Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9810C8A8560B11F1B038CE1ECF1D38B0.roa
File: 9810C8A8560B11F1B038CE1ECF1D38B0.roa (raw, json)
Hash identifier: /XZvOsNe3ODtw70LAPW6AzQ3QAgbGVVZS0oPRKXfwbY=
Subject key identifier: 20:0A:09:C3:04:2A:C0:F7:6F:D6:35:2B:BD:67:F5:A2:F6:1F:7A:B2
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B836
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9810C8A8560B11F1B038CE1ECF1D38B0.roa
Signing time: Fri 22 May 2026 18:25:22 +0000
ROA not before: Fri 22 May 2026 18:25:18 +0000
ROA not after: Wed 01 Jul 2026 18:25:18 +0000
asID: 274877
IP address blocks: 45.194.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112694 (0x1b836)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 22 18:25:18 2026 GMT
Not After : Jul 1 18:25:18 2026 GMT
Subject: CN=6a109f92-6080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9b:6e:4a:75:c3:29:49:b9:63:34:4d:57:5f:
1f:1c:f4:db:ed:22:77:61:a7:86:b0:5a:1a:6e:81:
8a:c7:34:04:0f:5e:01:cd:21:19:58:6c:c2:87:f6:
3f:e9:4e:4f:a3:79:56:73:dd:61:51:9d:26:8f:53:
c4:26:06:25:04:de:d4:eb:13:9a:3d:28:ec:d5:a6:
b3:76:5e:0b:f4:e7:47:1a:a4:e4:72:c6:e6:93:6e:
b8:42:22:ef:75:26:f6:3d:44:56:d8:4c:be:9d:5f:
24:64:d5:bb:00:57:cb:5e:75:ec:f4:c6:b6:45:2e:
fc:fc:f3:7f:e4:8f:5e:5d:72:46:f6:8c:04:33:8d:
a8:5c:62:61:56:c0:93:a7:f5:a6:bf:ea:11:36:92:
0c:d4:af:27:b7:d0:0f:dc:5d:f5:7d:25:10:c1:47:
58:90:30:fe:73:b6:6d:5c:92:bb:c1:e2:14:2e:08:
2c:a0:26:9a:f4:2f:03:9f:d4:6d:45:65:d2:d2:10:
f9:03:df:4b:43:0a:b1:6f:dc:9f:ee:f4:78:24:86:
08:f0:35:b7:d7:89:21:01:62:a9:69:a8:95:c5:26:
7b:b1:2f:1b:7b:ed:7d:4d:52:49:c8:8d:b7:94:ae:
53:d5:6a:ba:39:25:c7:7c:c1:bd:61:48:29:78:27:
16:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:0A:09:C3:04:2A:C0:F7:6F:D6:35:2B:BD:67:F5:A2:F6:1F:7A:B2
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9810C8A8560B11F1B038CE1ECF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.122.0/24
Signature Algorithm: sha256WithRSAEncryption
73:46:78:b4:40:4e:2e:4e:66:bf:9c:7d:7e:81:e1:d8:bf:4f:
20:3f:08:f6:5e:85:87:bb:a6:a1:b8:c4:01:02:28:c1:2d:2a:
f4:a6:ef:1c:05:de:77:0b:ac:63:f2:1f:d8:e0:81:cf:0c:fb:
1d:7c:76:43:38:a8:59:26:21:8c:94:83:a2:44:23:19:d0:ba:
81:86:2e:14:39:e4:7c:ea:07:59:9c:47:b6:56:fb:c0:cb:23:
86:04:02:81:5b:35:e1:59:29:d6:65:fa:cb:2a:1e:bf:61:cb:
a1:dd:67:cf:9f:18:eb:9e:2b:78:6e:07:48:95:fd:77:36:3c:
7b:da:63:9b:5d:a3:46:6e:df:e8:45:58:7d:af:d0:75:60:d2:
ad:77:f6:6a:11:a4:a7:dc:a3:ea:bb:3f:6c:62:4b:12:6c:ee:
3d:78:92:30:0d:be:0f:ca:46:65:29:69:37:fd:05:02:88:86:
e6:93:e8:99:cd:24:1a:94:32:d0:3b:a6:69:fb:c2:da:0d:2e:
6d:d4:2d:ab:f1:ea:e1:fc:c0:83:f2:06:5b:f8:44:05:4f:2c:
84:13:ed:3f:5f:d7:6e:ba:89:7f:44:2d:16:9e:e7:fe:7b:83:
37:8c:99:d2:3a:d8:0b:8f:4e:e1:ce:d6:14:1b:bf:cf:fa:43:
fd:78:6f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:13:59 2026 by rpki-client