Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C8A56AD4423B11F1A7509018CF1D38B0.roa
File: C8A56AD4423B11F1A7509018CF1D38B0.roa (raw, json)
Hash identifier: xNOpJUjJ6VMm9t6cs0VcqbdfRY5fxpS+bcLqXZpZh3Y=
Subject key identifier: 71:EA:91:11:25:60:52:4A:9A:12:71:33:17:4B:38:B5:01:EA:E5:86
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01AF72
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C8A56AD4423B11F1A7509018CF1D38B0.roa
Signing time: Mon 27 Apr 2026 13:19:58 +0000
ROA not before: Mon 27 Apr 2026 13:19:51 +0000
ROA not after: Thu 04 Jun 2026 13:19:51 +0000
asID: 150055
IP address blocks: 45.199.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110450 (0x1af72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 27 13:19:51 2026 GMT
Not After : Jun 4 13:19:51 2026 GMT
Subject: CN=69ef627d-e6e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:45:16:0d:ae:e8:0c:2d:81:cf:16:a3:e3:e2:
f7:98:9b:97:f7:98:53:d1:e3:85:52:1e:3a:d1:05:
21:a5:5d:94:be:69:a4:fb:3f:9d:79:35:77:82:a5:
56:f3:e5:e9:66:2f:97:11:e9:a7:35:81:1d:1a:01:
68:bb:ab:86:1a:43:0c:38:9d:ae:3d:89:e2:29:e1:
c1:79:cf:97:30:57:96:49:5b:2d:52:58:8f:58:36:
26:86:58:f2:45:e9:0f:1b:7e:c8:3d:0e:7b:84:9f:
5f:45:e7:5b:58:76:a9:99:44:45:47:58:71:97:ab:
10:b9:97:a5:04:32:4b:40:97:55:3f:6d:02:cb:07:
bf:dd:10:14:f3:06:3b:c5:62:eb:fa:31:8a:92:bb:
f2:07:bf:75:1c:f5:2e:5e:49:e4:c0:58:cb:a5:e3:
94:a9:d6:dd:7d:8f:d2:89:ce:3a:96:dc:28:c0:ff:
68:e8:11:fe:17:b4:c5:62:e1:9e:6b:7c:47:7a:40:
a5:02:7f:74:38:b9:5c:18:88:03:1b:85:0b:3e:50:
4b:1e:43:fc:bf:fb:fc:91:05:70:4b:39:be:c7:ea:
0c:a2:e0:6f:31:26:a3:a1:d2:e9:56:b9:f2:9f:10:
ac:5d:fc:bc:5e:a2:de:00:8f:4f:ca:5a:cf:16:d0:
89:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:EA:91:11:25:60:52:4A:9A:12:71:33:17:4B:38:B5:01:EA:E5:86
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/C8A56AD4423B11F1A7509018CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.139.0/24
Signature Algorithm: sha256WithRSAEncryption
11:45:50:f7:dd:0b:28:66:0e:5a:6c:8e:c7:0c:2b:1c:b5:5e:
f1:86:d9:aa:58:7b:5c:8c:80:c9:fd:78:5e:33:7c:84:02:a5:
3b:ab:ce:8c:f8:21:15:12:13:41:ae:ad:af:2c:cf:ae:67:52:
f9:32:92:e0:9f:b0:12:19:1c:07:43:74:4c:4f:c8:3c:af:74:
d6:df:2a:fb:1f:e0:75:18:b1:8c:c5:33:58:32:84:98:4e:34:
fd:63:78:9b:ba:13:ac:06:ac:19:55:dd:07:0a:7a:3d:20:85:
e0:37:3f:ec:97:64:19:bf:7e:3f:19:9e:1c:c6:11:fc:e7:4c:
55:97:18:b7:69:19:dd:2e:97:48:36:f4:f6:fa:f1:39:a3:ac:
9a:2c:a2:42:f0:b9:bb:3a:0f:83:c5:58:3b:ed:64:69:e4:0e:
18:1a:fb:21:56:5a:94:21:0a:0f:c0:17:3f:d5:b2:a5:86:1f:
00:e2:bc:28:30:83:ee:0a:73:40:9f:15:4f:69:dc:f5:38:c7:
61:6c:2b:52:34:d1:93:a5:ad:7f:f9:e4:8c:1f:8c:b4:1e:f0:
8a:36:d1:9c:88:44:c0:09:e0:1a:28:64:e7:38:02:59:a7:6d:
e0:f8:60:22:65:a2:00:dc:b1:8c:2a:34:ab:4e:a1:cd:d6:64:
e0:04:71:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:03:56 2026 by rpki-client