Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9ACE3518577711F1AD50FECDCE1D38B0.roa
File: 9ACE3518577711F1AD50FECDCE1D38B0.roa (raw, json)
Hash identifier: CSw4HMRFX/88Z3g4RVPaukPp9Mdy7Pl8s9ruPN13sH0=
Subject key identifier: E6:3A:30:9A:11:7F:B2:76:B2:03:C9:0C:29:47:92:1D:55:3F:1D:B1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B8F4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9ACE3518577711F1AD50FECDCE1D38B0.roa
Signing time: Sun 24 May 2026 13:51:04 +0000
ROA not before: Sun 24 May 2026 13:50:59 +0000
ROA not after: Fri 10 Jul 2026 13:50:59 +0000
asID: 32043
IP address blocks: 45.194.12.0/23 maxlen: 24
45.195.148.0/23 maxlen: 24
45.195.202.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112884 (0x1b8f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 24 13:50:59 2026 GMT
Not After : Jul 10 13:50:59 2026 GMT
Subject: CN=6a130248-6a2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b9:bd:e8:3f:d8:74:76:2c:2f:f4:84:3b:e0:
cc:b6:2e:64:50:05:32:12:98:23:46:74:3a:de:e8:
bc:5b:83:5f:99:87:c8:8a:e1:15:b9:03:b4:9e:c5:
66:10:c4:37:b3:2c:b4:17:47:37:f9:5c:c3:5a:92:
67:de:ce:b3:cb:1b:02:30:77:71:c4:bd:ef:3d:19:
a8:1a:54:b8:bb:0a:13:fc:40:0a:fd:41:9e:2f:dc:
09:d9:4b:39:11:59:ad:ee:94:2e:08:fe:98:67:67:
d7:ff:8e:25:08:fa:d4:91:35:0f:97:c9:06:61:e4:
c5:39:b7:e7:b3:c5:a0:13:2c:ca:6d:10:06:cf:79:
ea:50:b2:07:24:5d:e7:ed:bd:88:9b:c8:2c:52:0c:
65:78:65:0f:dd:75:40:a8:e9:3f:f4:db:08:b0:6a:
80:51:59:c3:af:a8:98:7f:e0:59:3d:24:fb:2c:75:
ac:e9:65:03:5a:a7:32:5d:ef:1c:52:9c:65:85:83:
5e:ca:88:cf:43:e9:6e:e8:07:17:44:15:69:a7:39:
48:cf:33:5d:07:9c:b8:42:5f:2e:69:81:97:00:0b:
1c:c6:7b:e9:0f:ad:d5:ef:29:c8:d2:a7:16:80:66:
fa:bc:d8:b0:05:ee:a9:c7:89:ad:fe:94:0c:43:5b:
74:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:3A:30:9A:11:7F:B2:76:B2:03:C9:0C:29:47:92:1D:55:3F:1D:B1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9ACE3518577711F1AD50FECDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.12.0/23
45.195.148.0/23
45.195.202.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:f4:d6:20:e5:69:d7:7b:90:12:11:5b:ea:4f:53:6b:44:14:
37:93:f7:dd:5a:eb:2d:dd:4e:44:0b:af:82:d9:ac:be:aa:5c:
4c:9f:67:16:3c:9a:8e:b2:31:c8:f5:79:fc:fe:b8:1a:ca:0c:
e0:c6:d5:71:62:7c:a4:b1:73:9e:64:b7:1c:69:64:b2:80:b6:
c4:69:00:9f:72:30:ea:0a:b8:2c:b9:21:3f:c4:b4:d6:65:5d:
18:fe:38:c9:fd:b2:7e:13:67:34:4e:4e:49:5e:d2:df:ee:5a:
45:ff:b6:fa:40:aa:9f:be:cf:eb:00:ae:72:3e:13:b6:86:31:
1c:13:c5:c1:5e:27:04:a9:10:54:8b:7c:5c:bf:7b:5f:7d:bb:
c3:29:ca:f3:35:33:0d:f0:82:c1:7f:4d:aa:73:1c:e4:f8:70:
af:5b:82:ed:07:ff:d1:3d:58:af:83:df:1d:53:3d:08:e7:0f:
e0:a6:b6:e2:ab:6b:3a:e6:b6:15:9e:59:75:8a:d8:ac:bf:18:
39:28:f8:af:e9:9a:1b:f9:c3:51:bb:b2:5d:df:e8:0c:c4:93:
a8:50:b8:74:70:75:9b:4d:64:ff:7b:09:5d:2f:65:08:89:1d:
92:c4:a7:22:66:db:dd:8e:89:4d:08:7f:a8:a9:05:92:9f:53:
ef:a4:aa:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:06:49 2026 by rpki-client