Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/830C9BD44E3211F19A41E7D5CE1D38B0.roa
File: 830C9BD44E3211F19A41E7D5CE1D38B0.roa (raw, json)
Hash identifier: Q4W5yfoiSwBvttkC7qcsbqwsRXjGsnn1yk0f5QSitog=
Subject key identifier: E2:32:6C:C1:0B:16:33:EC:5D:4E:98:19:81:74:C7:DB:40:62:39:71
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B3FF
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/830C9BD44E3211F19A41E7D5CE1D38B0.roa
Signing time: Tue 12 May 2026 18:43:48 +0000
ROA not before: Tue 12 May 2026 18:43:42 +0000
ROA not after: Wed 17 Jun 2026 18:43:42 +0000
asID: 139613
IP address blocks: 45.195.199.0/24 maxlen: 24
45.197.20.0/24 maxlen: 24
45.199.130.0/24 maxlen: 24
45.199.131.0/24 maxlen: 24
45.199.134.0/24 maxlen: 24
45.199.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111615 (0x1b3ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 12 18:43:42 2026 GMT
Not After : Jun 17 18:43:42 2026 GMT
Subject: CN=6a0374e4-8949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:11:ca:ac:68:de:f3:15:6b:6f:7e:9f:15:b1:
5e:ea:4a:d2:d0:a1:a6:ce:a3:c3:a7:40:d5:78:6b:
af:04:a2:b2:e8:65:c3:2e:7d:1e:72:96:0a:0e:0d:
5b:82:2f:db:a1:80:b6:17:f1:7b:32:3d:0f:27:e1:
75:6f:f6:09:77:1a:52:8f:58:7d:8f:2e:03:58:56:
0c:4a:e9:7a:02:74:6e:54:bc:7c:bd:2e:a5:ee:fa:
49:ce:79:ae:c6:4a:1b:83:dd:af:4d:a7:ef:d6:d9:
92:bd:c8:52:8a:5c:46:9f:40:0d:67:ee:d5:b5:0a:
01:4e:50:a0:65:b3:b9:07:be:26:10:b8:cb:3d:2c:
ae:83:7b:83:12:88:b1:79:66:1b:28:61:48:6a:52:
45:8b:3f:3e:2e:b2:75:7b:e3:a0:8b:9f:75:22:8e:
78:07:df:b0:9f:7f:b1:c5:ee:78:f8:a1:f9:a0:0e:
fc:fd:6f:ea:4e:fe:a7:e1:12:ba:c8:f1:0b:61:4d:
d6:86:52:bb:35:be:ed:be:73:d9:de:23:a3:8a:d8:
9c:41:01:46:d7:2c:60:70:92:62:d5:0b:2d:44:04:
24:73:e8:26:9f:91:26:94:8c:be:8b:c0:57:52:ba:
36:1a:c3:03:f1:1d:0a:b9:ed:84:c8:f0:1a:f9:6c:
4b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:32:6C:C1:0B:16:33:EC:5D:4E:98:19:81:74:C7:DB:40:62:39:71
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/830C9BD44E3211F19A41E7D5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.199.0/24
45.197.20.0/24
45.199.130.0/23
45.199.134.0/24
45.199.137.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:97:a5:1e:d8:c1:13:45:7e:ae:f0:93:35:a8:ac:ea:87:75:
32:ce:c3:c8:95:ce:f2:ff:69:ee:99:ba:e1:61:c8:5c:79:ae:
b7:aa:df:9f:6b:25:93:a4:f1:60:89:88:14:f2:fb:c5:7c:62:
cb:a9:5f:fc:e5:46:7a:a8:86:0c:10:49:c0:06:36:f4:bf:48:
2d:a8:7a:26:00:b8:7b:10:ea:e3:23:f4:44:88:95:12:1d:c5:
2b:a7:db:35:62:e8:08:08:73:98:eb:75:32:94:c5:56:96:d6:
af:b0:f1:bf:ec:f4:bc:d6:4f:e6:fe:f1:1c:46:17:5f:17:dc:
82:59:d4:d9:48:bf:f3:39:42:58:80:3e:67:50:d9:61:ae:92:
00:02:80:84:be:0a:1e:c8:4c:d5:54:27:00:cc:c3:a8:c6:f4:
ca:84:fc:c6:10:cd:2f:dd:42:51:f5:34:99:88:00:98:2d:ed:
cd:4b:61:11:d1:ae:a4:29:8b:2c:f7:96:37:3c:c9:4a:e2:1a:
4a:52:97:cb:1c:20:ba:28:2b:aa:31:9f:6c:7d:bd:e6:40:a8:
15:d8:6a:0f:26:b6:d0:03:55:7e:aa:17:80:2e:34:82:56:79:
15:a0:53:78:8b:84:cd:cf:4e:c5:29:d9:8f:cc:7e:11:14:2b:
7a:c5:e4:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:26:51 2026 by rpki-client