Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D303A66C55C311F19D6A6BEFCE1D38B0.roa
File: D303A66C55C311F19D6A6BEFCE1D38B0.roa (raw, json)
Hash identifier: s5NQKCV3I0c1WaudAI1TcAfEvdfkMHpK+jaKeglSBIo=
Subject key identifier: 48:21:69:A2:0E:C6:50:84:9B:54:AE:DA:3C:7C:0F:AE:D5:D3:BD:DF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B7CD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D303A66C55C311F19D6A6BEFCE1D38B0.roa
Signing time: Fri 22 May 2026 09:51:38 +0000
ROA not before: Fri 22 May 2026 09:51:33 +0000
ROA not after: Wed 19 Aug 2026 09:51:33 +0000
asID: 402169
IP address blocks: 45.195.112.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112589 (0x1b7cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 22 09:51:33 2026 GMT
Not After : Aug 19 09:51:33 2026 GMT
Subject: CN=6a102729-a48c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8b:ac:21:32:71:ae:81:7b:56:d0:90:10:bc:
a0:1a:6d:7a:56:d6:23:a7:3e:ba:d4:09:86:1b:88:
24:8c:ca:44:9c:f3:98:42:8a:94:9d:b5:26:3c:3f:
67:c4:1a:a6:e4:57:59:de:bf:3d:15:d8:16:01:5a:
12:5d:22:ab:18:d5:67:11:b0:df:b0:07:5d:cc:27:
88:73:9f:8c:89:4a:26:cb:54:a4:33:f3:e4:d1:e4:
89:d8:87:ec:d6:31:bd:58:db:77:46:29:2a:06:f3:
4a:6e:6c:ad:3e:95:57:f7:f9:f5:7b:54:12:0a:2d:
54:37:1b:15:49:2a:95:82:ca:70:26:d9:e8:56:5f:
c9:76:a8:96:e4:21:90:c1:46:f7:42:c6:09:8a:b5:
3b:45:a6:82:70:bf:a0:9a:bb:51:14:0b:95:67:a7:
62:46:c6:12:27:2c:3f:a9:d8:e8:8a:92:bd:d0:4a:
16:01:d4:6e:f9:6b:48:24:af:be:5a:0f:f2:44:cd:
99:5f:80:57:58:64:63:71:f6:f4:6d:72:3d:0c:d7:
b8:3c:f5:4f:4e:97:f0:d9:49:c1:ee:bc:5f:39:29:
a8:23:41:c1:b6:ec:db:96:a2:37:4a:56:6d:67:9c:
4d:1e:eb:92:7c:60:7d:29:76:62:e5:62:9f:76:f4:
68:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:21:69:A2:0E:C6:50:84:9B:54:AE:DA:3C:7C:0F:AE:D5:D3:BD:DF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D303A66C55C311F19D6A6BEFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.112.0/21
Signature Algorithm: sha256WithRSAEncryption
b3:9e:61:7e:45:7f:a4:c8:a8:f7:b8:f7:88:5d:e2:df:0c:b1:
8a:e0:7e:84:88:9e:24:a6:2f:24:1c:07:46:c3:90:2c:7e:78:
5c:16:23:1d:dd:a1:fc:0d:83:eb:fb:61:9b:9c:6b:11:b6:cf:
dd:5f:c5:90:f0:6b:26:89:49:eb:a2:94:8e:2a:d6:63:02:ae:
17:87:79:70:ea:9c:39:a1:9e:db:dc:4e:19:52:63:51:77:12:
0d:86:c9:d1:be:59:3e:56:b1:bf:a5:c4:e8:27:a3:9c:35:5b:
85:19:d1:29:66:80:9d:3e:83:19:c0:3e:83:a4:25:93:4a:1a:
da:c2:26:e3:35:c4:32:8c:02:55:f7:39:42:fa:0c:ff:c6:c1:
fb:a3:2f:87:d4:f8:52:49:5c:cc:26:b6:c6:39:65:8b:dc:d2:
ff:a9:47:5a:c5:04:05:d9:be:80:74:cf:cb:81:68:6e:7b:7b:
af:19:16:73:fd:3f:d9:2b:9e:a4:ad:ef:80:d8:8e:12:93:59:
44:98:8d:f4:f8:03:6f:e3:57:c3:df:60:70:50:1d:b6:36:5f:
5c:05:b2:fe:9d:02:de:d3:0a:10:08:7e:e9:58:af:a7:d2:36:
6d:8a:1d:6b:af:c8:d4:74:d8:10:67:95:c5:c7:80:06:96:a7:
14:15:95:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:07:21 2026 by rpki-client