Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F83E8992590611F180D269CECE1D38B0.roa
File: F83E8992590611F180D269CECE1D38B0.roa (raw, json)
Hash identifier: tZBQgOcEF8+whqPmbfc3uUPEHPIMq8sHAjL+lQibmd8=
Subject key identifier: B0:37:DD:D8:AB:92:8D:E6:20:C0:00:33:53:DD:1A:45:26:6D:53:9B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BA10
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F83E8992590611F180D269CECE1D38B0.roa
Signing time: Tue 26 May 2026 13:29:50 +0000
ROA not before: Tue 26 May 2026 13:29:44 +0000
ROA not after: Fri 10 Jul 2026 13:29:44 +0000
asID: 401783
IP address blocks: 45.192.113.0/24 maxlen: 24
45.192.235.0/24 maxlen: 24
45.195.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113168 (0x1ba10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 26 13:29:44 2026 GMT
Not After : Jul 10 13:29:44 2026 GMT
Subject: CN=6a15a04e-36bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:bd:4f:14:65:d6:44:64:59:f0:8d:4c:ad:db:
78:77:99:59:69:bf:50:c2:7c:21:0d:d1:69:67:49:
39:ca:ba:55:e1:43:a5:71:78:91:0c:f0:76:48:8f:
f7:2a:31:7e:18:bb:26:0c:26:52:21:f4:3a:4a:44:
e5:5e:8c:61:56:dd:be:78:a1:c5:10:a5:bb:90:87:
9c:bc:1c:e0:63:97:1f:56:92:01:b2:3f:c8:63:93:
08:93:e0:36:4c:99:bb:84:ff:f9:84:48:3b:2b:16:
79:98:e9:e6:41:41:c9:2b:b3:53:c9:e2:b1:f3:1b:
e2:d7:fc:c3:1b:05:5e:79:e4:0e:2c:06:c1:ca:8d:
0c:61:7e:f2:12:3c:6c:b5:f9:6a:84:6e:84:10:c2:
13:fa:cd:75:f8:42:82:47:33:8f:84:72:db:01:ce:
0e:34:07:1c:ff:02:da:ae:d7:7f:cd:3b:1e:67:a1:
b4:96:81:2d:bf:18:a8:c2:ce:62:ef:76:f8:5b:4f:
ee:13:e1:95:29:ea:06:e6:25:9c:26:da:ae:a8:5c:
ed:c7:f8:86:ff:2d:fb:e2:37:fd:d1:df:3c:04:d6:
ac:36:3d:77:18:e4:eb:21:26:35:24:6c:08:05:d2:
cf:3f:b9:3e:8a:38:a8:c6:63:96:1d:68:e6:73:ac:
c6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:37:DD:D8:AB:92:8D:E6:20:C0:00:33:53:DD:1A:45:26:6D:53:9B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F83E8992590611F180D269CECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.113.0/24
45.192.235.0/24
45.195.255.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:d2:e5:ae:bf:9e:76:47:65:28:b7:73:a3:fd:06:1f:b9:8c:
45:ef:4c:14:51:84:f3:09:15:07:59:6e:fc:da:e1:70:da:64:
06:36:2b:a4:d8:f5:52:3d:db:21:e7:7f:1c:85:46:c9:76:e0:
97:69:9f:d1:1e:de:c7:e5:53:bd:c7:e4:90:a2:ea:70:41:48:
a0:c4:8c:6b:37:b3:23:07:4a:08:ea:e0:34:80:d8:79:85:7c:
6a:b7:6c:e9:27:26:1f:a7:0e:28:e4:67:e2:dd:c2:a3:3b:6e:
92:5a:a5:35:4a:93:c1:41:c5:b2:24:97:e8:ad:9f:56:b1:09:
83:32:74:1a:1a:69:ad:80:ea:5e:93:e4:67:d4:87:c9:90:1a:
fc:cd:e2:b7:b5:d3:2d:05:0a:15:2b:18:1c:d1:db:73:53:c4:
4b:68:ce:78:8e:29:6a:4b:71:2d:b9:cd:12:90:24:ad:dd:ce:
b5:c9:2b:63:00:a9:2f:44:f4:ee:79:aa:ce:5c:c6:1a:4c:0f:
72:7b:87:54:4d:77:aa:7b:f2:fb:60:e6:9e:44:1d:3f:f1:a9:
16:b5:75:da:40:0a:2f:b4:67:5b:9b:42:f5:75:b6:18:a6:9f:
87:67:fc:11:d7:05:b1:94:e7:f6:fb:e7:de:47:52:0e:be:88:
9e:5f:e7:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:14:36 2026 by rpki-client