Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E8A3C4B2507711F1ADBC75A8CE1D38B0.roa
File: E8A3C4B2507711F1ADBC75A8CE1D38B0.roa (raw, json)
Hash identifier: hOQsTa2au3GRycHl1DxRm8kVJs28FR/Y5AoKcs81c4g=
Subject key identifier: 7D:0C:FD:A7:91:CF:9E:09:3E:F4:59:D9:53:57:CB:50:38:80:50:ED
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B4D0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E8A3C4B2507711F1ADBC75A8CE1D38B0.roa
Signing time: Fri 15 May 2026 16:05:36 +0000
ROA not before: Fri 15 May 2026 16:05:32 +0000
ROA not after: Mon 22 Jun 2026 16:05:32 +0000
asID: 8796
IP address blocks: 45.205.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111824 (0x1b4d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 15 16:05:32 2026 GMT
Not After : Jun 22 16:05:32 2026 GMT
Subject: CN=6a074450-3b75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:26:67:49:7c:2f:59:e2:54:f9:0a:b2:f7:57:
d3:71:37:da:0b:2f:99:ac:92:7a:07:d3:36:62:56:
ee:39:49:c9:b5:d2:db:02:5d:44:f1:9d:a3:dc:31:
21:95:4c:6f:36:d3:e0:70:2c:9e:da:e7:11:c9:83:
b1:4e:b3:58:3c:09:6c:ab:35:0f:18:04:e7:d1:dd:
91:96:94:a4:98:f1:72:ba:37:5a:86:29:a6:c0:a3:
9d:72:97:d6:70:b8:59:a2:a2:dc:70:7c:d8:c1:e6:
12:ee:48:73:66:fd:91:b5:02:fd:3e:83:e0:af:73:
fc:53:57:d5:02:30:33:8a:b4:75:2d:0d:7c:82:10:
27:d2:b3:0f:59:e6:a8:f8:fd:fe:12:d1:d7:96:19:
8a:40:ed:ce:bb:74:08:28:c6:fb:d2:61:b1:e4:f5:
fa:53:d2:7c:af:70:00:ab:e4:09:b1:9d:b3:d8:42:
82:a3:b6:4b:c9:6a:8c:b0:b0:c9:f6:07:f3:ef:65:
88:9a:c6:8e:f0:1a:32:04:46:e0:ae:55:83:4c:c6:
ef:9b:df:44:20:04:84:ec:46:76:a2:b1:30:db:09:
cd:71:dd:b6:27:65:f5:ef:f5:cc:02:59:6f:a0:c4:
d7:5e:92:c5:02:c9:06:95:cc:05:e9:eb:3b:0d:ee:
f6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:0C:FD:A7:91:CF:9E:09:3E:F4:59:D9:53:57:CB:50:38:80:50:ED
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E8A3C4B2507711F1ADBC75A8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.16.0/20
Signature Algorithm: sha256WithRSAEncryption
85:c4:95:da:6c:5a:8a:f8:c1:93:f6:7f:cb:ba:4e:da:8e:89:
10:7c:fc:f9:1d:41:2c:9d:b9:ff:e7:68:f1:eb:63:90:38:dc:
ea:d2:26:ff:51:18:2b:eb:29:8e:ae:d9:a3:98:20:0c:bf:f7:
5c:31:44:16:63:bf:7c:77:4a:a0:37:fc:2d:1b:94:73:85:ca:
5e:c4:6e:42:35:e1:2b:32:b5:83:16:55:c9:c2:db:10:09:75:
a3:8b:f8:8d:71:b4:2b:47:c2:7d:d4:2b:1c:80:aa:16:10:3d:
b7:4e:be:5c:4c:dc:49:8b:27:99:4c:a3:3f:21:e9:5c:70:c9:
ec:38:9b:b8:a4:9d:1a:2a:9c:97:07:fa:e2:34:51:1b:48:a1:
cf:ff:39:f6:e2:2c:f9:b8:55:20:13:a7:fb:c4:f3:ac:22:36:
16:8c:f8:a8:a8:76:c8:34:20:12:3c:9d:cb:4f:d0:63:eb:ce:
5b:d5:5b:a3:40:dd:8a:4c:92:b9:44:60:54:74:23:38:7d:d3:
20:cd:6c:65:be:0e:ef:e3:57:ba:4c:56:87:aa:9a:27:db:5f:
34:0a:e3:ac:a8:47:63:f6:21:5b:21:e4:fb:92:92:3e:9e:ad:
87:07:b9:20:1c:69:1b:b1:f5:01:7d:72:84:6c:3e:79:e7:51:
e4:b6:9a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:07:20 2026 by rpki-client