Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/98B78BEA5D9811F1ADDC5213CF1D38B0.roa
File: 98B78BEA5D9811F1ADDC5213CF1D38B0.roa (raw, json)
Hash identifier: gE8GhNn3J+sAHJs2ca189M9XrmqfANKrqSR8lTGPtbM=
Subject key identifier: 32:E7:51:B2:FE:B8:00:2F:8C:14:08:FE:E9:A6:C9:2F:AA:A4:3E:9D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BB2D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/98B78BEA5D9811F1ADDC5213CF1D38B0.roa
Signing time: Mon 01 Jun 2026 09:02:21 +0000
ROA not before: Mon 01 Jun 2026 09:02:16 +0000
ROA not after: Fri 18 Jun 2027 09:02:16 +0000
asID: 8796
IP address blocks: 45.205.4.0/24 maxlen: 24
45.205.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113453 (0x1bb2d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 1 09:02:16 2026 GMT
Not After : Jun 18 09:02:16 2027 GMT
Subject: CN=6a1d4a9d-9b19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:24:29:46:63:18:54:b9:63:06:5e:93:9f:ef:
f4:6b:07:dc:6a:73:f5:6d:3e:eb:80:ca:a2:de:19:
6e:06:f9:cd:31:9c:a4:04:da:08:0d:c8:cc:62:99:
42:92:86:ea:65:c7:35:1f:a5:3e:da:73:04:93:b4:
22:3c:2d:a0:d6:da:cc:31:cc:31:d6:d6:d8:24:0f:
64:16:26:8d:ab:41:d6:3e:0c:cd:d5:b7:2b:27:39:
96:8c:bf:76:75:e5:93:50:f8:b1:7e:58:f3:54:74:
02:17:2d:6d:5b:07:8b:07:84:8e:91:b9:78:65:23:
97:c1:7a:4b:ba:9c:7c:10:c6:f7:72:ee:48:a9:f2:
93:05:78:83:e4:b4:a7:c5:ea:0c:51:17:42:f5:93:
b6:e2:13:c3:e5:99:da:24:4d:08:5b:ed:ed:b3:dc:
63:4b:e0:d7:c5:1f:78:6d:61:aa:f2:1c:0f:73:5b:
2a:3c:77:f2:3d:50:3b:fd:5b:bf:f7:3e:e9:d5:26:
20:45:ae:e3:bb:b2:92:ee:c4:64:29:dd:15:56:81:
2d:9a:ad:a1:37:5c:57:d3:84:e4:30:44:5a:d4:c5:
bc:c0:ec:ae:81:32:6e:1e:66:6f:7c:6c:84:77:bb:
81:43:ad:de:24:48:df:0e:90:95:9f:6d:2d:b4:7b:
bb:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:E7:51:B2:FE:B8:00:2F:8C:14:08:FE:E9:A6:C9:2F:AA:A4:3E:9D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/98B78BEA5D9811F1ADDC5213CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.4.0/23
Signature Algorithm: sha256WithRSAEncryption
88:51:0c:28:9d:0c:eb:d8:1f:2a:70:61:0d:8d:d1:95:a0:10:
89:df:fc:0b:4f:09:97:3c:48:5f:5b:86:ba:07:dd:86:29:50:
eb:c8:b8:26:80:1e:2e:16:8b:03:b7:37:8a:8d:5d:37:b9:5f:
ee:a5:65:e3:24:0a:b6:3f:14:99:d4:4c:cc:e3:b8:85:82:0a:
a5:dc:69:2e:d2:39:74:b5:36:4a:f4:ff:a3:8d:a5:28:a4:0d:
58:d7:03:59:ef:f9:e2:ec:32:29:98:2f:2c:d5:bd:c1:6b:dd:
4f:10:14:6a:eb:a3:cf:38:67:02:27:3f:87:0d:3d:11:aa:6c:
26:61:ed:7f:60:fa:d1:82:8d:25:42:43:31:1a:17:12:5e:45:
27:47:ae:31:cc:86:72:23:eb:01:55:24:bf:2a:f0:16:4b:a6:
cc:b6:57:df:f2:9f:c7:89:7d:b0:30:53:e7:14:64:9c:4b:6d:
0b:ed:97:ca:6a:91:45:ae:dd:38:7e:76:ed:35:b4:50:35:d1:
ee:87:cd:02:3c:58:de:9c:21:95:6d:5c:72:13:2d:5f:7c:70:
00:d4:5a:21:79:22:fa:08:19:d9:b8:4e:ae:aa:56:53:d0:cd:
a9:4c:1a:cc:96:aa:3b:f5:e3:5f:73:a6:f5:76:79:d0:0a:eb:
68:48:b6:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:07:06 2026 by rpki-client