Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FA5C30E86A2D11F1BEA3D20ECF1D38B0.roa
File: FA5C30E86A2D11F1BEA3D20ECF1D38B0.roa (raw, json)
Hash identifier: AGl6l7mhR0OkxZgtx65sPWSNO5hK3cXLHu+24xfQhHw=
Subject key identifier: 3C:5F:0A:1A:18:A3:18:73:FB:B7:30:1A:66:E6:F8:4B:A1:4E:3E:36
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BE86
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FA5C30E86A2D11F1BEA3D20ECF1D38B0.roa
Signing time: Wed 17 Jun 2026 09:21:53 +0000
ROA not before: Wed 17 Jun 2026 09:21:49 +0000
ROA not after: Sat 09 Oct 2027 09:21:49 +0000
asID: 274310
IP address blocks: 45.196.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114310 (0x1be86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 17 09:21:49 2026 GMT
Not After : Oct 9 09:21:49 2027 GMT
Subject: CN=6a326731-b454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:2d:0a:1b:aa:09:88:72:62:ec:ba:f5:c9:7f:
2d:af:ef:32:64:65:0d:50:7a:04:47:0e:9c:10:35:
c8:15:8d:9e:f2:be:75:38:32:45:20:ca:83:64:c8:
84:70:64:0e:91:ca:32:86:0d:13:c2:f1:b4:08:12:
c3:80:6c:e6:57:68:e3:05:3e:59:96:44:16:26:e5:
c3:49:04:5a:5b:e2:4d:7c:c1:79:d9:b2:36:ed:65:
54:4a:e7:e8:90:3c:63:e4:56:dc:46:1c:97:b1:2e:
0f:af:f3:02:fa:9b:37:9c:24:4a:73:a0:07:06:b0:
c6:df:c0:f3:33:5b:6c:b2:c4:a9:96:7b:4e:57:f8:
22:90:72:9e:a8:cc:4a:ee:c5:f5:5a:99:af:ad:ca:
87:0a:c9:e1:67:61:31:51:46:41:86:a5:40:55:af:
e4:38:00:4d:b4:ff:fa:eb:1a:b0:f8:45:3a:57:f4:
9b:61:93:29:3a:e7:50:44:40:53:d8:e6:f2:15:54:
0e:d0:4f:71:2a:cc:a2:c5:2b:6e:1a:4b:02:c0:e9:
a7:b9:84:5d:18:42:98:7f:0b:a4:2f:e1:0f:92:16:
8a:c4:8d:b1:8c:ad:70:35:58:71:4c:86:c4:0e:5a:
c1:a0:6b:43:14:38:d0:dc:26:35:6b:3a:50:a1:b0:
1b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:5F:0A:1A:18:A3:18:73:FB:B7:30:1A:66:E6:F8:4B:A1:4E:3E:36
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FA5C30E86A2D11F1BEA3D20ECF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.223.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:66:8c:2d:88:3e:ee:7f:b7:7b:a2:35:2b:0e:c4:b8:fd:0c:
fe:fc:23:b3:77:d7:23:e4:99:e9:a0:36:7a:ee:b5:2c:b1:f6:
ff:42:a1:00:32:f7:77:6c:82:a8:f7:ff:fd:fa:62:bd:7c:b5:
e9:bb:db:2b:2a:54:b8:c9:70:a6:87:84:3f:fb:ac:27:d3:e7:
d2:ed:0b:2d:91:a7:3d:3e:0b:b5:fd:17:3a:6c:bc:00:05:5e:
36:23:a7:4e:f3:c3:03:98:79:c9:23:4f:86:3b:b0:79:a0:c3:
43:4e:c3:20:f9:3c:c4:ad:e9:bb:b2:ce:50:6b:b3:eb:47:3b:
02:f8:5e:5b:cb:43:c5:a6:3b:95:ec:27:6b:b9:33:10:d9:d0:
be:73:5f:89:04:23:53:cd:6a:04:45:7e:ab:45:6d:57:9d:d6:
a5:f9:ec:8f:a2:a4:6f:68:09:c6:2d:c7:b0:ff:30:c4:54:26:
ac:4a:ab:d4:3f:a2:5d:7e:2b:43:7b:49:66:4a:a8:84:83:be:
ec:df:25:8d:4c:c8:96:7e:da:a5:8e:09:12:15:32:b6:a0:c9:
74:5f:24:dd:f4:8b:c4:32:36:31:9c:35:79:32:8a:42:71:41:
9a:56:88:6c:ac:34:75:10:5b:dd:b5:6a:a6:23:bd:18:29:5b:
e8:74:8c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:41:47 2026 by rpki-client