Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FDCC13125EAF11F1AF11DDA8CE1D38B0.roa
File: FDCC13125EAF11F1AF11DDA8CE1D38B0.roa (raw, json)
Hash identifier: 9DZDQS6a1wTG4LZ7/3xfRmTyZDfgKPQWf2DKSiLwn+8=
Subject key identifier: B4:4D:58:67:43:E2:C5:B8:1D:D3:3F:75:88:15:AD:37:26:BC:3C:3D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BB5E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FDCC13125EAF11F1AF11DDA8CE1D38B0.roa
Signing time: Tue 02 Jun 2026 18:22:20 +0000
ROA not before: Tue 02 Jun 2026 18:22:15 +0000
ROA not after: Fri 10 Jul 2026 18:22:15 +0000
asID: 274273
IP address blocks: 45.194.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113502 (0x1bb5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 2 18:22:15 2026 GMT
Not After : Jul 10 18:22:15 2026 GMT
Subject: CN=6a1f1f5c-9fef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:86:bc:a1:9f:5d:76:22:f1:7f:f5:eb:d8:3c:
66:b5:53:de:30:54:48:5b:7d:60:83:11:c2:22:83:
37:00:9b:f9:56:58:f1:8e:e6:65:85:b8:45:08:e3:
a1:aa:74:ab:4a:09:82:10:6f:96:0a:34:37:53:f3:
d9:a1:44:e2:5e:2d:e8:61:b4:65:cb:3b:f0:a2:78:
8c:4a:5f:96:89:58:a7:18:b6:90:25:e0:04:80:26:
58:67:0c:32:21:c0:61:56:67:0c:d7:a6:26:03:84:
15:90:46:9d:0e:ed:da:66:7a:49:26:50:9f:7e:37:
38:0d:7b:44:cb:6c:06:1e:ec:a0:98:fc:e5:86:a4:
91:a7:18:c5:b8:a5:97:9f:20:aa:af:98:cd:3b:d6:
eb:15:be:47:95:89:64:47:1a:f3:cf:f5:8a:4a:7d:
7d:5c:ef:b1:12:5e:0f:78:51:1d:37:91:ec:e1:6e:
92:f5:aa:0d:76:7c:0d:71:cd:50:05:0f:5e:48:33:
8c:6e:9d:f6:5a:37:e3:e7:77:f3:c7:b2:b1:67:2b:
de:91:35:b3:f1:d1:84:a3:54:84:62:98:a6:51:8c:
1f:ff:77:6b:08:33:b0:5d:9b:fe:d7:5c:86:8f:22:
b5:5d:b3:3e:b9:bb:8c:dc:19:03:6d:c8:9b:c3:dc:
d2:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:4D:58:67:43:E2:C5:B8:1D:D3:3F:75:88:15:AD:37:26:BC:3C:3D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FDCC13125EAF11F1AF11DDA8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.52.0/24
Signature Algorithm: sha256WithRSAEncryption
27:d4:4b:ad:96:e5:18:7a:1c:f6:fa:90:ba:12:80:b0:54:dd:
1c:20:49:b8:e9:49:64:79:b9:89:89:27:7c:d4:5b:1b:6a:e5:
1a:54:fd:fd:cd:b0:93:00:f2:b1:81:fd:d5:d2:b4:33:3a:57:
5f:61:58:3f:0f:73:3f:73:52:4a:c1:c2:d7:8e:47:e1:81:68:
b3:1d:38:63:99:78:2e:2d:df:99:3f:e3:41:35:59:a7:2e:28:
27:9e:95:70:42:a9:1c:98:92:75:f1:e0:7a:2a:95:90:d4:e2:
3e:0e:0f:2c:2c:28:07:39:f1:2d:8a:b9:e4:71:ab:7d:e0:ea:
72:e4:92:57:ef:a4:65:b9:30:b9:a6:e7:c7:71:8d:59:b7:02:
08:38:b1:c7:a2:c2:9f:dd:43:b5:36:83:fe:ad:4c:62:62:db:
fe:6c:62:de:61:92:17:7a:bb:c6:cf:c8:a1:4d:0e:1d:2b:7e:
65:a3:a3:d3:2e:c8:47:77:37:31:cd:0c:82:0b:39:fe:10:75:
68:8d:d1:14:24:e6:c5:5f:ec:08:22:44:b6:71:74:4e:2c:95:
15:d8:24:72:0a:45:cd:82:08:45:8c:29:96:56:aa:4d:70:16:
ce:e6:9a:ae:ee:cf:5f:2f:00:18:7d:9b:80:26:e0:32:0b:7d:
05:98:0c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:21:24 2026 by rpki-client