Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/96F1326655E611F1A5A890C2CE1D38B0.roa
File: 96F1326655E611F1A5A890C2CE1D38B0.roa (raw, json)
Hash identifier: pogRThKEv4yvK3F7xmXvDmDb4rqIRKmCvDaTZ159ox0=
Subject key identifier: 87:A0:AA:60:FD:3B:CE:15:21:31:D1:DB:2A:B7:27:4A:58:82:2C:A1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B808
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/96F1326655E611F1A5A890C2CE1D38B0.roa
Signing time: Fri 22 May 2026 14:00:29 +0000
ROA not before: Fri 22 May 2026 14:00:24 +0000
ROA not after: Tue 23 Jun 2026 14:00:24 +0000
asID: 131471
IP address blocks: 45.195.130.0/24 maxlen: 24
45.195.131.0/24 maxlen: 24
45.195.194.0/24 maxlen: 24
45.195.195.0/24 maxlen: 24
45.195.210.0/24 maxlen: 24
45.195.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112648 (0x1b808)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 22 14:00:24 2026 GMT
Not After : Jun 23 14:00:24 2026 GMT
Subject: CN=6a10617d-937b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b6:4f:60:a8:3f:f4:94:13:39:c4:eb:5b:50:
a6:b1:e5:2a:72:db:b6:12:79:3a:fb:08:71:47:ef:
dc:ce:fe:e2:96:bf:c7:a7:8d:59:40:4a:9e:a7:83:
e0:4e:21:26:66:ce:0a:73:e1:0a:7a:13:14:e7:46:
0e:6c:d2:e5:ed:81:39:34:49:75:8d:4a:2b:70:6f:
92:c9:02:1f:6c:ef:6f:60:36:26:aa:70:b8:ab:3e:
3d:f1:57:9c:f2:6c:0b:6b:2b:98:24:00:b5:bb:5c:
43:6c:89:2a:b1:d6:a1:f8:64:27:08:d8:31:7e:28:
d2:ac:94:a4:f1:c0:97:13:05:4a:ed:42:27:a3:a3:
71:23:5a:b3:d6:ec:d2:58:fe:17:5f:c1:29:e3:13:
98:83:0b:24:69:ba:4f:5d:09:28:9b:02:fe:ef:39:
2a:4c:d4:06:ac:99:1d:a3:de:c9:de:14:41:15:f0:
8d:07:54:63:d1:cb:16:a8:a1:74:54:b3:8b:92:2b:
10:93:8f:3b:4e:94:a4:18:54:d1:0d:0a:bf:ce:05:
7e:1e:bf:b6:95:fc:9a:06:11:e1:91:ec:5d:8c:dd:
5e:98:74:9b:7e:a2:cd:83:fd:e8:e4:90:2a:d8:dc:
03:e5:30:7d:c9:03:5f:22:7e:38:e2:b9:52:78:eb:
4c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:A0:AA:60:FD:3B:CE:15:21:31:D1:DB:2A:B7:27:4A:58:82:2C:A1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/96F1326655E611F1A5A890C2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.130.0/23
45.195.194.0/23
45.195.210.0/23
Signature Algorithm: sha256WithRSAEncryption
98:e4:97:ef:9d:56:6d:5e:e4:6b:3d:95:b8:2e:65:4b:70:e6:
d5:4e:a5:04:5a:d6:9b:b2:21:83:d8:5b:b3:64:bb:b1:3b:65:
da:6e:90:e0:16:d8:32:66:7a:ba:77:d1:53:a9:c2:05:b4:63:
b3:0c:c6:79:60:ae:dc:8c:07:82:62:3d:80:40:01:86:7f:c0:
b0:ae:36:e4:25:af:dc:41:02:3c:87:26:3a:03:21:53:eb:2a:
83:e1:54:26:9f:71:1e:73:0a:50:0e:f7:52:5b:04:35:ad:78:
cd:62:fd:42:d9:07:02:21:b4:c6:13:fa:60:84:6e:fb:4a:17:
e1:16:ac:91:6e:fe:94:84:46:3b:13:88:59:eb:f9:1d:a5:c2:
83:97:d9:54:4d:e4:c1:b0:fd:65:d2:9b:60:04:c2:8a:fa:e5:
5e:e4:34:e8:91:fc:5f:48:3c:77:5b:fd:11:58:69:0a:b1:89:
f8:51:0f:d7:3a:39:23:24:0c:bf:ce:9c:0c:7a:39:60:4e:db:
6d:d8:33:0e:b1:fc:37:f3:a2:72:41:92:e9:c4:6d:34:61:41:
8d:8d:92:b3:14:9a:29:79:08:41:d6:3e:26:64:b4:1b:f4:a6:
8a:1d:8d:6a:68:81:5f:75:6a:54:8b:a4:ba:47:44:56:ab:ac:
4e:4e:d5:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:28:58 2026 by rpki-client