Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/06A0EA6A1D2611F193911DBEDAE4EC9C.roa
File: 06A0EA6A1D2611F193911DBEDAE4EC9C.roa (raw, json)
Hash identifier: k46bwZ3YUrPZfQatxyTnXaPLM33oBAPmm4Nxb1Xh4Dk=
Subject key identifier: 51:FB:8F:D1:0D:A2:30:90:07:AF:54:E2:42:6D:8F:97:AE:41:66:48
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01A421
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/06A0EA6A1D2611F193911DBEDAE4EC9C.roa
Signing time: Wed 11 Mar 2026 08:40:59 +0000
ROA not before: Wed 11 Mar 2026 08:40:54 +0000
ROA not after: Mon 20 Apr 2026 08:40:54 +0000
asID: 133180
IP address blocks: 45.192.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 27 Mar 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 107553 (0x1a421)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Mar 11 08:40:54 2026 GMT
Not After : Apr 20 08:40:54 2026 GMT
Subject: CN=69b12a9b-b598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ce:c8:0c:cf:03:cc:ba:66:ad:68:2c:86:09:
94:de:c4:85:28:f0:78:99:1c:4c:dd:27:32:60:25:
1b:ce:ad:55:87:c2:92:bb:bc:c5:ba:bf:71:40:a9:
75:ac:31:b6:05:d5:fb:66:bf:4b:1a:d9:de:2e:04:
91:94:24:97:35:0b:b6:ff:4b:fa:57:c0:31:da:07:
0d:8d:2c:e1:fe:00:c1:6d:69:8c:80:49:65:c3:df:
75:d4:66:18:56:00:9f:71:6f:83:2c:6d:2d:0a:ea:
25:c9:0a:ea:a0:68:84:0b:a9:e6:27:64:ba:68:6b:
98:2c:98:c6:fa:d2:d4:03:00:08:e4:cd:e4:fb:0c:
9f:ff:3a:12:87:5b:65:e1:f1:c3:fc:0c:51:ea:f6:
9a:3e:af:2a:b5:fc:e2:bb:2c:75:1e:43:2a:bf:b0:
c0:9c:46:d8:86:dc:8a:f6:a0:d5:15:ef:7c:08:19:
61:60:af:43:b6:0a:f7:1c:3a:72:72:98:90:25:16:
e2:91:b6:8a:6c:4a:12:6e:d3:91:37:5c:5b:25:03:
37:9b:c5:b0:7f:23:ae:82:38:03:e0:06:98:3e:12:
00:69:19:ec:7c:3f:4d:7b:88:46:57:a8:49:97:93:
a0:0c:86:81:1c:12:fa:54:17:b7:b9:92:06:5b:f3:
12:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:FB:8F:D1:0D:A2:30:90:07:AF:54:E2:42:6D:8F:97:AE:41:66:48
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/06A0EA6A1D2611F193911DBEDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.2.0/24
Signature Algorithm: sha256WithRSAEncryption
06:5e:77:95:f7:26:92:43:43:ac:b8:ea:d1:bf:9b:16:d2:0d:
72:87:e8:f3:a1:87:b0:29:4a:73:31:0c:65:84:19:3f:2e:e2:
03:9f:0b:44:6d:c1:17:86:d0:ec:a7:7f:a4:97:db:0b:e2:e2:
44:fa:ba:68:c9:ea:41:aa:02:7b:06:9a:e6:af:eb:57:74:bd:
4a:00:ed:4f:8e:9b:c4:d0:2e:a3:b9:bd:95:86:7f:83:9a:5f:
27:9a:6d:28:10:04:a4:1b:30:8a:6b:d2:e4:50:e8:5b:ce:7c:
b6:84:87:9c:87:2f:8b:a6:bd:5a:0f:75:5a:03:54:86:ff:d2:
f0:ca:d5:c7:6c:14:ba:54:fd:74:9a:f5:76:7a:83:13:b2:e5:
4a:1c:e9:a4:0b:03:81:82:85:5d:55:5c:8e:d0:c2:f4:9f:69:
54:48:57:f2:f9:b6:52:7b:60:62:4b:aa:a0:9b:f1:34:5f:69:
43:aa:da:93:1d:3b:54:c8:86:91:df:61:94:67:14:78:38:49:
a8:1e:20:3b:27:84:17:dc:88:79:c0:cd:ab:b2:17:ed:6f:96:
57:3d:b8:0d:49:4b:d2:51:71:8a:58:af:0d:dd:81:df:10:5c:
7f:da:87:b3:03:e7:81:d8:2b:86:73:21:d7:90:45:47:9e:7a:
b4:78:88:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:15:26 2026 by rpki-client