Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/54BDA60E49F711F1907B8EA7CE1D38B0.roa
File: 54BDA60E49F711F1907B8EA7CE1D38B0.roa (raw, json)
Hash identifier: Vl8mCDwA05fKuixSlFNAUHzPhYpfElunFr0sHE8PB/M=
Subject key identifier: 80:8A:EA:FF:C0:6A:4B:68:53:C7:2F:7C:EB:3E:E9:E8:D7:9E:C4:69
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B228
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/54BDA60E49F711F1907B8EA7CE1D38B0.roa
Signing time: Thu 07 May 2026 09:30:06 +0000
ROA not before: Thu 07 May 2026 09:30:00 +0000
ROA not after: Sun 21 Jun 2026 09:30:00 +0000
asID: 32043
IP address blocks: 45.197.168.0/22 maxlen: 24
45.203.48.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111144 (0x1b228)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 7 09:30:00 2026 GMT
Not After : Jun 21 09:30:00 2026 GMT
Subject: CN=69fc5b9d-44f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7b:e2:e7:3c:9c:4f:d6:dc:02:27:ed:ff:45:
9e:39:b1:9f:b6:0e:f9:46:d8:dd:3b:8a:be:70:77:
0b:16:c2:50:d4:3e:86:4e:90:71:60:02:0f:b0:d0:
2a:4c:fc:28:93:93:67:ce:f2:ff:ed:15:b8:39:f9:
92:ec:1e:06:08:84:dc:09:79:9c:fd:02:a6:29:e7:
f2:cf:fd:24:de:8a:e4:0c:01:09:6f:73:05:0d:2e:
00:de:a7:38:e9:ab:17:72:d3:63:e7:80:b2:b7:06:
79:5d:f4:5c:5e:5b:e7:48:b5:fa:58:a8:24:4d:f2:
7c:ef:0d:32:21:05:1e:9d:7a:25:61:5e:b1:24:f8:
eb:e9:1d:c6:5b:f1:9d:1d:fc:97:41:1b:9c:bd:cf:
60:eb:37:83:23:11:4e:49:40:a2:b3:0e:b6:ab:71:
ac:f8:a7:8b:4b:a2:91:89:5b:72:a1:a8:a8:a1:98:
9f:01:c2:a0:fb:5a:6f:1c:dc:4c:5f:c5:77:16:7d:
c8:49:55:a5:17:7c:7c:2d:ac:8e:f6:0b:2a:c0:ef:
c9:0a:a5:65:3d:51:b9:ca:ee:73:d6:55:db:93:31:
61:cf:79:84:e6:a1:24:2f:16:8a:5f:3d:82:83:0d:
c3:92:54:d7:e3:12:cb:a5:59:36:aa:f7:58:6b:a0:
90:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:8A:EA:FF:C0:6A:4B:68:53:C7:2F:7C:EB:3E:E9:E8:D7:9E:C4:69
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/54BDA60E49F711F1907B8EA7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.168.0/22
45.203.48.0/22
Signature Algorithm: sha256WithRSAEncryption
45:7e:91:03:55:37:a2:7b:29:69:ae:fb:b5:ee:90:24:25:e5:
42:1c:23:0b:c2:81:ee:5d:02:e2:2a:ba:96:af:8b:a7:0e:0b:
4d:c2:9d:91:28:2c:18:e6:07:96:9c:ee:14:24:0d:0a:48:8e:
57:37:4c:85:04:1b:39:b7:f7:3e:b7:8e:d3:9c:53:0b:cf:90:
6b:ca:eb:3e:14:9e:70:d3:1b:34:2f:93:3f:84:69:83:1d:e4:
99:ac:ff:9d:fa:06:cb:87:46:d0:9e:2a:f2:e9:59:ad:b2:2e:
2c:af:5f:34:16:ce:38:d6:92:5a:a8:f5:09:7d:81:dc:d1:36:
68:ab:4c:01:88:a0:a9:bc:bf:e0:5f:83:24:3e:c8:f2:1d:ca:
95:6e:04:7e:ef:df:d0:36:c5:f5:f4:58:61:4b:d5:89:90:0a:
ad:8f:12:e7:cd:83:ee:28:f4:07:bd:c6:dd:bf:19:ec:21:c1:
6a:ed:ad:cc:5b:60:e1:55:ef:62:a9:82:bf:69:bc:ec:e0:47:
a8:15:f4:af:cd:0c:d2:81:25:b5:2e:97:d3:a5:4a:7c:6f:b9:
d7:1e:40:99:b4:31:5b:f3:8c:65:6d:68:2f:74:4f:a3:44:b6:
3c:19:b1:ae:91:82:07:8b:d7:fa:32:ff:59:1f:16:84:44:9b:
3f:45:bf:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:46:48 2026 by rpki-client