Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF77B00C536011F1BA7B38DFCE1D38B0.roa
File: CF77B00C536011F1BA7B38DFCE1D38B0.roa (raw, json)
Hash identifier: lEogeyko2L2UJc391VrUo4yqIpEeYGgn8UIyRxzbZso=
Subject key identifier: A9:FD:75:35:F2:7C:2D:D8:28:78:7C:F6:D5:EE:A6:96:6C:38:A0:83
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B5C5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF77B00C536011F1BA7B38DFCE1D38B0.roa
Signing time: Tue 19 May 2026 08:57:49 +0000
ROA not before: Tue 19 May 2026 08:57:45 +0000
ROA not after: Wed 19 Aug 2026 08:57:45 +0000
asID: 402169
IP address blocks: 45.195.112.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112069 (0x1b5c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 19 08:57:45 2026 GMT
Not After : Aug 19 08:57:45 2026 GMT
Subject: CN=6a0c260d-0ad5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c3:91:2e:cb:e7:e4:02:2e:40:d6:df:3a:66:
63:0b:4b:90:b8:51:6a:17:a0:56:d3:55:11:f5:48:
05:54:13:63:5e:aa:4f:66:7b:6b:83:7e:1a:ba:a3:
74:0a:60:00:b1:59:40:9e:70:bb:0d:92:61:a8:6b:
3c:6e:a1:d5:6b:34:70:0c:59:37:24:51:c6:44:97:
85:5a:89:c8:b7:27:97:24:1d:64:c0:bc:b6:be:c4:
94:cc:71:71:be:d9:8d:f5:82:5b:10:9f:02:b7:da:
24:52:47:b5:7e:0f:61:0e:72:db:fa:59:19:63:a4:
ee:96:b3:10:a0:5a:5b:1e:0d:a5:74:c3:03:18:09:
5b:7e:e4:da:51:c8:c2:18:45:c2:ba:68:b0:bb:a9:
ff:cc:0b:40:a9:69:69:c2:d6:fd:9d:68:70:3b:32:
48:fd:79:38:e4:d6:29:0d:da:5c:06:f8:7a:17:f2:
ac:bc:86:65:4d:03:28:f1:ed:e4:06:5c:7f:57:a7:
94:63:0f:95:c4:4e:40:94:41:62:ec:c9:9a:af:50:
d1:b1:25:d0:34:6a:76:99:11:35:d3:42:6d:bd:2a:
68:04:7e:1f:8d:19:11:a2:f3:03:14:5c:f5:06:da:
f8:b6:59:e8:f5:78:f4:8c:8f:8c:4b:40:1b:9f:2b:
58:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:FD:75:35:F2:7C:2D:D8:28:78:7C:F6:D5:EE:A6:96:6C:38:A0:83
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF77B00C536011F1BA7B38DFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.112.0/21
Signature Algorithm: sha256WithRSAEncryption
a4:9c:5f:a0:6c:2e:82:aa:ff:2d:43:80:bd:df:84:d0:ab:aa:
a7:33:ef:82:6b:fd:57:77:bc:63:64:66:84:45:b6:36:3c:bc:
0a:79:51:d9:75:93:6b:d7:3b:dd:bf:99:d2:b0:77:a7:bf:26:
6c:5b:03:71:fe:5a:d9:e5:b4:09:7a:8e:5f:f0:73:c7:82:e5:
fb:ea:d4:89:15:2d:75:3f:b9:98:ba:0c:f3:57:cb:aa:2b:3d:
1d:70:7b:f3:74:ed:11:cd:76:ae:4b:13:7e:72:cc:0f:26:cd:
35:ed:cb:5c:76:28:03:ff:55:60:21:f1:1e:c5:8d:a2:51:ed:
f8:b5:19:21:72:52:39:85:1a:80:7a:06:6f:90:ad:9d:64:09:
be:af:70:c9:46:cf:c6:98:a2:73:a9:fd:61:4f:4d:de:52:28:
0e:c5:1c:66:00:25:e2:a3:d8:7d:d8:7f:d7:b1:13:35:c0:0d:
31:da:50:59:b0:81:cc:d3:5f:af:48:bd:92:e1:72:6d:f7:89:
10:fe:c8:b5:91:d1:de:9f:23:15:0b:0e:fe:af:ef:79:50:76:
7c:27:14:e6:e1:11:e8:09:4c:87:54:53:61:a2:aa:6a:5a:09:
9a:ed:af:43:cf:8a:8b:06:6a:9e:a4:e3:56:27:6f:33:1d:79:
e9:20:08:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:07:08 2026 by rpki-client