:ba:0c:ee:e4:54:
a5:67:83:6b:75:a0:f3:f4:53:4d:89:ce:54:d0:d4:be:ee:ca:
d0:b1:12:6d:f3:22:a0:fd:d0:a7:30:ea:db:fa:a7:6f:3b:ad:
db:37:6a:58:11:5f:82:9b:f8:2f:1e:01:7a:21:02:64:eb:9f:
4a:32:69:d5:90:88:9b:01:49:59:61:50:d5:c4:22:1a:c8:a8:
98:ed:ec:e3:46:1a:0e:54:45:5a:49:27:a6:35:01:63:c0:a7:
f5:93:b4:df:f5:9e:56:20:68:58:02:ac:6b:3c:f0:be:fc:f9:
6e:89:b5:10:01:68:3e:89:48:96:c0:0c:61:38:e7:7f:07:2a:
f5:13:e8:4c:3c:59:5a:2d:a1:61:26:0d:fa:e7:67:4e:25:1d:
09:98:cd:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:07:08 2026 by rpki-client