Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9184361A761211F193D3A31CCF1D38B0.roa
File: 9184361A761211F193D3A31CCF1D38B0.roa (raw, json)
Hash identifier: nhF2Izya2tWCTHmHvcN+8qF2SZmEv2ncAlU2/QRH2rU=
Subject key identifier: E3:3E:9A:0A:4E:29:96:53:C4:FD:10:DE:C3:FA:BE:AE:63:D1:1B:5F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C277
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9184361A761211F193D3A31CCF1D38B0.roa
Signing time: Thu 02 Jul 2026 12:35:55 +0000
ROA not before: Thu 02 Jul 2026 12:35:50 +0000
ROA not after: Sat 25 Jul 2026 12:35:50 +0000
asID: 9304
IP address blocks: 45.204.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115319 (0x1c277)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 2 12:35:50 2026 GMT
Not After : Jul 25 12:35:50 2026 GMT
Subject: CN=6a465b2b-895d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c5:24:64:4e:0d:7f:7d:77:ea:b4:b7:ab:77:
a5:4c:5a:32:e2:78:4b:71:cc:77:05:83:a6:75:4b:
6c:bb:69:30:fc:29:44:28:f5:7a:98:33:58:2c:63:
38:fa:2d:4c:9b:2c:f9:63:63:d7:69:ea:39:13:70:
d9:bc:d3:d0:21:1b:d7:bb:3e:c3:f3:ab:d7:20:e4:
60:18:cc:ea:8b:ea:e2:10:aa:b0:08:6a:25:78:4c:
4e:b9:4f:2e:90:64:a5:ce:f5:ad:59:7a:52:20:02:
25:b3:a0:d8:9a:9a:f9:1c:35:5f:a5:c0:02:fe:7b:
07:86:c9:d3:be:bf:a0:ad:23:24:a2:a1:07:df:21:
fc:47:5f:65:2d:6c:49:ba:86:12:8e:3c:6c:32:32:
b2:ef:bb:7e:5c:bb:df:9d:3b:c7:ef:4a:82:e7:7d:
64:4b:10:73:99:e7:e4:33:65:83:a7:85:34:b6:31:
e9:34:14:4f:a0:a0:43:a2:43:71:41:21:91:fa:8e:
4d:9e:f8:b4:98:b9:4b:36:59:76:30:f2:62:d9:ce:
6c:80:2b:4a:68:3f:c4:51:58:31:df:d8:f3:5e:cd:
f4:24:1e:91:32:1a:d4:b1:10:26:9d:63:ed:4a:b4:
8d:92:a2:35:a6:16:1b:03:f7:39:7b:01:1f:ba:89:
01:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:3E:9A:0A:4E:29:96:53:C4:FD:10:DE:C3:FA:BE:AE:63:D1:1B:5F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9184361A761211F193D3A31CCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.255.0/24
Signature Algorithm: sha256WithRSAEncryption
16:60:7b:f1:ea:dd:99:ec:d1:0d:3f:c4:a9:a3:b2:42:4b:cd:
01:aa:30:cd:66:64:a7:8d:ac:95:53:e2:77:14:2e:2f:8b:1e:
cf:0b:b6:df:2a:58:3c:67:a5:2d:0e:30:97:6f:35:dd:71:23:
62:a7:be:af:c6:e7:93:d3:2e:b8:78:3f:34:8f:58:13:9b:6a:
da:0d:62:ba:10:e1:b6:92:df:dc:e4:ef:ab:51:c6:91:60:c2:
e9:be:68:52:0e:aa:cd:89:9e:fc:b4:3c:a3:71:83:c5:17:0f:
c3:1e:a6:d1:98:dc:4c:79:33:7e:4d:5c:84:82:bf:ad:f2:48:
7b:3f:3d:ec:73:29:d3:18:0a:6d:95:5e:0f:b3:c8:4e:25:c8:
5b:30:1e:49:f2:50:5b:8e:ec:f8:34:42:88:20:80:2c:ec:a6:
5c:49:6e:f4:e2:bf:ff:04:2b:7b:db:ec:c9:3e:ea:fe:61:fb:
80:35:ed:8e:94:2b:6f:ac:9a:67:c1:33:08:79:5f:c1:89:1a:
3b:f0:51:42:c9:71:fe:88:c9:76:51:f6:b5:2d:d9:51:1b:ec:
2b:f3:9c:05:7d:c6:f3:9f:55:4a:1a:0e:94:1c:52:17:29:00:
35:4b:04:07:08:a1:43:8b:c3:5a:ae:91:eb:96:04:c3:d2:4e:
a7:2e:eb:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:43:38 2026 by rpki-client