Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A154F106577211F1B64A64B0CE1D38B0.roa
File: A154F106577211F1B64A64B0CE1D38B0.roa (raw, json)
Hash identifier: d8Jfw/Yn7wndBPm9UxhYeSMrt5e7uGG+Qwg5XNr3ws8=
Subject key identifier: E6:2B:1F:8B:7E:E1:03:20:33:F9:95:BB:59:FD:27:21:11:73:C9:F4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B8EC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A154F106577211F1B64A64B0CE1D38B0.roa
Signing time: Sun 24 May 2026 13:15:27 +0000
ROA not before: Sun 24 May 2026 13:15:23 +0000
ROA not after: Sun 12 Jul 2026 13:15:23 +0000
asID: 63023
IP address blocks: 45.195.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112876 (0x1b8ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 24 13:15:23 2026 GMT
Not After : Jul 12 13:15:23 2026 GMT
Subject: CN=6a12f9ef-d9bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:95:e4:11:75:0c:b3:6f:1d:de:b8:fe:44:80:
60:6e:68:31:99:f7:47:12:43:1c:ac:a4:5c:70:20:
10:88:07:b4:f4:4c:c2:da:3b:c3:fe:ab:91:b8:bb:
09:4c:25:01:9a:8a:4b:f8:08:99:c8:49:e6:be:15:
25:88:5e:6f:9d:ea:4a:95:80:84:f1:e3:f0:9e:d7:
7f:9a:60:9d:a0:30:c9:56:f0:ca:df:e1:40:00:44:
39:d3:9f:6d:73:da:0a:bf:af:13:4b:58:67:57:fc:
63:85:3d:ba:e7:6d:d8:72:82:e5:64:ba:24:ea:1c:
7f:83:5f:8e:a2:59:d1:62:d3:76:71:68:f8:4d:bc:
ed:14:67:18:b9:7a:7a:2f:c5:5f:fa:5f:cf:9e:54:
c2:13:7c:1f:29:9e:70:d5:b9:8e:b6:1c:76:fa:b0:
bc:43:35:82:8c:87:66:fa:d5:01:12:92:53:0e:18:
d9:a7:5a:e4:5c:5f:4e:15:fa:ff:d8:ee:ac:42:37:
04:bd:3e:68:1c:14:c7:8c:88:34:19:83:e6:36:fb:
fc:e3:a9:de:39:e4:69:78:d9:99:a4:b8:85:9a:d7:
c3:04:69:0b:49:ca:69:20:a1:62:47:73:6f:75:ff:
d4:4b:54:4a:1f:f5:fd:40:11:8f:cf:94:bb:0a:5e:
bf:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:2B:1F:8B:7E:E1:03:20:33:F9:95:BB:59:FD:27:21:11:73:C9:F4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A154F106577211F1B64A64B0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.137.0/24
Signature Algorithm: sha256WithRSAEncryption
83:ff:c6:7e:3f:6d:9d:2f:e3:30:ac:1e:23:f8:59:41:95:4a:
38:7d:78:a1:48:31:e3:35:69:3c:63:f0:40:47:fa:88:ce:2d:
07:a1:2f:ba:39:b2:fc:cc:c0:13:ba:0d:39:c9:31:31:9d:65:
26:62:51:99:41:85:13:26:44:f2:e2:0a:5e:70:a4:9f:f2:f6:
77:bb:ed:37:98:e2:7f:0a:e3:cb:df:e5:c7:ab:bf:4a:7c:20:
45:9e:42:1d:c7:55:68:25:dd:f2:a5:08:32:94:77:51:05:fe:
52:81:12:ff:99:38:43:5f:55:a7:e5:e8:c8:54:f2:d3:c6:79:
69:37:b9:c7:51:f9:42:9f:49:d8:05:d9:e7:a7:28:a3:0a:d1:
bb:f1:c7:9c:38:9b:ed:91:be:6e:d9:ca:4b:02:3f:16:dc:74:
23:c2:6e:fe:07:8d:40:1a:fa:b6:f0:83:d4:70:2e:87:44:a1:
cf:dc:f5:e3:b8:9b:62:1c:0c:f9:3d:fe:62:53:8c:c2:17:f7:
0f:c7:41:b5:cc:37:8d:1f:9a:73:43:b5:50:90:12:1b:01:b6:
09:89:c4:d2:f8:19:3c:79:9e:91:08:f1:34:58:5e:4d:06:c3:
e8:87:68:9d:fc:99:ef:3d:78:2d:0c:ba:04:e6:22:eb:e2:f1:
70:ca:98:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:28:58 2026 by rpki-client