Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9E9BE96E841411F1A97FE7D2CE1D38B0.roa
File: 9E9BE96E841411F1A97FE7D2CE1D38B0.roa (raw, json)
Hash identifier: FBXHsHQtOaNN3X8cBlI2WK/fPHO3qzKtQKiX3VJaCHs=
Subject key identifier: E3:12:B6:B2:CF:68:D6:B9:17:5B:24:19:0D:96:E8:F9:48:87:19:1A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C642
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9E9BE96E841411F1A97FE7D2CE1D38B0.roa
Signing time: Mon 20 Jul 2026 08:25:52 +0000
ROA not before: Mon 20 Jul 2026 08:25:48 +0000
ROA not after: Thu 27 Aug 2026 08:25:48 +0000
asID: 984
IP address blocks: 45.196.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 16:17:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116290 (0x1c642)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 20 08:25:48 2026 GMT
Not After : Aug 27 08:25:48 2026 GMT
Subject: CN=6a5ddb90-d890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:1e:d8:6f:81:b9:4a:0e:54:17:54:91:59:78:
37:b7:f6:3c:52:58:21:cf:b5:6d:06:8e:81:e9:d4:
95:28:e1:a3:b7:a1:eb:a0:64:81:fc:3e:9e:92:27:
f5:27:a7:e2:be:84:42:c8:68:1e:6d:9d:30:bd:00:
81:fd:17:1a:37:ba:d1:28:a9:e6:52:e7:2f:b9:b9:
ea:02:f4:2a:eb:1f:d5:7f:38:3c:bf:02:67:fd:aa:
24:be:d5:e5:0d:84:dd:5b:5e:c9:e6:3b:ef:9f:29:
c1:15:40:e8:cd:92:4a:33:49:fa:99:ca:78:14:ba:
4e:09:58:a5:cc:13:25:3a:e1:80:86:9f:0a:8a:0d:
4e:85:4c:f5:8b:18:cd:0d:20:3c:11:11:42:e2:f1:
65:12:d1:2c:bc:aa:4d:25:60:08:26:a7:91:83:ec:
74:ca:2f:d3:ff:b7:e7:7d:da:9c:b3:4c:70:82:5d:
1f:35:ba:a0:02:3f:6f:ff:5b:6c:bf:f7:6f:0d:09:
57:4b:05:21:ff:2b:3a:44:bc:57:73:ec:08:df:6d:
b7:c9:73:8b:b0:9a:4b:b6:4e:8f:20:39:b3:58:37:
c4:f3:6c:2b:39:dd:8e:ee:2e:e3:44:23:d8:ec:e7:
74:b1:91:7d:10:2f:08:d5:0b:4d:9a:92:5b:a6:26:
ea:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:12:B6:B2:CF:68:D6:B9:17:5B:24:19:0D:96:E8:F9:48:87:19:1A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9E9BE96E841411F1A97FE7D2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.165.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:dc:74:69:dc:85:38:13:01:bc:73:33:87:86:0e:86:e1:a2:
77:ee:4c:2c:56:bc:ed:ec:e0:ed:58:71:f5:b1:24:96:42:c5:
fc:08:89:6a:72:f8:fb:21:48:c7:8e:eb:81:68:d1:19:a4:a6:
89:1d:2d:5a:d4:f8:d4:f1:99:80:8b:79:3c:72:3a:3d:eb:db:
e8:84:bb:bb:fe:68:b2:40:31:e0:13:16:af:1f:90:98:1a:b3:
40:fb:b1:89:e1:e4:0f:d4:d5:68:e2:0b:3a:c0:4c:b4:1d:ac:
da:cc:1e:48:86:a7:b2:3a:32:f7:2c:94:fc:4b:73:ef:9f:dd:
4b:cd:51:24:44:1a:a8:dc:be:4f:3d:23:b9:21:35:fd:e8:6e:
63:67:9f:54:37:8b:bf:8e:d0:fc:f3:95:a6:27:c2:37:7b:51:
ef:0d:11:11:64:47:af:b0:7c:87:bd:a9:fc:ce:f2:8a:57:53:
8c:e5:35:4f:e6:4b:92:3e:2a:b1:b3:d5:ce:a9:98:e1:22:6c:
c4:f9:c6:ab:44:c4:23:f9:d4:cb:66:e5:d5:3c:98:0b:2f:f8:
01:33:e2:3e:c8:01:69:1d:5e:4c:70:89:a9:e0:30:bb:b6:dc:
d5:62:aa:4f:4e:25:c8:6c:75:40:2c:8c:1b:5a:18:07:0e:ab:
71:bb:04:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:11:56 2026 by rpki-client