Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E0854B444AF911F1BB10DDC6CE1D38B0.roa
File: E0854B444AF911F1BB10DDC6CE1D38B0.roa (raw, json)
Hash identifier: BG0Brfb6mM/9yevWN9PsOHIPFvuBnKei2/cY5bYybfM=
Subject key identifier: D1:E1:E1:D6:B0:3B:AE:5F:2B:C4:FA:DD:AE:54:9D:64:B1:79:97:62
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B2EA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E0854B444AF911F1BB10DDC6CE1D38B0.roa
Signing time: Fri 08 May 2026 16:20:50 +0000
ROA not before: Fri 08 May 2026 16:20:44 +0000
ROA not after: Mon 08 Jun 2026 16:20:44 +0000
asID: 215391
IP address blocks: 45.195.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111338 (0x1b2ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 8 16:20:44 2026 GMT
Not After : Jun 8 16:20:44 2026 GMT
Subject: CN=69fe0d62-9c28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d0:f9:2e:e3:c5:dd:3d:bb:ff:43:77:e3:bd:
80:fa:ba:c9:e2:b7:87:0a:09:c2:99:e0:a0:b1:19:
e4:ed:e9:18:91:5c:de:8c:a5:a1:4a:83:3d:ee:66:
f1:ee:25:05:b5:91:db:f9:a6:82:1a:4c:bb:81:b1:
ea:0b:7a:fd:6b:0e:e0:65:c8:14:60:01:91:bf:72:
ed:12:d8:35:ef:a7:87:0d:8d:a9:62:9b:85:18:5a:
ca:c8:9d:1b:b0:87:14:fc:63:8d:89:87:f1:53:e7:
c4:77:64:92:cb:0f:ca:14:a1:4c:e1:ac:be:a0:ac:
68:01:c0:d5:54:d9:4a:cc:03:40:1c:f8:1f:1e:26:
97:43:32:fd:ca:8f:af:73:8e:be:43:ba:e4:d7:ad:
bb:87:66:35:b3:22:9a:79:b7:07:5e:dd:35:38:3d:
b8:c0:f0:fd:66:ce:59:22:fa:f6:08:98:47:6a:f2:
3e:eb:57:f5:49:2c:cb:2f:b5:cd:2a:61:f6:09:8f:
44:0f:45:73:84:34:62:5e:a6:05:53:26:76:01:0d:
33:fc:92:ac:2f:bc:e6:43:86:57:ed:3e:7d:d8:57:
cc:60:cf:0b:2f:12:30:38:81:27:ca:1b:b6:b0:ab:
41:7a:f2:63:85:d4:29:91:60:f4:4b:f7:75:94:b4:
c3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E1:E1:D6:B0:3B:AE:5F:2B:C4:FA:DD:AE:54:9D:64:B1:79:97:62
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E0854B444AF911F1BB10DDC6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.231.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:52:13:6f:fe:5a:5d:82:67:26:a1:63:2a:66:f6:d8:b1:4d:
7f:e3:fe:94:1b:30:6a:df:3b:16:14:27:ef:e5:73:51:4e:95:
93:2f:92:88:ad:65:77:08:1c:cf:40:33:0f:ef:69:4d:da:01:
b5:c1:2b:e1:2e:91:f9:39:2b:04:e4:5e:d3:1a:2f:27:51:37:
d4:6f:64:3f:a9:b8:e6:6c:04:d3:19:6c:42:4d:23:0d:f4:a5:
6f:ca:1a:bf:48:07:cd:74:04:bd:c9:7c:bd:88:2c:ff:81:cd:
ca:36:4d:31:01:2c:c1:27:b1:ab:e3:97:18:d4:d9:c1:31:57:
07:85:93:48:ab:df:7b:eb:33:f2:0a:d8:93:74:b2:69:f2:1e:
36:a6:8c:1a:f6:a2:25:ea:6c:2e:38:b7:dd:f6:dc:a3:6c:35:
bc:c4:fb:93:d0:e7:94:7b:8c:19:eb:5e:42:b3:54:b9:e5:89:
11:2e:20:9a:e2:8e:4e:c1:39:2b:2e:19:88:71:8c:cb:a5:f6:
01:c9:a1:77:48:c3:a8:40:6e:71:4e:1a:90:d7:f6:ba:2d:ca:
ed:e4:e4:86:f0:a3:7d:1f:72:e9:48:ef:fb:60:7d:d6:ed:55:
f8:9a:5f:56:de:ce:d6:68:cf:55:80:53:f7:78:64:58:81:ce:
17:01:43:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:40:57 2026 by rpki-client