Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A88746D26EFF11F1B11AA31ACF1D38B0.roa
File: A88746D26EFF11F1B11AA31ACF1D38B0.roa (raw, json)
Hash identifier: 5fcpw6tqAsd3NKeVq0Tb5qFPybuCvxBl4x6yjTCZAs8=
Subject key identifier: C6:35:37:F6:73:EA:22:FE:94:C6:04:D7:DB:63:B9:88:8D:93:71:D6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BFF5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A88746D26EFF11F1B11AA31ACF1D38B0.roa
Signing time: Tue 23 Jun 2026 12:32:55 +0000
ROA not before: Tue 23 Jun 2026 12:32:51 +0000
ROA not after: Sun 09 Aug 2026 12:32:51 +0000
asID: 25160
IP address blocks: 45.201.12.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114677 (0x1bff5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 23 12:32:51 2026 GMT
Not After : Aug 9 12:32:51 2026 GMT
Subject: CN=6a3a7cf7-e314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3c:eb:c1:42:cd:f8:f7:e1:8f:db:12:89:e1:
53:4b:5a:61:e1:a8:6c:4b:23:c0:1c:74:0b:a1:cf:
d8:90:2b:1c:68:25:60:56:ca:a5:9c:1c:4f:02:af:
46:22:72:80:f5:1a:1f:e8:83:b8:c8:17:c1:47:ae:
92:60:8e:0e:08:60:29:84:17:b9:14:2d:7a:02:a1:
f1:bf:38:bb:82:e0:61:54:03:97:94:a4:4a:29:db:
23:5b:ef:f8:e5:63:94:13:bd:23:41:8b:bd:3a:04:
d6:2e:83:e4:74:66:ce:2f:c4:2b:e5:24:89:bf:bd:
2d:8d:46:49:54:fd:8a:66:72:11:c2:43:a2:ef:7f:
0e:4f:2e:22:e4:70:cc:c8:20:0b:5a:5a:99:d6:ac:
d3:ee:9f:47:17:36:10:12:9b:16:cf:73:95:96:52:
28:83:61:b4:05:e8:26:e2:5a:65:01:d0:71:89:02:
05:bd:e8:df:4c:94:8d:db:30:2b:8c:db:ba:ed:7c:
90:ee:cb:c2:16:01:b6:5a:34:65:3d:6c:50:9d:ca:
23:4f:5d:58:b6:2f:68:fb:20:12:22:f0:f2:86:42:
94:7f:7a:2d:0a:21:4e:c5:dc:a6:e6:fe:df:8f:77:
25:cf:99:cc:8d:58:74:a3:56:71:4c:54:51:d5:86:
07:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:35:37:F6:73:EA:22:FE:94:C6:04:D7:DB:63:B9:88:8D:93:71:D6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A88746D26EFF11F1B11AA31ACF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.12.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:3c:ff:73:0e:27:18:02:b4:a6:1e:8e:3c:31:0e:30:30:c5:
80:5e:28:6f:04:e4:d4:f3:30:2c:13:11:3e:9d:2a:e3:b1:ca:
5d:bc:0c:7c:d2:22:ce:2f:0c:b2:2a:63:98:6c:57:74:a2:6f:
d4:2e:96:08:b4:b9:c7:42:7a:fb:f2:a9:0e:0f:9f:69:68:0f:
a4:16:1e:e6:92:33:9b:93:78:7e:bc:4f:0b:8d:77:f1:8d:bc:
12:b7:9d:1f:b5:2c:09:eb:b1:d3:01:e4:ff:0c:c0:1a:b1:c0:
6b:f4:df:b2:3b:e0:33:6f:5b:ab:b8:16:c3:2d:07:76:a0:22:
74:d1:df:dc:c2:96:f2:78:cc:4e:d0:88:b9:a9:85:92:cc:e8:
1e:9b:a6:06:b1:f2:e7:14:f4:53:a1:1f:53:cd:2f:94:cf:a0:
de:70:ad:29:71:42:5a:1f:72:52:63:07:39:57:c7:98:9c:0f:
3e:3c:c1:d2:8c:61:0b:5c:71:20:39:c9:10:1e:8d:b2:9e:b0:
0b:f1:30:70:10:63:8c:fe:93:30:45:72:96:2c:37:a4:be:48:
ed:28:30:80:e4:f4:4c:39:9b:da:cc:04:2a:2b:90:c0:ec:ed:
dc:c9:86:2c:b7:c0:b4:64:13:ca:91:c9:6f:ac:0b:34:70:a6:
7a:35:27:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:44:06 2026 by rpki-client