Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A9E25B70543811F1BC961700CF1D38B0.roa
File: A9E25B70543811F1BC961700CF1D38B0.roa (raw, json)
Hash identifier: cJQCdzghJW43O7GzoorWnh4dK1I/2xVOcQqpKtRhcSM=
Subject key identifier: 93:C6:3A:3C:D8:4B:58:5E:60:CE:D5:2A:D9:32:0B:23:F0:59:86:43
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B62E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A9E25B70543811F1BC961700CF1D38B0.roa
Signing time: Wed 20 May 2026 10:42:57 +0000
ROA not before: Wed 20 May 2026 10:42:53 +0000
ROA not after: Wed 24 Jun 2026 10:42:53 +0000
asID: 197574
IP address blocks: 45.192.12.0/24 maxlen: 24
45.194.66.0/24 maxlen: 24
45.198.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112174 (0x1b62e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 20 10:42:53 2026 GMT
Not After : Jun 24 10:42:53 2026 GMT
Subject: CN=6a0d9031-2659
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d4:d2:92:66:3a:eb:88:20:c0:7b:b1:12:13:
f4:25:2b:a1:99:e4:ba:c6:31:63:99:a1:33:73:af:
d9:9a:dd:07:fe:f1:60:90:c3:22:ab:c0:d2:55:fb:
72:6f:01:66:d1:a1:f5:6f:3d:ac:7a:83:41:a2:5e:
bc:ae:64:c7:ea:72:8b:f0:a5:f9:75:c3:d8:fc:a9:
c7:a0:7b:56:1c:fb:9a:41:58:3a:74:24:d6:91:e8:
fc:e6:39:58:66:58:a4:93:15:3b:0c:8e:b8:5f:6b:
08:86:da:d2:4d:22:19:26:05:42:b0:5e:90:d7:a5:
2d:9c:d3:42:ff:a9:cc:9b:92:31:05:55:af:29:94:
2f:44:45:1d:bb:e2:60:43:76:7c:bf:02:42:df:dc:
9b:67:de:f3:de:58:b6:16:8d:a8:4c:48:57:a2:1a:
4b:61:e7:e4:5b:bd:da:af:8e:d2:00:31:bf:9f:da:
83:78:e2:ea:a3:0b:29:47:7d:c2:19:46:6e:f4:9f:
31:9e:a2:ed:aa:a1:6c:ad:ba:04:03:07:91:55:6f:
34:db:84:b4:33:b2:f7:82:5d:05:51:f1:d6:0b:c2:
42:96:c1:14:94:c4:42:a4:e7:46:e6:48:b7:e0:c8:
a0:49:ad:9f:b3:23:58:a7:7e:9f:3b:ee:d1:ed:db:
f0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:C6:3A:3C:D8:4B:58:5E:60:CE:D5:2A:D9:32:0B:23:F0:59:86:43
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A9E25B70543811F1BC961700CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.12.0/24
45.194.66.0/24
45.198.0.0/24
Signature Algorithm: sha256WithRSAEncryption
58:4c:7a:a9:ae:63:73:99:74:52:c3:68:f8:31:77:4c:dc:01:
f7:ce:c8:56:50:53:47:a7:ac:4a:64:d4:fb:67:40:a8:17:38:
1a:62:d9:c1:97:86:2d:19:b7:f3:d3:39:0a:51:34:cf:47:ed:
f3:e4:bc:67:73:87:6e:f7:f1:ca:89:bc:0a:7d:f8:fa:01:61:
1e:11:a3:d6:91:e3:90:c4:e0:13:90:1c:b0:db:7b:50:44:7c:
6d:3e:31:5b:ca:d1:55:18:c5:8f:08:a4:c7:04:ca:89:3a:fe:
ee:aa:ee:49:90:c3:c1:b7:48:af:9a:f5:72:e8:c7:e7:3f:8b:
3f:15:0a:f3:0e:d1:52:92:11:59:0d:4d:10:bd:d8:42:27:af:
b7:f3:a9:c7:6f:09:5c:76:e0:ca:6b:13:3b:d0:f9:1f:8f:95:
1a:a1:87:8f:a5:83:14:a5:47:eb:2c:73:37:a3:48:98:da:e3:
4c:b9:70:da:54:63:f0:d8:07:22:31:84:1b:3f:59:27:a2:a2:
0f:75:3d:0a:40:9d:49:be:f5:9f:91:b4:5c:9e:6d:54:b9:29:
a0:ab:1b:fa:3e:b9:78:cf:0a:a5:fe:39:86:05:05:83:bc:63:
61:ef:27:1d:11:73:5a:ab:a8:0f:de:f8:a8:6d:6a:7a:ff:6f:
9d:f0:7d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:07:22 2026 by rpki-client