Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7F9D094645E211F19151B5D6CE1D38B0.roa
File: 7F9D094645E211F19151B5D6CE1D38B0.roa (raw, json)
Hash identifier: v+YC4LxTW88KmKNYlD4xt2pxKHgaOGDHTG7LyLHT9DY=
Subject key identifier: AF:B6:40:C1:38:24:DA:DF:CC:5D:8E:36:15:66:47:39:D5:03:86:C5
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B111
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7F9D094645E211F19151B5D6CE1D38B0.roa
Signing time: Sat 02 May 2026 04:50:53 +0000
ROA not before: Sat 02 May 2026 04:50:49 +0000
ROA not after: Tue 16 Jun 2026 04:50:49 +0000
asID: 63023
IP address blocks: 45.206.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110865 (0x1b111)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 2 04:50:49 2026 GMT
Not After : Jun 16 04:50:49 2026 GMT
Subject: CN=69f582ad-2b42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ee:40:de:46:f7:3e:dc:68:d8:ac:c2:b1:17:
9a:8c:ea:74:fb:28:ca:64:a9:ee:ea:42:19:d9:18:
95:5b:88:fe:92:55:38:9f:f0:e0:c7:16:64:2c:f4:
9e:ef:ef:3e:f7:0a:3d:85:c5:d0:07:f2:a6:52:aa:
a6:2d:b8:5b:e6:7e:3d:82:e1:9d:fd:a0:e5:03:a1:
0f:75:ae:08:d2:47:88:dc:fa:10:99:f0:77:3e:1b:
64:64:59:62:91:ce:04:94:3c:09:7c:1a:f4:ca:98:
08:78:54:09:df:2b:fc:06:bb:78:b6:c3:e4:d6:fc:
d0:80:b4:2c:89:e8:bb:2e:57:0e:6b:58:f4:77:e0:
4d:36:b9:c2:cc:5b:9e:b2:d7:3b:88:81:1c:e5:e1:
2f:31:3a:2f:1b:6d:f7:d2:51:b0:cb:a1:72:78:c7:
73:c5:bd:6f:be:a3:56:93:fb:5b:69:19:27:18:02:
85:a1:d2:65:a0:e9:f9:82:59:84:eb:9b:60:ce:89:
35:9e:02:90:21:93:81:10:f0:b1:97:db:ca:b2:97:
19:43:c8:ca:da:01:aa:cd:3b:17:a1:6a:f4:48:78:
5a:8e:be:26:ba:0b:07:73:fc:e1:21:5a:ad:1e:5c:
d8:7b:5d:6e:3b:49:fb:d9:1c:67:b2:89:9c:8d:45:
a1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:B6:40:C1:38:24:DA:DF:CC:5D:8E:36:15:66:47:39:D5:03:86:C5
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7F9D094645E211F19151B5D6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.0.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:6f:78:bc:28:54:80:50:04:ab:1d:0c:20:4a:79:4d:21:db:
5b:e1:d2:8c:e2:14:f7:2c:2a:63:e2:f3:29:2c:76:7b:8b:69:
f7:5d:3a:cb:30:3c:31:ab:39:23:ec:af:bc:2a:db:73:c5:d9:
b9:5b:ef:4c:c0:81:33:90:1a:00:9f:9d:e1:dc:78:05:90:15:
06:c8:19:8f:ab:de:bd:80:c6:91:7f:57:f2:66:64:49:e7:fa:
22:5b:7c:da:7b:7b:81:39:27:11:d6:c8:16:97:16:10:b6:fc:
eb:93:df:9f:f1:b7:3f:2e:15:ac:81:d3:8e:5f:66:45:e3:5e:
0c:e0:76:b6:cb:b7:41:17:60:04:bd:d5:38:af:46:89:a9:8a:
76:e5:80:2f:2b:f1:68:29:05:18:c0:b9:74:d6:e1:3a:09:f6:
f5:ef:e0:7a:b8:41:00:ab:6b:58:93:fa:01:81:ed:f6:cd:68:
ce:3b:53:bc:41:0f:38:d6:83:ab:f7:8d:05:08:72:68:79:e6:
fe:b8:8b:ff:8c:51:99:78:d1:0c:d8:e4:d7:96:95:35:02:d5:
d5:3f:6e:5b:27:54:30:bc:7d:65:c1:bb:d0:89:90:23:98:2d:
7a:af:3f:8c:64:cb:01:d9:68:24:d6:65:01:6d:fb:bb:e7:74:
a8:f6:90:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:14:58 2026 by rpki-client