Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3E3E9CC6491B11F1828487ECCE1D38B0.roa
File: 3E3E9CC6491B11F1828487ECCE1D38B0.roa (raw, json)
Hash identifier: 2lXUU6L8OacI8DEoFzTMwxknZK2vBFnJw6VfO+fAd1I=
Subject key identifier: 9E:43:5B:4B:2D:A8:40:74:43:EF:DE:F7:E4:A9:72:AF:3C:B9:CD:6B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B19E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3E3E9CC6491B11F1828487ECCE1D38B0.roa
Signing time: Wed 06 May 2026 07:14:39 +0000
ROA not before: Wed 06 May 2026 07:14:34 +0000
ROA not after: Sun 07 Jun 2026 07:14:34 +0000
asID: 147176
IP address blocks: 45.201.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111006 (0x1b19e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 6 07:14:34 2026 GMT
Not After : Jun 7 07:14:34 2026 GMT
Subject: CN=69faea5e-fc04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9d:7b:f5:53:15:bf:f1:66:31:e1:6a:f2:46:
a0:48:32:59:63:69:23:c6:67:c5:91:dc:1c:31:d0:
02:64:33:04:a3:a9:fb:e0:ac:3e:14:91:01:76:19:
c3:c9:fa:a3:c7:b3:8f:66:83:cc:19:9b:09:49:6d:
06:be:32:97:ad:50:32:99:5c:48:75:46:3e:47:65:
f2:a0:52:93:65:aa:84:71:ae:74:81:20:2e:f8:41:
b8:1e:73:03:94:03:0b:49:cf:42:b0:34:cc:af:eb:
91:ae:b4:92:0d:13:52:d8:fd:29:1e:b6:df:72:eb:
ab:3a:31:86:f8:2e:04:5c:7c:10:a1:8c:b5:3b:65:
75:4d:55:43:73:7a:cd:98:40:6e:aa:52:83:21:95:
9a:34:30:86:19:8f:0d:70:e0:c6:91:de:9d:b7:2f:
22:35:07:e7:34:6e:41:7b:38:5a:4d:a1:4f:bf:f7:
b1:6c:e1:c9:e6:d6:8d:3e:c2:53:8d:f1:48:e1:28:
41:33:10:2d:65:83:78:26:fd:bd:21:d3:66:eb:99:
80:0a:ae:1b:32:98:4d:36:e5:01:89:25:cc:db:81:
89:0d:23:2c:7d:d5:eb:90:2d:48:fc:4d:d8:2b:24:
0e:df:4e:61:6a:25:cb:fb:e6:11:6b:48:54:9b:2b:
5c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:43:5B:4B:2D:A8:40:74:43:EF:DE:F7:E4:A9:72:AF:3C:B9:CD:6B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/3E3E9CC6491B11F1828487ECCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.27.0/24
Signature Algorithm: sha256WithRSAEncryption
45:18:ba:f8:98:29:83:c1:98:a3:c7:2e:57:ab:97:c5:8b:8c:
2e:84:0d:f7:2a:9a:19:47:e4:91:a4:8f:04:f0:42:e2:c6:63:
c5:26:71:46:e2:2b:a5:9d:f9:62:8e:ed:fd:b3:51:ea:ac:a1:
83:d8:9c:47:5a:19:e9:ef:05:58:e9:79:bf:19:6e:bf:57:b5:
06:f4:ca:89:e0:5a:9c:c4:80:06:ab:e1:b3:fc:5c:74:dc:1f:
4a:4d:93:d8:99:02:5c:63:5a:f8:be:9c:0f:2f:5b:eb:28:a8:
37:16:e3:a3:36:f0:65:e0:84:de:e5:c5:e2:b0:83:6c:1f:7e:
ee:72:eb:06:03:36:82:f8:7c:0f:60:62:84:7d:7c:a3:5a:91:
9b:7b:27:6a:4a:97:2f:16:dd:60:dd:01:75:d6:c7:81:8a:9b:
3d:d0:3d:71:45:17:f4:6a:94:7a:ac:22:cd:a6:4c:98:36:0a:
10:ba:46:38:37:7d:47:5a:f1:6f:ad:aa:a3:ee:5b:ee:d0:c8:
f0:67:bf:85:14:71:23:eb:38:b6:4e:47:e3:cf:fe:8c:b5:7b:
b5:94:9b:75:f6:14:59:01:25:e1:88:02:23:8e:d1:62:e1:ae:
06:bb:92:91:63:e1:6f:dc:d5:89:0a:d1:a4:87:3f:64:66:54:
99:fe:e9:80
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAbGeMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNTA2MDcxNDM0WhcNMjYwNjA3MDcxNDM0WjAYMRYw
FAYDVQQDEw02OWZhZWE1ZS1mYzA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAzJ179VMVv/FmMeFq8kagSDJZY2kjxmfFkdwcMdACZDMEo6n74Kw+FJEB
dhnDyfqjx7OPZoPMGZsJSW0GvjKXrVAymVxIdUY+R2XyoFKTZaqEca50gSAu+EG4
HnMDlAMLSc9CsDTMr+uRrrSSDRNS2P0pHrbfcuurOjGG+C4EXHwQoYy1O2V1TVVD
c3rNmEBuqlKDIZWaNDCGGY8NcODGkd6dty8iNQfnNG5BezhaTaFPv/exbOHJ5taN
PsJTjfFI4ShBMxAtZYN4Jv29IdNm65mACq4bMphNNuUBiSXM24GJDSMsfdXrkC1I
/E3YKyQO305haiXL++YRa0hUmytcNQIDAQABo4ICojCCAp4wHQYDVR0OBBYEFJ5D
W0stqEB0Q+/e9+Spcq88uc1rMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8zRTNFOUNDNjQ5MUIxMUYxODI4NDg3RUNDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALckbMA0GCSqGSIb3DQEBCwUA
A4IBAQBFGLr4mCmDwZijxy5Xq5fFi4wuhA33KpoZR+SRpI8E8ELixmPFJnFG4iul
nfliju39s1HqrKGD2JxHWhnp7wVY6Xm/GW6/V7UG9MqJ4FqcxIAGq+Gz/Fx03B9K
TZPYmQJcY1r4vpwPL1vrKKg3FuOjNvBl4ITe5cXisINsH37ucusGAzaC+HwPYGKE
fXyjWpGbeydqSpcvFt1g3QF11seBips90D1xRRf0apR6rCLNpkyYNgoQukY4N31H
WvFvraqj7lvu0MjwZ7+FFHEj6zi2Tkfjz/6MtXu1lJt19hRZASXhiAIjjtFi4a4G
u5KRY+Fv3NWJCtGkhz9kZlSZ/umA
-----END CERTIFICATE-----
Generated at Wed May 13 10:10:23 2026 by rpki-client