Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1FE026BC4C8811F18C11F5B9CE1D38B0.roa
File: 1FE026BC4C8811F18C11F5B9CE1D38B0.roa (raw, json)
Hash identifier: rCQW+tlqizHpzKMT4kaLfGkuVceSgaYeJiSqrk0PlD0=
Subject key identifier: F0:12:2F:57:7A:BA:A7:F3:B0:2F:11:40:01:B9:DD:9C:1B:A5:19:16
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B369
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1FE026BC4C8811F18C11F5B9CE1D38B0.roa
Signing time: Sun 10 May 2026 15:51:36 +0000
ROA not before: Sun 10 May 2026 15:51:31 +0000
ROA not after: Wed 10 Jun 2026 15:51:31 +0000
asID: 216211
IP address blocks: 45.192.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111465 (0x1b369)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 10 15:51:31 2026 GMT
Not After : Jun 10 15:51:31 2026 GMT
Subject: CN=6a00a988-3ce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:09:91:a1:36:c2:5c:21:78:61:34:2a:33:59:
6e:0f:b6:5d:81:fe:3d:e0:c3:3b:c6:39:fe:c2:80:
af:e5:22:68:0b:f0:c1:88:52:43:14:66:c3:a0:3b:
a3:05:48:36:14:d7:03:26:03:00:50:a6:2b:22:e1:
3c:6d:bf:55:30:e1:d8:79:ca:c6:cc:59:40:5e:7a:
b7:f4:d7:49:b9:14:cb:19:97:0e:54:21:bd:e6:62:
83:c4:3e:53:36:49:39:69:33:fd:80:3b:06:cd:bd:
48:e8:a1:68:2a:08:dd:e8:21:b0:97:b6:55:d2:aa:
0e:1f:db:f3:da:70:70:42:4e:d3:9a:ed:a3:4f:35:
bd:50:ee:6e:f3:9b:59:73:7f:3a:9d:0d:29:f3:65:
42:04:04:b7:11:3b:65:10:08:52:5a:61:a3:a9:90:
f0:02:b8:6d:d7:43:2f:e5:61:4b:c1:7d:81:28:c6:
f1:f4:28:c4:72:98:e6:c2:0a:82:8b:34:48:30:b0:
1b:32:6e:22:d7:93:90:8d:38:f5:4d:3e:82:6d:62:
79:c1:1a:2f:c9:3c:a5:55:38:08:2f:16:91:c8:12:
ff:0a:64:3f:39:d2:4a:35:21:1b:ea:4c:04:41:8b:
a9:0d:e1:31:48:c2:03:cd:66:84:6e:0e:d2:5f:ff:
03:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:12:2F:57:7A:BA:A7:F3:B0:2F:11:40:01:B9:DD:9C:1B:A5:19:16
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1FE026BC4C8811F18C11F5B9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.241.0/24
Signature Algorithm: sha256WithRSAEncryption
88:37:00:da:3c:3c:79:8b:3c:24:27:f3:1e:57:72:69:4a:79:
d0:f0:e4:89:cc:7a:54:30:7a:04:c0:58:7c:a5:66:76:a8:ba:
74:e1:b9:e6:a0:e8:e7:3a:86:3e:f3:82:3c:42:87:27:36:c2:
2e:e7:90:32:5f:01:bf:a3:5b:62:87:6d:63:25:cc:0c:2e:68:
3d:29:6c:45:32:40:c1:ae:fa:45:67:f3:55:ea:c5:e3:e6:57:
85:6d:57:ad:56:e8:ba:97:22:1d:2e:fa:5c:91:62:91:e1:b7:
91:0e:f8:84:83:0a:a3:97:7b:2c:58:2d:cf:9e:f8:10:f4:f9:
30:20:0f:56:f4:ca:2f:06:41:20:f2:42:70:a0:6d:10:10:2d:
d1:c9:30:05:3a:43:54:ee:14:a7:5b:a3:6f:f9:7e:ba:fe:d5:
ca:9e:54:3f:a8:f4:5f:fb:1d:80:26:0f:67:06:4c:13:78:f6:
4b:b0:83:0b:a1:1a:0c:ef:f2:06:81:26:e7:13:ff:ec:dc:05:
80:e8:56:8e:dd:e2:29:d8:bd:1b:a6:14:76:04:1d:7e:0b:6d:
6c:c2:7a:de:89:32:ec:ec:dd:21:f6:eb:5a:56:3d:f7:7e:5a:
d0:70:9d:c8:36:3f:99:33:cc:e5:28:9b:c4:6f:2d:5b:8d:8b:
51:d8:b9:60
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAbNpMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNTEwMTU1MTMxWhcNMjYwNjEwMTU1MTMxWjAYMRYw
FAYDVQQDEw02YTAwYTk4OC0zY2U0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAxAmRoTbCXCF4YTQqM1luD7Zdgf494MM7xjn+woCv5SJoC/DBiFJDFGbD
oDujBUg2FNcDJgMAUKYrIuE8bb9VMOHYecrGzFlAXnq39NdJuRTLGZcOVCG95mKD
xD5TNkk5aTP9gDsGzb1I6KFoKgjd6CGwl7ZV0qoOH9vz2nBwQk7Tmu2jTzW9UO5u
85tZc386nQ0p82VCBAS3ETtlEAhSWmGjqZDwArht10Mv5WFLwX2BKMbx9CjEcpjm
wgqCizRIMLAbMm4i15OQjTj1TT6CbWJ5wRovyTylVTgILxaRyBL/CmQ/OdJKNSEb
6kwEQYupDeExSMIDzWaEbg7SX/8D0QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFPAS
L1d6uqfzsC8RQAG53ZwbpRkWMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8xRkUwMjZCQzRDODgxMUYxOEMxMUY1QjlDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcDxMA0GCSqGSIb3DQEBCwUA
A4IBAQCINwDaPDx5izwkJ/MeV3JpSnnQ8OSJzHpUMHoEwFh8pWZ2qLp04bnmoOjn
OoY+84I8QocnNsIu55AyXwG/o1tih21jJcwMLmg9KWxFMkDBrvpFZ/NV6sXj5leF
bVetVui6lyIdLvpckWKR4beRDviEgwqjl3ssWC3PnvgQ9PkwIA9W9MovBkEg8kJw
oG0QEC3RyTAFOkNU7hSnW6Nv+X66/tXKnlQ/qPRf+x2AJg9nBkwTePZLsIMLoRoM
7/IGgSbnE//s3AWA6FaO3eIp2L0bphR2BB1+C21swnreiTLs7N0h9utaVj33flrQ
cJ3INj+ZM8zlKJvEby1bjYtR2Llg
-----END CERTIFICATE-----
Generated at Wed May 13 11:58:46 2026 by rpki-client