Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0B9739EE4ACF11F1B7A4DEC8CE1D38B0.roa
File: 0B9739EE4ACF11F1B7A4DEC8CE1D38B0.roa (raw, json)
Hash identifier: vPKSWin3SSPgwsv4ufo5lj4a2hbkeNQcEzEfmCUmnsk=
Subject key identifier: A7:12:FC:99:0C:D2:F0:46:15:AD:83:31:A6:4D:E5:AA:60:44:AF:EB
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B2DD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0B9739EE4ACF11F1B7A4DEC8CE1D38B0.roa
Signing time: Fri 08 May 2026 11:14:14 +0000
ROA not before: Fri 08 May 2026 11:14:08 +0000
ROA not after: Sun 14 Jun 2026 11:14:08 +0000
asID: 212238
IP address blocks: 45.192.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111325 (0x1b2dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 8 11:14:08 2026 GMT
Not After : Jun 14 11:14:08 2026 GMT
Subject: CN=69fdc586-39cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:5e:eb:ab:27:42:30:c2:11:28:72:42:e1:e5:
6b:fa:6d:49:e8:34:f3:fb:e6:52:62:be:99:66:0b:
78:74:6e:47:85:11:8f:46:dc:e9:58:5a:e3:33:45:
44:49:9a:b7:45:b7:fb:8e:6c:f3:7f:d5:d8:04:ac:
ca:a4:fa:fa:a7:17:55:20:8b:10:66:3c:74:26:3a:
57:2d:9a:6f:fc:05:b9:b8:1d:e9:e7:f2:c1:a0:ba:
29:eb:83:db:86:5a:85:54:b4:8c:ab:50:67:14:fb:
22:cb:d1:5c:8e:30:45:e0:dc:cb:23:1d:f2:39:5f:
57:c9:7c:db:ca:14:cb:85:43:c6:9d:27:eb:04:80:
b0:ed:b2:d3:f8:bb:9e:f6:7a:76:e9:f7:b1:f0:47:
5c:99:8c:bf:3a:89:44:8e:f8:21:6a:b4:5b:2a:14:
44:50:7b:cd:f5:29:cf:d8:9c:b7:61:cd:c1:b4:af:
cf:51:77:b6:9c:ee:07:fd:b5:74:6d:47:34:da:23:
c9:b1:35:98:5c:35:c7:8b:75:73:01:5d:64:bd:02:
54:66:c1:56:97:8e:c6:4f:0d:61:20:7c:1e:47:95:
74:52:9a:19:03:24:a3:46:18:ef:b1:bb:ab:f9:ef:
a3:40:e5:93:e6:69:06:5d:6b:5e:3d:c0:36:78:be:
6f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:12:FC:99:0C:D2:F0:46:15:AD:83:31:A6:4D:E5:AA:60:44:AF:EB
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0B9739EE4ACF11F1B7A4DEC8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.245.0/24
Signature Algorithm: sha256WithRSAEncryption
84:41:59:12:da:bf:87:92:7e:a3:6a:3d:7b:b5:c7:2a:de:2b:
7e:12:ce:46:b0:d2:a9:9d:dd:3c:06:c8:d2:7d:98:33:b2:dc:
5b:6b:de:94:22:bb:c8:76:4f:a0:04:81:3f:eb:f3:03:e0:16:
d5:99:09:39:16:68:fc:b7:0b:8b:5f:48:54:e1:51:a6:d1:ea:
0e:49:46:a9:e6:fa:46:32:1d:97:46:ad:65:6f:10:07:38:d9:
10:77:aa:21:f4:88:33:2c:d9:67:5a:3b:3f:ac:48:08:99:da:
a4:e0:d9:74:39:f9:c8:02:96:c4:1c:4e:4f:8c:15:6c:c0:62:
a9:e1:5e:8a:2c:b0:6f:91:d7:41:20:01:81:00:ab:1d:59:eb:
f4:e9:bf:75:f9:cd:62:80:f8:32:bb:5f:f9:ae:4f:9f:a2:ac:
a6:62:5a:d3:e0:cf:02:09:b5:40:65:58:c5:3d:f9:ea:0f:09:
3a:0b:ea:e7:0a:8a:72:52:19:20:fe:b5:da:aa:6f:be:d1:09:
02:ff:85:52:7b:8c:08:c3:2d:04:a4:c7:19:d8:79:ac:5e:4f:
06:c8:a4:81:20:70:1e:00:a1:99:25:84:d7:fd:3d:02:1d:5c:
0f:be:d1:78:f4:69:7d:f3:db:76:59:92:61:b3:d1:a3:09:92:
53:76:aa:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:38:08 2026 by rpki-client