Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/966DC4545F2711F1B934B00DCF1D38B0.roa
File: 966DC4545F2711F1B934B00DCF1D38B0.roa (raw, json)
Hash identifier: QosOdaeWGq0i/STW69yKeBuCbkKs46yESXlpvDbaheU=
Subject key identifier: F8:E2:87:23:CA:3C:EF:8C:95:D8:96:6E:9A:38:D5:89:13:D1:3B:8F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BB95
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/966DC4545F2711F1B934B00DCF1D38B0.roa
Signing time: Wed 03 Jun 2026 08:38:26 +0000
ROA not before: Wed 03 Jun 2026 08:38:21 +0000
ROA not after: Wed 05 Aug 2026 08:38:21 +0000
asID: 9294
IP address blocks: 45.197.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 13 Jun 2026 00:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113557 (0x1bb95)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 3 08:38:21 2026 GMT
Not After : Aug 5 08:38:21 2026 GMT
Subject: CN=6a1fe802-e9e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ee:4a:bf:72:49:4e:4c:08:d1:7f:3c:95:e8:
67:5b:1a:d2:53:fe:62:1a:30:32:25:2a:cf:90:e5:
b0:85:f6:54:68:5d:7f:89:3e:d8:f8:eb:aa:22:33:
b8:43:05:eb:9e:9a:d7:bd:20:69:ed:e0:e5:88:95:
c3:a6:a6:66:18:fe:6a:2a:0e:a5:34:6b:b9:68:49:
54:64:bc:ee:61:b8:ae:88:83:cb:4c:67:b1:d0:12:
0d:13:59:96:cf:07:e5:b7:2f:36:f9:36:35:87:ac:
71:7e:99:35:4c:ed:50:59:77:70:46:a6:38:13:33:
b6:78:b9:0f:75:c3:2f:2a:5d:12:ee:30:87:84:7c:
b8:b8:d5:52:8a:07:47:7b:3a:36:42:cc:a2:56:25:
87:b9:3e:68:b6:cb:b1:07:c6:f5:d5:94:d9:81:9c:
91:22:70:69:28:35:92:62:b6:a0:a0:42:ac:e7:e9:
13:86:04:c2:2e:e5:e1:ce:56:79:f6:a2:c9:6f:e8:
b7:ee:64:97:5f:ff:7e:40:8c:be:ad:04:e6:b1:27:
bf:10:3d:2b:f1:54:53:6a:f3:d0:7f:6a:97:37:3d:
06:c3:55:33:e3:e8:aa:47:66:94:da:94:65:20:d2:
06:9e:d6:7d:c9:27:9d:bc:51:ec:2d:5f:a8:37:dd:
8e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:E2:87:23:CA:3C:EF:8C:95:D8:96:6E:9A:38:D5:89:13:D1:3B:8F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/966DC4545F2711F1B934B00DCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.32.0/19
Signature Algorithm: sha256WithRSAEncryption
a6:a7:d6:92:ab:67:96:ac:6a:15:03:88:75:7a:69:44:b0:f0:
bf:87:62:50:44:e0:25:aa:a4:74:e4:af:16:0e:dd:b1:a9:b9:
c8:7a:6b:05:35:b9:53:94:cb:48:ac:de:99:65:8f:bb:30:0e:
05:8c:8d:65:7f:53:6a:7f:62:29:22:2d:e7:cf:04:94:3b:e4:
e6:d1:aa:8c:0d:be:78:85:e5:3e:4f:bc:41:86:f8:f7:b6:8a:
9d:dd:7d:93:91:06:7b:73:60:7c:40:1c:1c:ec:e6:8f:c9:ee:
b0:c3:77:72:29:7d:a8:be:d2:7b:bc:f3:d6:48:7a:e5:3f:6f:
17:68:41:15:24:84:f8:04:18:96:4e:85:ce:73:05:c0:65:ea:
70:bc:f8:11:dc:67:6c:61:e9:1e:e6:cc:32:bb:be:26:0f:13:
1b:5e:bb:66:cc:b3:ef:4c:8c:c8:75:b4:99:df:a2:00:c4:4d:
8c:5e:48:f6:56:e0:01:16:94:33:91:da:95:47:be:31:46:3f:
66:35:78:6b:72:8a:42:16:54:b2:3b:3c:3f:99:60:71:65:6a:
1a:e8:ba:e0:01:b3:42:69:c0:e8:76:89:15:29:76:cb:02:7d:
d9:cc:cd:25:d4:59:ec:04:65:e0:c6:16:66:3c:d8:32:21:c5:
41:a3:79:9f
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAbuVMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNjAzMDgzODIxWhcNMjYwODA1MDgzODIxWjAYMRYw
FAYDVQQDEw02YTFmZTgwMi1lOWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxu5Kv3JJTkwI0X88lehnWxrSU/5iGjAyJSrPkOWwhfZUaF1/iT7Y+Ouq
IjO4QwXrnprXvSBp7eDliJXDpqZmGP5qKg6lNGu5aElUZLzuYbiuiIPLTGex0BIN
E1mWzwflty82+TY1h6xxfpk1TO1QWXdwRqY4EzO2eLkPdcMvKl0S7jCHhHy4uNVS
igdHezo2QsyiViWHuT5otsuxB8b11ZTZgZyRInBpKDWSYragoEKs5+kThgTCLuXh
zlZ59qLJb+i37mSXX/9+QIy+rQTmsSe/ED0r8VRTavPQf2qXNz0Gw1Uz4+iqR2aU
2pRlINIGntZ9ySedvFHsLV+oN92O1QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFPji
hyPKPO+MldiWbpo41YkT0TuPMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85NjZEQzQ1NDVGMjcxMUYxQjkzNEIwMERDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFLcUgMA0GCSqGSIb3DQEBCwUA
A4IBAQCmp9aSq2eWrGoVA4h1emlEsPC/h2JQROAlqqR05K8WDt2xqbnIemsFNblT
lMtIrN6ZZY+7MA4FjI1lf1Nqf2IpIi3nzwSUO+Tm0aqMDb54heU+T7xBhvj3toqd
3X2TkQZ7c2B8QBwc7OaPye6ww3dyKX2ovtJ7vPPWSHrlP28XaEEVJIT4BBiWToXO
cwXAZepwvPgR3GdsYeke5swyu74mDxMbXrtmzLPvTIzIdbSZ36IAxE2MXkj2VuAB
FpQzkdqVR74xRj9mNXhrcopCFlSyOzw/mWBxZWoa6LrgAbNCacDodokVKXbLAn3Z
zM0l1FnsBGXgxhZmPNgyIcVBo3mf
-----END CERTIFICATE-----
Generated at Thu Jun 11 23:49:20 2026 by rpki-client