Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/51941954356611F187F85613CF1D38B0.roa
File: 51941954356611F187F85613CF1D38B0.roa (raw, json)
Hash identifier: Ba7bsxrJEY87L5sJxGys9d/ErBx6mprFTpIFcOysSTM=
Subject key identifier: AB:45:70:AF:7A:76:60:EB:0F:E6:E0:02:A3:30:9C:CA:65:04:9E:CD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01ABE7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/51941954356611F187F85613CF1D38B0.roa
Signing time: Sat 11 Apr 2026 05:21:40 +0000
ROA not before: Sat 11 Apr 2026 05:21:35 +0000
ROA not after: Mon 18 May 2026 05:21:35 +0000
asID: 395886
IP address blocks: 45.205.4.0/24 maxlen: 24
45.205.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109543 (0x1abe7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 11 05:21:35 2026 GMT
Not After : May 18 05:21:35 2026 GMT
Subject: CN=69d9da64-dec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:29:d2:0f:ea:c6:3b:70:59:ec:31:07:76:0d:
80:93:e5:21:f3:90:70:28:8c:fe:93:ff:83:c1:bf:
e5:21:07:b2:16:c1:bf:ce:e2:9d:8e:e6:0e:24:62:
7b:8c:d3:af:f6:a2:f3:26:58:8b:a7:04:58:3d:29:
05:66:ea:0e:b8:4b:67:01:58:b0:ff:e5:18:c0:e5:
00:24:e9:37:2e:96:28:ff:a5:d0:2d:2c:24:c3:88:
41:40:80:f6:a9:92:f6:49:54:93:82:20:75:c0:a2:
06:49:93:fb:51:02:ca:09:c3:b5:3c:f2:fc:f7:44:
0d:6a:1e:5c:f0:ee:d9:f5:0a:70:6b:99:5f:e6:a3:
05:d9:f0:5d:b9:a5:d0:27:6c:28:1c:cc:f7:3e:96:
73:cd:e1:d9:0b:54:ff:00:15:d7:06:74:2a:2c:37:
05:45:a4:d6:0a:5e:92:f3:8e:ed:49:7a:b3:7e:4c:
e2:84:5b:b5:7d:74:9a:ed:75:60:5f:d8:68:c5:c0:
c5:4c:24:c7:cb:2f:40:c8:71:da:26:88:5e:7f:2e:
02:52:db:5a:a6:69:2d:76:06:d3:61:2c:82:41:98:
53:80:27:81:86:68:60:44:b7:09:c0:fc:11:46:6c:
1f:36:f1:d1:9b:5c:d6:10:0f:de:d9:60:c7:a2:93:
8a:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:45:70:AF:7A:76:60:EB:0F:E6:E0:02:A3:30:9C:CA:65:04:9E:CD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/51941954356611F187F85613CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.4.0/23
Signature Algorithm: sha256WithRSAEncryption
60:0e:bc:a4:94:40:85:b9:a6:f4:f1:e1:a8:de:5d:a6:fa:b5:
86:63:2b:8a:13:26:d1:66:72:70:50:63:aa:6a:c1:e0:84:39:
38:d5:84:c4:68:1b:ab:ed:d4:2e:05:5d:f2:97:0f:1c:98:99:
a6:97:8b:b5:fb:28:d1:c3:94:db:e1:61:7a:64:2a:e4:99:30:
2c:d9:ed:57:ef:0d:5a:15:4a:73:be:9b:48:57:c8:c0:df:ce:
43:6f:61:85:a7:18:39:b2:fa:ca:fa:2a:32:0a:ce:d3:94:e3:
9e:d9:22:23:3e:ef:18:b4:93:57:6f:3b:cd:83:5e:80:d8:35:
2d:77:b2:ac:27:4b:cd:c7:9a:f3:cb:a5:81:d8:8d:21:69:58:
aa:af:f0:a9:82:62:64:70:6e:1a:bd:43:ce:3f:0b:c3:01:38:
fb:e4:68:3e:3c:ae:4b:d4:38:88:c0:40:8a:5a:74:7f:4d:3f:
13:3b:3f:ca:b7:f3:5a:44:a8:14:ac:59:ea:40:60:6c:0b:ed:
70:90:df:ea:7d:a7:66:46:ca:89:f8:a8:31:c0:bf:cb:b8:f5:
45:8b:f8:a8:19:16:39:c2:d8:96:8d:fd:fa:b1:a0:40:ca:04:
68:48:08:c5:ae:11:2c:2d:2f:d4:66:9c:3d:b2:00:05:f6:b2:
93:2b:2b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:11:39 2026 by rpki-client