Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/854DB3AA5EAA11F188B51609CF1D38B0.roa
File: 854DB3AA5EAA11F188B51609CF1D38B0.roa (raw, json)
Hash identifier: dt/dVHmtLvCnQoT3kOX8xzhy3s07CMOSoZpY8L/T1aA=
Subject key identifier: 1E:0B:AA:E3:75:E3:6C:48:88:B0:3F:E9:B4:AD:A6:25:D3:69:14:13
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BB54
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/854DB3AA5EAA11F188B51609CF1D38B0.roa
Signing time: Tue 02 Jun 2026 17:43:10 +0000
ROA not before: Tue 02 Jun 2026 17:43:05 +0000
ROA not after: Thu 09 Jul 2026 17:43:05 +0000
asID: 44559
IP address blocks: 45.196.106.0/24 maxlen: 24
45.196.107.0/24 maxlen: 24
45.202.192.0/24 maxlen: 24
45.202.193.0/24 maxlen: 24
45.207.6.0/24 maxlen: 24
45.207.148.0/24 maxlen: 24
45.207.149.0/24 maxlen: 24
45.207.150.0/24 maxlen: 24
45.207.151.0/24 maxlen: 24
45.207.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113492 (0x1bb54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 2 17:43:05 2026 GMT
Not After : Jul 9 17:43:05 2026 GMT
Subject: CN=6a1f162e-ddd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:79:87:c4:dc:72:8e:b2:b0:3c:a5:a8:37:60:
42:35:ac:da:25:05:4e:5b:5f:a2:9e:fa:92:9f:55:
63:1c:db:06:b8:af:7c:34:db:0b:28:62:31:cd:02:
ea:42:36:ca:d9:3a:41:1f:c5:fe:a7:97:af:10:a4:
e8:30:29:b8:51:c7:f2:b1:fb:c7:60:9d:8b:de:19:
ea:cf:d8:fb:8e:ef:7d:d3:14:4a:0d:36:7a:31:04:
44:87:3d:ea:ce:20:25:02:3e:f6:42:88:47:f2:e6:
6b:16:14:92:5e:41:be:2f:2b:ba:37:cd:f5:29:1b:
a9:1d:6a:dc:e2:c6:70:c3:9c:d0:ac:6e:c3:0c:3d:
44:03:59:22:b1:99:2d:6c:ca:44:1d:1f:f1:99:6c:
77:5e:9a:6e:f0:e8:95:ce:29:13:f0:aa:a7:0c:6d:
2f:6f:56:86:39:a7:f4:e9:b5:58:dd:39:6d:49:5b:
81:0d:33:b3:25:7d:21:28:c3:02:1b:22:67:24:ed:
e7:16:d4:0e:09:58:6a:ee:25:6e:44:c5:8a:29:ee:
d7:f1:f3:cc:08:59:cc:01:4c:67:04:2f:13:0a:95:
43:96:a8:8c:6a:ea:a5:a4:7c:b7:d5:8e:0c:cb:01:
92:48:3f:e7:6f:eb:b4:24:88:0f:c8:81:53:f3:95:
80:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:0B:AA:E3:75:E3:6C:48:88:B0:3F:E9:B4:AD:A6:25:D3:69:14:13
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/854DB3AA5EAA11F188B51609CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.106.0/23
45.202.192.0/23
45.207.6.0/24
45.207.148.0/22
45.207.160.0/24
Signature Algorithm: sha256WithRSAEncryption
39:89:f2:4d:ae:22:c2:5c:ed:c7:c0:75:fe:b1:12:0a:df:56:
f4:0e:c5:87:d0:91:d0:65:3b:11:31:d7:47:c9:f2:57:79:8e:
41:09:99:a4:b2:18:0e:11:d6:9d:0c:00:40:55:9f:ab:37:e9:
12:c6:c7:1e:87:0c:3f:3d:21:20:06:04:d8:97:67:50:96:8b:
21:71:26:94:ca:0b:c2:c8:e4:07:74:0a:38:83:91:3b:24:7e:
9e:15:d7:12:60:89:f0:d6:5a:ae:98:fc:ef:08:ed:56:db:a6:
4b:80:a6:2b:c8:98:10:20:34:22:fe:dd:95:8c:d9:32:b9:ca:
75:eb:a5:a1:77:86:cb:22:ab:a4:f3:da:d9:4f:b1:9b:79:8d:
a5:05:39:e2:28:aa:e6:e9:63:9e:2c:9a:30:5f:23:3e:bd:58:
4e:44:47:c0:f2:a3:19:84:26:95:93:19:48:f8:38:74:e4:bf:
ae:d3:54:84:9b:f8:35:ad:07:36:2d:06:fc:01:24:06:fd:68:
a6:12:6b:d7:36:95:39:d5:30:02:80:8d:38:cf:50:60:87:55:
a7:59:39:90:8f:36:90:a8:a0:c7:b8:b1:1a:e9:7d:c5:ed:16:
6e:d7:c8:30:90:a8:e7:8e:03:45:78:c7:1c:d8:f1:e9:b3:92:
14:5f:48:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:28:47 2026 by rpki-client