Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FEF6ACF458F911F18F05C7FECE1D38B0.roa
File: FEF6ACF458F911F18F05C7FECE1D38B0.roa (raw, json)
Hash identifier: J+emF/m5aKGgCaJbTIJSa2uAGv6a1GsRUq+qEVUkM/8=
Subject key identifier: 02:3E:0C:0A:74:94:3D:5C:41:77:D0:48:AE:11:90:36:8C:12:22:64
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B9F3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FEF6ACF458F911F18F05C7FECE1D38B0.roa
Signing time: Tue 26 May 2026 11:56:58 +0000
ROA not before: Tue 26 May 2026 11:56:53 +0000
ROA not after: Sat 04 Jul 2026 11:56:53 +0000
asID: 206938
IP address blocks: 45.196.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113139 (0x1b9f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 26 11:56:53 2026 GMT
Not After : Jul 4 11:56:53 2026 GMT
Subject: CN=6a158a89-fc05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b3:92:70:b0:b5:19:02:84:02:92:d0:03:6c:
57:6c:85:ce:1d:03:bb:04:3d:66:0d:63:99:6d:02:
d9:de:c4:59:b9:c8:5e:40:48:4e:1e:dc:44:76:33:
82:e3:31:7b:81:4e:3a:5e:5a:84:ff:b1:6b:53:94:
da:96:c5:86:76:05:1b:74:c8:2b:fa:6e:60:68:6f:
ee:bb:06:dc:8b:fe:e3:00:30:4a:ca:ac:d3:0c:51:
56:4c:0a:68:06:ae:2d:82:7e:24:c0:8f:76:45:89:
6f:aa:4e:cb:96:7b:6b:73:2b:b2:fc:54:14:5f:d1:
d6:57:df:1b:9b:51:30:ab:2d:f1:4e:30:75:b7:c4:
5a:f4:ef:12:6d:0a:eb:84:e2:c1:47:e3:9c:d0:cf:
ad:29:40:47:99:f7:e8:2b:cd:ab:21:eb:e7:7a:3e:
80:46:08:f7:2e:b5:03:46:0b:5b:0c:57:1d:0f:88:
60:4d:33:f2:59:1f:8c:9c:bf:ec:b0:93:e1:8f:3f:
59:21:9b:d4:6a:1d:11:fc:09:65:12:74:cd:ae:9e:
4b:e2:0b:2a:6a:7b:c0:df:92:4f:15:94:08:15:67:
6e:53:b2:d6:67:10:71:fa:fa:67:e6:78:49:50:4d:
81:a7:2b:ca:4f:ff:48:05:df:14:de:db:e8:b0:cb:
24:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:3E:0C:0A:74:94:3D:5C:41:77:D0:48:AE:11:90:36:8C:12:22:64
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FEF6ACF458F911F18F05C7FECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.132.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:fa:78:37:2a:25:80:cc:2f:7e:dc:26:9b:4e:f8:d7:70:c8:
bc:13:25:cb:57:5b:23:06:e2:b1:07:03:81:d5:3a:15:e7:a2:
21:82:08:25:b8:36:06:bb:0d:8e:9d:95:25:38:bc:ec:ec:d5:
71:d6:54:91:87:9e:aa:a7:f5:65:ff:70:c9:fc:c3:5c:56:84:
68:5a:1e:b5:d2:1f:ee:c1:af:b2:17:e7:88:6d:85:8a:14:0f:
e0:21:7c:b0:c6:5e:a5:32:ca:94:28:8a:19:68:74:e9:ae:a7:
97:c3:f1:81:1b:96:1a:a9:ef:0b:d8:bb:00:58:85:09:d0:a2:
6e:0f:f9:2f:04:5d:60:1d:e7:52:be:99:9a:41:ae:de:18:c2:
e9:a1:e7:5a:ee:38:c0:32:a7:7f:0f:9f:d1:82:08:5c:ca:65:
ec:6c:f8:1a:5b:8e:63:6f:06:63:14:b4:9f:b6:da:29:6d:ea:
f4:dd:12:37:85:73:77:52:22:cc:29:90:e2:ee:f5:88:8c:5b:
f4:ae:23:13:0b:8b:66:6e:c7:b7:cc:db:a9:07:35:3e:2b:6d:
d8:e0:3c:2f:f0:14:4c:ed:24:3b:4e:46:86:14:bd:7d:be:00:
cd:98:9e:de:83:e5:9c:7e:f5:2a:40:70:10:97:3f:96:f7:0c:
52:3d:44:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:14:02 2026 by rpki-client