Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/98663EA4579211F18DC363EFCE1D38B0.roa
File: 98663EA4579211F18DC363EFCE1D38B0.roa (raw, json)
Hash identifier: eBx8XSTs+FgVK97kkhf1FPrcr6X8YXihWofK+L2RNi0=
Subject key identifier: D5:4C:D7:ED:1B:90:B1:D7:24:AF:48:90:E4:1B:C5:61:BA:3C:AE:37
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B92A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/98663EA4579211F18DC363EFCE1D38B0.roa
Signing time: Sun 24 May 2026 17:04:16 +0000
ROA not before: Sun 24 May 2026 17:04:11 +0000
ROA not after: Tue 30 Jun 2026 17:04:11 +0000
asID: 328608
IP address blocks: 45.196.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112938 (0x1b92a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 24 17:04:11 2026 GMT
Not After : Jun 30 17:04:11 2026 GMT
Subject: CN=6a132f90-0e9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b0:3a:08:01:ca:ff:ac:cc:4e:c0:35:23:a7:
da:ff:49:0a:40:11:63:6c:cd:33:e0:c0:54:fe:bb:
73:cf:29:cd:4d:1e:92:81:84:59:36:30:70:35:5a:
0d:60:63:b6:9b:c6:29:01:a6:c3:54:98:8d:43:d9:
11:05:52:9f:b1:4a:11:81:ed:a2:d8:e3:ee:95:ba:
35:1b:b5:b5:0b:3e:24:00:a4:d3:45:6f:b1:8a:ee:
93:f4:68:e6:f3:60:61:47:d7:5a:60:53:17:0c:72:
2d:0f:fd:1f:5f:bb:1b:01:2f:21:90:fc:93:d0:ab:
eb:1b:e2:92:02:57:b8:4a:bc:03:b7:20:cb:5c:75:
b3:44:d7:0a:28:df:59:fe:48:58:ec:e5:cc:b9:d6:
67:3e:54:69:7c:2f:85:59:13:43:31:97:fd:0b:eb:
48:af:cf:b8:9a:38:a4:5d:2d:84:14:73:56:1d:79:
83:e8:de:4d:40:d8:f2:ca:68:a2:00:22:bc:f0:59:
c0:c2:c3:d9:36:c9:fb:f2:2b:0f:f5:c1:5c:08:2c:
f8:50:60:4d:dd:70:fc:28:4c:aa:43:50:41:dd:0b:
6e:21:c7:33:ce:d6:05:05:0a:cc:1e:06:61:62:63:
05:4a:66:99:52:a7:01:c4:5c:14:ad:2b:e8:23:63:
7b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:4C:D7:ED:1B:90:B1:D7:24:AF:48:90:E4:1B:C5:61:BA:3C:AE:37
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/98663EA4579211F18DC363EFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.30.0/24
Signature Algorithm: sha256WithRSAEncryption
45:9e:62:2e:07:0b:89:d0:28:18:51:6b:04:b3:b8:70:f5:d2:
0c:f6:20:c7:58:38:2b:fa:79:cd:1c:83:54:7a:d0:d2:2b:f8:
9d:df:ca:2f:0b:ec:b9:53:11:25:0e:d9:fd:41:c8:92:b1:1b:
39:81:0d:90:16:ef:fc:d1:57:69:84:48:35:26:8a:dd:4a:aa:
bc:1f:37:79:a4:f9:da:56:85:61:56:3b:26:b4:cc:ee:e3:cb:
ff:e2:ba:5f:a3:7e:47:24:ae:fe:bf:a7:e4:19:bc:24:1d:ea:
d8:b2:7d:03:08:4f:f3:09:50:0c:4f:e1:7f:f2:92:4d:2f:fa:
97:42:fc:03:ab:d9:a9:e3:26:4f:75:73:c3:fb:27:78:01:5e:
64:86:83:1d:99:db:fc:06:4e:c0:6e:ef:0c:37:64:c7:df:db:
de:a7:6f:be:0e:f2:5c:99:56:08:17:59:40:20:76:33:1d:f5:
f7:fe:53:3f:d4:13:68:09:d9:a5:f7:88:d1:55:61:62:7b:67:
28:d5:4d:62:6c:b1:f2:69:65:96:d5:e2:73:23:d4:33:20:a6:
3f:4c:15:83:64:cf:5b:7b:43:a1:38:47:92:57:3d:6b:43:63:
d5:14:12:c3:ac:5b:7a:06:eb:97:98:08:13:0c:37:3d:b5:bc:
ec:a6:30:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:14:20 2026 by rpki-client