Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/646967844C7011F19A3184ACCE1D38B0.roa
File: 646967844C7011F19A3184ACCE1D38B0.roa (raw, json)
Hash identifier: S6Ji9jIIYOkOZtsFnvrYmYSNCPRx27cAgdrSkn5pyMI=
Subject key identifier: 9E:1D:97:34:55:66:96:23:D6:28:8E:8D:AF:ED:78:E6:6C:27:13:7A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B359
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/646967844C7011F19A3184ACCE1D38B0.roa
Signing time: Sun 10 May 2026 13:01:43 +0000
ROA not before: Sun 10 May 2026 13:01:38 +0000
ROA not after: Mon 17 May 2027 13:01:38 +0000
asID: 133448
IP address blocks: 45.204.19.0/24 maxlen: 24
45.204.22.0/24 maxlen: 24
45.204.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111449 (0x1b359)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 10 13:01:38 2026 GMT
Not After : May 17 13:01:38 2027 GMT
Subject: CN=6a0081b7-1575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:65:2f:6f:3a:35:5a:ea:4f:02:f8:48:01:8e:
c3:79:f8:15:81:61:12:b6:96:1a:49:a1:8a:bd:7a:
1d:9a:57:7d:71:0e:d6:60:47:16:fb:b6:d8:11:41:
03:71:07:27:41:0e:18:17:41:d0:d2:3c:e6:b0:9a:
57:da:cb:c4:52:01:30:b0:6e:c1:80:d3:4f:db:c9:
65:f1:64:2f:f1:4d:28:09:2b:41:ad:b9:7e:81:6f:
95:fa:d1:3d:4d:b5:94:6d:42:77:05:ed:36:71:a9:
7c:48:64:a9:be:76:4a:79:6f:57:ad:97:ed:9e:0b:
2a:bd:1d:48:f9:b9:93:ea:63:db:a4:75:07:6b:95:
4d:89:ff:08:7e:02:74:e2:3e:6a:f7:25:4b:e2:8d:
bf:bc:d0:39:e9:49:50:6a:84:3f:91:06:f1:48:24:
10:61:cc:f7:57:b9:57:41:a0:f4:ab:5c:35:54:4c:
25:f8:7e:fc:ea:1d:85:39:98:86:dd:60:12:4f:ad:
10:01:61:57:59:b4:da:d8:19:10:02:61:ef:c4:f0:
a6:bd:3c:cb:e3:0b:46:3c:3f:e1:bf:7a:80:79:bc:
aa:4d:8d:eb:5e:e1:1c:8d:d3:23:12:93:2b:92:cd:
d3:a5:d7:8f:17:ea:b0:bc:bf:96:09:0b:5c:de:27:
f5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:1D:97:34:55:66:96:23:D6:28:8E:8D:AF:ED:78:E6:6C:27:13:7A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/646967844C7011F19A3184ACCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.19.0/24
45.204.22.0/23
Signature Algorithm: sha256WithRSAEncryption
85:f6:b4:4c:89:8b:85:86:05:86:2a:d6:ac:58:6f:23:33:8e:
82:77:2b:6a:07:58:e1:49:82:8b:14:82:8c:6d:3a:f3:ea:34:
fd:5e:59:25:0f:5a:38:93:4b:48:f0:8c:fd:6e:19:77:a4:f6:
79:33:e9:00:e5:a0:c5:f4:37:0a:ef:0e:da:57:b6:6c:7b:fd:
93:38:0d:e2:24:02:3a:5f:99:a8:ab:00:b8:84:f2:f8:c2:92:
bd:31:70:f3:30:5e:9d:1c:9d:5a:6f:8e:18:0d:ac:ca:f7:78:
a1:87:38:cd:58:2a:83:e1:e5:e2:42:63:05:47:2e:07:96:25:
d6:ee:ea:43:b1:ed:dc:df:bb:c2:d8:d6:bd:e1:6f:ac:45:b2:
c9:4e:59:32:c1:d8:df:06:20:ec:c8:a6:64:2a:d7:43:0a:df:
9c:5e:52:7b:5e:09:f9:cd:5a:af:10:ca:1d:a8:42:04:ff:dc:
bd:ec:be:3b:5c:0f:67:b3:53:a1:88:e6:86:1d:7f:3c:48:ff:
96:35:a1:c0:82:5b:72:f9:da:bb:e0:e3:3f:7c:eb:b2:90:e1:
9a:4f:8c:41:85:2c:13:e8:c1:20:3a:d4:1e:83:f1:23:0b:d7:
85:36:6c:83:7e:c9:b3:a3:c4:a7:76:da:2d:84:f9:2f:cd:50:
e6:2f:90:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:04:19 2026 by rpki-client