Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9E0414AE618211F19DB630E1CE1D38B0.roa
File: 9E0414AE618211F19DB630E1CE1D38B0.roa (raw, json)
Hash identifier: wFuzxmbzIQBgT6vUKVNic8CpvVHegFHiS3n4b3VhoGc=
Subject key identifier: F3:DB:4F:E4:B4:8F:41:30:08:D1:D6:47:76:A5:B8:5B:2E:CD:56:27
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BC28
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9E0414AE618211F19DB630E1CE1D38B0.roa
Signing time: Sat 06 Jun 2026 08:35:05 +0000
ROA not before: Sat 06 Jun 2026 08:35:01 +0000
ROA not after: Sun 05 Jul 2026 08:35:01 +0000
asID: 60117
IP address blocks: 45.205.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 08 Jun 2026 00:26:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113704 (0x1bc28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 6 08:35:01 2026 GMT
Not After : Jul 5 08:35:01 2026 GMT
Subject: CN=6a23dbb9-e492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:69:c7:af:cb:bd:bb:3e:54:16:f3:75:aa:9e:
e9:05:c8:36:9a:76:b1:b0:42:4f:26:52:53:75:e0:
77:59:00:ff:f8:dd:47:25:67:3d:c7:b4:da:fe:cd:
64:0d:39:d4:4a:28:0c:66:90:b7:b8:1e:2b:9b:90:
4e:ff:41:73:d2:f4:e4:3a:06:24:f8:cc:92:02:d7:
0f:6c:52:c7:d4:87:89:6c:21:2d:d5:33:8f:57:a3:
ca:96:16:f1:c0:ef:97:3b:8f:92:62:c3:7e:10:1c:
07:ec:fc:ea:de:86:54:c5:55:02:66:d3:88:0f:7a:
7f:db:34:df:d6:18:c5:19:6e:b0:73:34:2b:1f:e0:
d8:da:13:90:a0:ff:e9:a4:cb:38:f1:da:fe:02:9a:
2a:32:9a:c5:29:a5:5b:ee:bc:c8:2e:27:d4:49:3e:
ff:18:93:ac:a7:c9:2c:d5:71:20:e9:01:be:cb:50:
97:c6:8e:9d:94:73:57:c0:82:91:9d:a1:6f:c6:97:
a3:78:9a:17:94:0b:ca:b1:e2:2b:e1:bc:0f:cd:a1:
17:74:16:41:4a:7b:aa:26:6c:b1:7c:c2:3a:b2:d5:
5d:19:34:c0:10:5a:6e:53:cb:e6:42:5d:93:b8:43:
ba:b5:63:75:0b:3f:b8:57:40:2e:13:0b:0d:f6:26:
3f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:DB:4F:E4:B4:8F:41:30:08:D1:D6:47:76:A5:B8:5B:2E:CD:56:27
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9E0414AE618211F19DB630E1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.64.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:25:3a:31:3d:da:6e:e5:92:d1:f4:59:cd:72:67:fc:57:cc:
c5:be:0a:e2:9e:cf:c8:74:69:fe:55:73:36:78:3e:2a:0c:9d:
6b:8e:50:bf:6a:60:9c:a4:c5:6b:e6:33:08:89:6a:4d:87:f3:
a7:a8:53:3f:27:d1:96:d4:00:4e:c2:20:37:2b:3a:75:46:56:
a6:75:f1:4f:fc:12:06:05:c0:e1:b2:ac:04:b8:92:f3:2f:c6:
5c:40:9c:b6:7e:4c:a1:c5:a8:8e:0b:38:81:6d:b6:8d:9b:57:
c3:3f:4f:5d:58:84:79:8a:87:67:4f:2c:a9:72:d9:7b:3b:d7:
97:be:62:61:4d:92:6d:67:54:db:39:a9:c2:65:b6:41:ed:15:
f5:a9:0b:7b:95:dc:42:14:36:b1:d7:75:68:ed:ee:27:a3:4a:
4d:a6:1e:a8:6d:e4:f5:10:ac:39:7c:6b:9d:8b:3c:ba:29:9e:
90:9f:07:74:73:c9:07:36:90:c8:88:dd:99:83:31:33:5e:41:
95:e4:80:b3:83:71:27:92:0d:ee:5a:4a:01:82:74:91:e7:b5:
a9:a5:36:54:94:42:c8:21:b4:89:a5:20:1d:b6:8f:97:5d:35:
a1:ed:90:5d:3e:aa:d5:4d:b8:35:1b:95:43:eb:1d:e4:98:85:
f8:e3:fe:24
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAbwoMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNjA2MDgzNTAxWhcNMjYwNzA1MDgzNTAxWjAYMRYw
FAYDVQQDEw02YTIzZGJiOS1lNDkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA3GnHr8u9uz5UFvN1qp7pBcg2mnaxsEJPJlJTdeB3WQD/+N1HJWc9x7Ta
/s1kDTnUSigMZpC3uB4rm5BO/0Fz0vTkOgYk+MySAtcPbFLH1IeJbCEt1TOPV6PK
lhbxwO+XO4+SYsN+EBwH7Pzq3oZUxVUCZtOID3p/2zTf1hjFGW6wczQrH+DY2hOQ
oP/ppMs48dr+ApoqMprFKaVb7rzILifUST7/GJOsp8ks1XEg6QG+y1CXxo6dlHNX
wIKRnaFvxpejeJoXlAvKseIr4bwPzaEXdBZBSnuqJmyxfMI6stVdGTTAEFpuU8vm
Ql2TuEO6tWN1Cz+4V0AuEwsN9iY/NwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFPPb
T+S0j0EwCNHWR3aluFsuzVYnMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC85RTA0MTRBRTYxODIxMUYxOURCNjMwRTFDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALc1AMA0GCSqGSIb3DQEBCwUA
A4IBAQCmJToxPdpu5ZLR9FnNcmf8V8zFvgrins/IdGn+VXM2eD4qDJ1rjlC/amCc
pMVr5jMIiWpNh/OnqFM/J9GW1ABOwiA3Kzp1RlamdfFP/BIGBcDhsqwEuJLzL8Zc
QJy2fkyhxaiOCziBbbaNm1fDP09dWIR5iodnTyypctl7O9eXvmJhTZJtZ1TbOanC
ZbZB7RX1qQt7ldxCFDax13Vo7e4no0pNph6obeT1EKw5fGudizy6KZ6Qnwd0c8kH
NpDIiN2ZgzEzXkGV5ICzg3Enkg3uWkoBgnSR57WppTZUlELIIbSJpSAdto+XXTWh
7ZBdPqrVTbg1G5VD6x3kmIX44/4k
-----END CERTIFICATE-----
Generated at Sat Jun 6 12:05:19 2026 by rpki-client