Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C5647AF854DE11F1B35BB8F8CE1D38B0.roa
File: C5647AF854DE11F1B35BB8F8CE1D38B0.roa (raw, json)
Hash identifier: neK0vLkEDaJpPvxTVjD+CF09ifmpEozkClrVQUM8o80=
Subject key identifier: 2D:75:F6:75:0B:5E:6F:E3:34:1A:BF:A3:1F:DD:1E:E9:14:35:67:46
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B6CF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C5647AF854DE11F1B35BB8F8CE1D38B0.roa
Signing time: Thu 21 May 2026 06:32:00 +0000
ROA not before: Thu 21 May 2026 06:31:55 +0000
ROA not after: Sun 20 May 2029 06:31:55 +0000
asID: 17561
IP address blocks: 45.194.41.0/24 maxlen: 24
45.200.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112335 (0x1b6cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 21 06:31:55 2026 GMT
Not After : May 20 06:31:55 2029 GMT
Subject: CN=6a0ea6e0-5a8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f7:58:b4:d1:82:e2:fd:60:cf:bf:6c:51:de:
ec:16:4a:c7:9f:68:52:87:31:14:17:9f:49:10:36:
35:c3:4a:e0:df:c7:9f:f7:95:33:55:51:ba:41:79:
6c:a8:52:0a:0a:22:1c:92:1e:5e:8b:82:c5:6e:b8:
8c:d1:1f:70:70:22:ee:36:45:38:8d:87:47:7c:27:
c7:9a:2b:5a:e3:30:91:43:b0:9e:5e:99:d3:12:c4:
27:ef:60:3c:6b:8e:5a:e7:80:a7:94:60:6c:e3:d8:
cf:f1:07:9d:32:cb:e2:a3:30:62:b7:df:44:15:6f:
ff:7a:7a:4f:e2:28:f0:d9:08:1c:e9:f0:0b:86:50:
87:cb:89:22:46:80:53:12:b8:8a:e5:32:36:00:3b:
f1:3c:1e:f8:49:f5:f3:17:62:33:17:b3:20:36:a0:
6c:f1:54:0f:96:8a:cc:3e:97:f4:a5:d5:f0:49:43:
87:ba:c6:0f:6d:b8:f0:f3:d6:a9:61:13:8b:50:1b:
db:17:d8:69:74:18:12:19:7f:f5:68:87:cf:8b:ce:
bd:7e:71:04:d5:8a:0c:7e:45:ad:39:bb:92:7a:4b:
f6:ee:0d:9b:79:f6:3a:1e:c9:16:df:4f:f1:14:0b:
a1:ee:c2:c9:05:e0:18:aa:1e:af:ed:8c:0c:85:ef:
43:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:75:F6:75:0B:5E:6F:E3:34:1A:BF:A3:1F:DD:1E:E9:14:35:67:46
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C5647AF854DE11F1B35BB8F8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.41.0/24
45.200.127.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:04:7e:99:bb:82:15:85:cd:b0:20:27:65:0b:d1:05:0b:cf:
31:1b:d1:7b:3d:3e:31:98:2f:3d:5e:49:08:c8:9e:f4:a6:22:
22:92:e3:b4:30:3d:65:e0:82:d9:65:6b:af:60:1c:7b:27:6d:
d2:ff:b9:50:86:89:59:f1:7e:cf:ea:9d:d8:9b:26:69:28:e1:
39:7f:50:5f:d9:9e:28:fb:92:c1:b0:f4:00:46:c6:97:cd:d0:
af:52:93:ca:bf:ea:99:ab:6a:d9:57:b1:99:83:bc:04:83:48:
4b:a2:f5:38:b8:b6:f5:54:7b:83:75:a5:66:49:56:31:ae:67:
05:60:98:d0:fa:c8:ca:53:09:80:05:f1:6f:b6:53:ce:be:3e:
e7:ae:43:f0:ff:b6:33:d9:f8:0f:56:d9:23:50:8b:e1:32:88:
19:e6:ba:f7:0a:0b:71:f6:f1:49:d9:56:dd:75:b6:a9:82:26:
79:e9:b0:a1:91:29:a9:50:cc:21:d8:c7:49:79:62:82:e5:4c:
14:bd:01:f5:1f:a8:85:da:f4:5e:6b:a7:b7:34:f2:18:1d:31:
00:77:bd:70:f1:02:a1:41:9c:b4:91:22:ad:c2:8b:5b:70:35:
ff:ce:0d:c1:70:10:8a:d7:34:bc:db:bb:48:c6:af:1c:95:21:
93:7c:f7:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:14:12 2026 by rpki-client