Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/054FD990649E11F1B28D8FC6CE1D38B0.roa
File: 054FD990649E11F1B28D8FC6CE1D38B0.roa (raw, json)
Hash identifier: L9MZxpJOpN7wQOemrheivM14h31B2ZJ78aJaVqFFznw=
Subject key identifier: E0:A0:75:F1:D6:DC:2F:0E:4E:10:D7:D2:C0:0F:85:43:40:47:57:FD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BC9C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/054FD990649E11F1B28D8FC6CE1D38B0.roa
Signing time: Wed 10 Jun 2026 07:28:49 +0000
ROA not before: Wed 10 Jun 2026 07:28:43 +0000
ROA not after: Thu 09 Jul 2026 07:28:43 +0000
asID: 211577
IP address blocks: 45.192.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113820 (0x1bc9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 10 07:28:43 2026 GMT
Not After : Jul 9 07:28:43 2026 GMT
Subject: CN=6a291230-a375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:6e:7d:7e:13:e6:97:d5:35:44:5c:38:05:75:
63:c7:8d:6e:a7:c5:3a:76:a6:16:8c:fd:60:21:5b:
5b:a8:96:23:20:04:f7:48:8b:fc:31:49:00:67:4c:
49:65:7a:fd:4a:e9:19:91:80:e1:d5:af:4d:34:b1:
a6:2f:c9:8d:cc:40:64:d0:74:05:ef:0b:96:7a:8f:
09:14:30:fe:9a:e6:d7:e0:a0:40:78:ce:84:26:77:
f2:17:22:f5:62:79:9a:7a:9d:ea:2f:8c:5f:da:1b:
e6:a7:14:64:c4:ab:01:6d:c2:c7:72:f9:fa:5e:31:
53:b4:82:00:7e:53:f5:98:6e:09:b8:78:ea:db:db:
df:77:d3:ed:30:75:3b:48:81:53:13:6c:ce:53:fc:
b0:73:d9:0c:b2:37:6e:1d:de:b8:5f:88:4b:f9:d8:
d6:d2:55:c4:00:b4:c3:e0:f0:3f:75:94:15:0c:09:
81:e5:d1:29:c9:d9:9e:b8:2c:bc:e1:fe:7d:38:63:
af:7b:e0:92:b1:28:3a:fb:ea:c1:dd:51:4b:23:94:
0a:4c:d7:3c:2c:f6:ea:6e:8e:23:87:bf:84:1f:a2:
6d:be:8e:6c:35:4e:65:33:69:75:5b:c3:2f:7a:56:
d4:47:9f:4a:0b:3c:48:4f:23:4c:3f:5b:6b:cc:ba:
38:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:A0:75:F1:D6:DC:2F:0E:4E:10:D7:D2:C0:0F:85:43:40:47:57:FD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/054FD990649E11F1B28D8FC6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.19.0/24
Signature Algorithm: sha256WithRSAEncryption
07:d0:7d:22:d6:73:75:83:e4:96:e0:5b:21:b7:d4:3c:57:75:
0f:e1:2d:82:77:83:aa:ac:78:76:c2:a1:ec:de:f9:0e:f9:60:
b3:f2:85:2b:4a:87:38:59:e4:d5:e8:57:6d:9b:a6:c6:c1:3c:
51:99:c3:b5:ca:d6:ec:34:ff:b4:21:e1:f7:03:8e:6b:32:57:
f2:81:35:af:96:78:fe:b2:f1:5c:1b:9e:78:50:2f:14:3d:2f:
c1:ed:c6:61:ae:47:31:4c:bc:d3:6a:3f:6b:29:94:27:28:a7:
a8:f5:a6:5c:13:cc:19:73:e1:68:ed:ad:55:ce:45:9f:f4:ac:
6f:51:a8:ce:e3:81:21:cb:49:cd:aa:d7:72:4f:37:0e:36:51:
29:8d:7e:bb:7b:c6:60:b8:59:4b:ae:fe:c9:22:b1:06:49:ce:
64:8e:9e:10:23:a3:4f:8b:2a:81:78:46:8b:87:59:32:5c:5d:
da:db:90:aa:48:d5:fd:ed:dc:bf:6b:32:32:b4:ed:97:56:e2:
49:b2:1e:78:2a:7b:9c:04:00:21:3b:c4:9b:f7:85:fe:54:76:
89:0f:17:83:3e:1b:57:dc:79:3d:6c:fa:3c:a5:9e:60:50:cd:
4b:17:c8:7e:43:8a:25:dc:4e:17:b8:89:48:89:fb:00:d8:1e:
e2:03:2e:ec
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAbycMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNjEwMDcyODQzWhcNMjYwNzA5MDcyODQzWjAYMRYw
FAYDVQQDEw02YTI5MTIzMC1hMzc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEA5W59fhPml9U1RFw4BXVjx41up8U6dqYWjP1gIVtbqJYjIAT3SIv8MUkA
Z0xJZXr9SukZkYDh1a9NNLGmL8mNzEBk0HQF7wuWeo8JFDD+mubX4KBAeM6EJnfy
FyL1Ynmaep3qL4xf2hvmpxRkxKsBbcLHcvn6XjFTtIIAflP1mG4JuHjq29vfd9Pt
MHU7SIFTE2zOU/ywc9kMsjduHd64X4hL+djW0lXEALTD4PA/dZQVDAmB5dEpydme
uCy84f59OGOve+CSsSg6++rB3VFLI5QKTNc8LPbqbo4jh7+EH6Jtvo5sNU5lM2l1
W8MvelbUR59KCzxITyNMP1trzLo43QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFOCg
dfHW3C8OThDX0sAPhUNAR1f9MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8wNTRGRDk5MDY0OUUxMUYxQjI4RDhGQzZDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcATMA0GCSqGSIb3DQEBCwUA
A4IBAQAH0H0i1nN1g+SW4Fsht9Q8V3UP4S2Cd4OqrHh2wqHs3vkO+WCz8oUrSoc4
WeTV6Fdtm6bGwTxRmcO1ytbsNP+0IeH3A45rMlfygTWvlnj+svFcG554UC8UPS/B
7cZhrkcxTLzTaj9rKZQnKKeo9aZcE8wZc+Fo7a1VzkWf9KxvUajO44Ehy0nNqtdy
TzcONlEpjX67e8ZguFlLrv7JIrEGSc5kjp4QI6NPiyqBeEaLh1kyXF3a25CqSNX9
7dy/azIytO2XVuJJsh54KnucBAAhO8Sb94X+VHaJDxeDPhtX3Hk9bPo8pZ5gUM1L
F8h+Q4ol3E4XuIlIifsA2B7iAy7s
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:21:34 2026 by rpki-client