Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/905E16BE720911F1B7860E16CF1D38B0.roa
File: 905E16BE720911F1B7860E16CF1D38B0.roa (raw, json)
Hash identifier: U/ODqcuMEy2/lPJp+tmV22TA52oQ25mom7mMHzuILgg=
Subject key identifier: A4:1E:D2:17:A6:5E:84:2D:DA:0D:05:73:8A:14:7B:B9:EB:73:21:6F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C0E0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/905E16BE720911F1B7860E16CF1D38B0.roa
Signing time: Sat 27 Jun 2026 09:21:23 +0000
ROA not before: Sat 27 Jun 2026 09:21:19 +0000
ROA not after: Tue 04 Aug 2026 09:21:19 +0000
asID: 204741
IP address blocks: 45.194.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 02 Jul 2026 00:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114912 (0x1c0e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 27 09:21:19 2026 GMT
Not After : Aug 4 09:21:19 2026 GMT
Subject: CN=6a3f9613-499e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:52:ea:4e:2b:ef:56:d1:c5:65:5f:ef:5f:63:
f9:cf:a2:27:ad:d3:80:f2:e2:81:c8:42:71:de:ee:
d8:0b:bf:0b:a4:ec:48:4e:3a:e8:c8:1e:f5:f0:8d:
7e:3d:98:6a:6a:07:d4:60:74:4c:be:80:67:a2:aa:
3d:28:a5:2c:6a:bc:3b:28:89:9b:c6:40:16:50:8e:
5f:21:59:f0:ef:8e:60:63:ad:8e:25:8c:92:02:33:
84:26:5e:b5:55:06:cd:74:fa:94:c3:8b:bc:12:40:
08:01:3a:18:cf:9c:17:de:55:7e:94:82:d7:b1:64:
cb:a7:78:3b:29:f5:59:59:55:4d:47:aa:37:44:ce:
47:21:78:b6:61:87:07:42:5d:b1:8a:d4:7e:cb:27:
df:5c:9b:6a:2e:4d:30:5f:4f:81:62:e4:91:16:55:
6d:7c:d7:9b:ec:6f:4b:b1:ad:fe:dc:85:8d:34:79:
0c:ee:07:38:08:80:8c:30:1e:fb:38:18:ec:84:77:
56:e2:84:38:82:cc:40:b9:ab:3f:cd:13:e9:c3:25:
95:a9:7b:88:74:10:b7:ab:53:d0:ef:1a:ba:96:be:
6b:ed:81:dd:0c:c3:b0:24:78:43:d2:1a:99:48:b7:
d4:48:8d:dd:7f:a7:d1:e3:fe:1d:3f:bf:93:d8:b6:
6f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:1E:D2:17:A6:5E:84:2D:DA:0D:05:73:8A:14:7B:B9:EB:73:21:6F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/905E16BE720911F1B7860E16CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.65.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:0e:10:e7:dd:13:35:2d:59:b9:15:a4:b1:8f:b9:77:72:9e:
86:b3:a5:b7:06:6f:70:2d:89:df:7b:d6:d6:1e:82:9f:13:5f:
16:33:79:36:4c:58:6d:23:db:63:b2:0d:48:a1:c2:1b:d1:d6:
07:5f:37:6b:86:66:a1:6f:39:9b:a4:0f:eb:80:c3:d4:94:7d:
85:b2:f2:46:f4:49:b9:14:08:8b:b3:c8:c2:8f:fe:b7:4d:d6:
22:36:e3:94:5a:3f:5f:aa:1d:d1:ea:9d:bf:7a:b7:e7:44:60:
47:3f:f0:5f:92:58:14:5a:6c:55:5e:c9:9a:4f:68:ff:a2:79:
70:cf:81:e7:d5:11:e3:07:71:b4:6b:5f:dd:c0:f8:4d:c1:19:
83:19:a4:ad:9e:5b:dc:53:9a:06:60:21:19:ff:87:8e:20:bd:
1c:4d:00:1f:8d:72:3e:75:1d:41:6e:9a:c7:50:29:f5:74:f8:
43:37:cf:ad:16:c5:89:86:90:23:f1:f5:65:83:a5:0d:8a:f3:
2d:74:cb:9a:0b:03:8a:0d:44:ce:7a:de:51:28:33:5e:52:68:
17:b8:6a:87:8b:76:7e:85:b4:7c:e4:e3:43:e0:e1:80:72:46:
5c:79:11:78:35:15:48:fa:cd:b6:d9:d6:14:3a:06:13:34:38:
df:76:27:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 23:14:23 2026 by rpki-client