Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B1C58258578B11F1BD59B4C6CE1D38B0.roa
File: B1C58258578B11F1BD59B4C6CE1D38B0.roa (raw, json)
Hash identifier: QQGtJvMpArxoQ0R/f42i6PDqYtEVGpMU9SiPIVpaxZA=
Subject key identifier: 40:1E:24:85:92:00:F1:BC:FD:8E:2B:DC:12:BD:1F:75:53:D9:B3:4E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B91E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B1C58258578B11F1BD59B4C6CE1D38B0.roa
Signing time: Sun 24 May 2026 16:14:52 +0000
ROA not before: Sun 24 May 2026 16:14:48 +0000
ROA not after: Fri 10 Jul 2026 16:14:48 +0000
asID: 395793
IP address blocks: 45.195.202.0/23 maxlen: 24
45.201.21.0/24 maxlen: 24
45.201.22.0/24 maxlen: 24
45.201.23.0/24 maxlen: 24
45.201.24.0/23 maxlen: 24
45.201.24.0/24 maxlen: 24
45.201.25.0/24 maxlen: 24
45.201.26.0/24 maxlen: 24
45.201.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112926 (0x1b91e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 24 16:14:48 2026 GMT
Not After : Jul 10 16:14:48 2026 GMT
Subject: CN=6a1323fc-2872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f2:0e:d9:10:87:5d:62:3f:aa:2e:dc:6c:82:
34:74:f2:ac:56:70:87:fe:bb:4a:54:9f:e5:59:38:
3a:fa:71:2c:27:00:c3:25:6f:95:50:8e:2c:e6:ff:
e0:62:93:03:13:e0:d2:df:64:57:88:c8:88:2b:2a:
a6:ee:c8:aa:be:ee:bc:7a:3b:27:af:76:37:9e:82:
8c:bb:e7:8b:af:5d:29:94:db:a3:94:58:c6:95:93:
be:5e:38:e2:07:ad:14:c8:22:62:d5:14:6c:23:8a:
35:65:13:59:46:f2:3d:e5:99:a4:f0:60:82:5c:5f:
bd:13:20:d9:0d:ea:67:d4:b7:2a:6e:c6:a5:aa:68:
9e:23:91:e2:4b:12:d6:a1:4c:32:a0:a4:35:27:22:
a2:1f:16:d9:6a:fb:b8:92:8f:a5:d1:00:be:41:b4:
f0:67:d8:dd:78:05:f3:72:22:c4:7f:c5:3e:ac:1c:
d4:80:30:f7:6f:bb:20:2e:4b:f9:23:4c:17:ac:7a:
da:0e:ef:a6:6a:ef:9d:0f:ea:8a:0f:ac:c7:15:ea:
2c:69:d1:c3:d6:bd:f0:02:66:8f:76:d3:e8:3f:24:
e0:56:86:2e:56:21:5f:ce:f7:d7:7e:48:ba:22:e6:
6f:1d:f5:d7:32:d7:6d:06:8c:b0:30:9e:58:e4:d0:
96:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:1E:24:85:92:00:F1:BC:FD:8E:2B:DC:12:BD:1F:75:53:D9:B3:4E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/B1C58258578B11F1BD59B4C6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.202.0/23
45.201.21.0-45.201.26.255
45.201.31.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:68:e6:84:e0:b8:8c:ed:17:c4:3a:d2:ad:f5:99:92:7c:f6:
50:e7:6f:5e:19:9b:20:d6:5f:f5:54:ad:58:46:fc:83:0f:28:
83:8e:22:3f:3e:7d:63:6b:7f:35:bd:e0:9a:68:68:21:dc:92:
09:07:27:86:00:d7:45:cc:7f:c2:65:84:94:c9:04:01:e0:a2:
36:a7:40:92:6b:a1:bc:97:ae:18:1f:67:20:fe:a2:08:d7:96:
fd:c1:99:48:08:3f:24:cd:c2:3d:f0:e5:6f:b2:ec:0a:8e:49:
86:5e:d6:ec:44:57:bf:bb:94:55:ab:66:bd:36:e3:fe:25:c6:
ae:62:d2:3d:b8:e2:64:c8:a4:a6:1c:35:cc:16:59:67:ba:9d:
29:bc:f6:9d:1c:96:52:b5:fe:d6:05:c6:8d:7b:52:57:89:3c:
d1:34:4d:b7:f1:c8:b7:8f:bc:02:41:01:d5:3e:56:c0:6f:31:
c2:ec:ea:1c:80:35:1f:85:a5:2b:c5:f7:51:2c:3b:63:7e:be:
45:da:b5:3e:31:6c:c0:86:7b:10:34:25:01:1f:3c:7a:3d:9e:
d2:b1:7a:64:3f:85:dd:4e:f3:8c:6d:62:fd:18:d7:5b:98:93:
a5:a4:34:64:be:cd:f5:dd:37:f3:bf:db:78:30:42:18:44:d0:
fb:f3:8e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:07:18 2026 by rpki-client