Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F8C8E53C536211F1B6FE58EDCE1D38B0.roa
File: F8C8E53C536211F1B6FE58EDCE1D38B0.roa (raw, json)
Hash identifier: el2qRy3lH+9SxPjyV9w9OVdOBIGElg2zAneh97AKzek=
Subject key identifier: D0:76:32:6B:0A:B4:21:6E:3C:E1:94:90:AB:40:08:E6:FB:E6:5F:36
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B5CF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F8C8E53C536211F1B6FE58EDCE1D38B0.roa
Signing time: Tue 19 May 2026 09:13:17 +0000
ROA not before: Tue 19 May 2026 09:13:13 +0000
ROA not after: Wed 19 Aug 2026 09:13:13 +0000
asID: 55020
IP address blocks: 45.195.112.0/21 maxlen: 24
45.195.120.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 112079 (0x1b5cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 19 09:13:13 2026 GMT
Not After : Aug 19 09:13:13 2026 GMT
Subject: CN=6a0c29ad-e465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:47:94:7f:d2:55:af:78:8e:cc:85:ac:38:6d:
96:66:2b:1b:f4:bd:d6:23:ce:a7:2d:21:55:2b:4e:
88:e5:e9:05:bb:05:50:b4:ec:45:30:41:43:94:c3:
2c:6c:9e:cd:05:a0:4d:15:41:ec:8d:26:46:fb:95:
d1:a0:54:9e:c7:74:58:85:bd:a4:9c:9e:b6:53:f5:
32:d5:5a:b3:ac:a5:5c:12:a1:26:2f:7b:0c:e4:68:
e7:7b:62:a8:4d:c5:4e:15:4d:e6:d2:c7:f2:bf:09:
80:4e:08:7b:07:a6:64:20:f7:12:41:0a:e0:a9:4b:
cf:8d:59:70:e4:6e:c0:51:e9:f3:02:b5:9b:93:d5:
04:fb:51:ad:a5:b9:30:dd:1b:e1:b5:5d:82:55:45:
07:ba:64:c1:cc:ea:65:5a:ef:d0:9f:4a:3d:c7:3f:
18:84:98:fb:c8:ac:94:c8:32:87:82:de:00:5c:fc:
8a:49:87:63:42:59:44:90:2d:e0:bc:82:bd:98:e1:
5f:6d:48:bd:e6:ee:0a:cf:3e:61:a7:ae:f8:05:3d:
02:75:2b:39:18:12:12:04:63:1d:91:0a:97:e7:07:
b0:37:74:18:e4:ad:a5:81:11:09:6b:a3:97:d7:40:
24:1d:ae:d7:f3:d7:01:ae:59:21:59:c7:73:88:b2:
a3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:76:32:6B:0A:B4:21:6E:3C:E1:94:90:AB:40:08:E6:FB:E6:5F:36
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F8C8E53C536211F1B6FE58EDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.112.0/20
Signature Algorithm: sha256WithRSAEncryption
5f:bc:3e:d2:57:e8:7a:e3:2a:1f:c6:7a:c1:35:e7:bd:10:ac:
42:2e:d7:1f:9e:3e:77:be:78:be:f6:85:7e:24:90:52:a1:cd:
99:c2:ab:78:8f:cf:35:9f:f0:80:eb:c4:d6:38:22:4e:4e:d6:
b6:a8:c8:ce:21:d8:ce:88:52:90:ad:20:2a:12:38:e3:30:8d:
16:71:87:fb:a2:3c:10:a5:65:e0:44:59:6b:e7:ce:e2:3d:fe:
d3:85:11:09:b4:9d:ef:07:45:65:86:1f:9a:c4:d1:ae:c2:91:
6c:70:3a:12:48:a3:8b:8e:f4:20:e3:89:60:56:53:ef:d8:f5:
63:e9:fc:4d:9b:7f:eb:3d:d7:1b:24:ed:60:cc:2b:c2:cb:48:
3d:0b:76:73:46:b8:2a:18:fd:f7:8a:2e:cc:80:c7:07:91:87:
88:b7:f1:c7:6b:f9:87:b8:be:98:23:16:08:17:b4:5c:c8:f7:
38:2b:3c:c4:4d:39:2b:28:91:1b:d4:56:52:09:71:72:14:16:
a6:f9:26:ce:d1:d2:9d:00:e7:ed:a1:8c:8e:4c:d4:07:08:e2:
8c:e7:05:a6:fc:fe:32:8b:58:59:c4:5b:f5:34:6c:ba:9c:a3:
51:7f:fc:97:f8:d1:46:e5:30:21:51:b7:fd:70:f0:34:59:e8:
4d:d8:e0:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:07:13 2026 by rpki-client