Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA14A33A64D911F1AA1CAAA7CE1D38B0.roa
File: AA14A33A64D911F1AA1CAAA7CE1D38B0.roa (raw, json)
Hash identifier: kYGQ+WL+/lsGpv31J8j6xWxnmuZM1+n60Pxawd1mPFU=
Subject key identifier: 6E:8F:48:90:FB:BE:55:7D:E9:09:77:38:C4:22:C6:BC:DC:8B:93:6E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BCE4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA14A33A64D911F1AA1CAAA7CE1D38B0.roa
Signing time: Wed 10 Jun 2026 14:35:45 +0000
ROA not before: Wed 10 Jun 2026 14:35:41 +0000
ROA not after: Fri 17 Jul 2026 14:35:41 +0000
asID: 11404
IP address blocks: 45.204.112.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113892 (0x1bce4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 10 14:35:41 2026 GMT
Not After : Jul 17 14:35:41 2026 GMT
Subject: CN=6a297641-1fbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2f:b4:a3:86:a7:73:ce:89:3a:ad:5f:73:f2:
cc:01:3a:ab:8f:44:37:4d:ca:4d:70:ef:cf:e9:8d:
03:43:b2:78:76:52:f8:dc:24:76:61:e2:9a:23:46:
d2:54:a8:c0:a2:cd:53:ba:ac:e5:5e:52:6d:5b:67:
c1:b0:e1:07:23:cf:b2:b5:23:d4:69:1b:64:fe:86:
4f:68:2e:34:8b:2f:e4:46:68:92:b7:bb:7a:d0:0b:
35:93:f0:10:de:ce:06:16:f8:02:77:93:71:a9:a6:
0e:5f:6a:01:f2:4a:33:b6:69:a6:6c:4a:ae:f2:f3:
d8:c2:67:84:6e:b3:17:41:bc:de:c8:24:7e:10:d4:
ef:69:a0:0e:93:96:f8:b8:e2:8c:d8:21:ab:f4:e0:
7d:50:1c:ac:01:9a:d7:d4:68:ff:07:8b:e9:91:7e:
ba:e1:50:fa:e1:da:e0:b2:3a:a3:9c:ea:82:db:c8:
a0:32:3b:6c:fc:c5:43:d6:44:b3:6c:50:69:8f:48:
52:87:5b:41:62:34:25:88:6e:52:1f:bc:71:ce:7a:
cb:a1:bc:23:d6:7e:e1:c8:66:f3:40:48:24:0e:7e:
63:4b:b4:ab:57:2d:6b:5f:91:3f:af:bf:96:14:72:
44:d6:dc:fd:44:12:13:e9:cd:6c:83:9d:49:00:e1:
5a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:8F:48:90:FB:BE:55:7D:E9:09:77:38:C4:22:C6:BC:DC:8B:93:6E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA14A33A64D911F1AA1CAAA7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.112.0/20
Signature Algorithm: sha256WithRSAEncryption
42:eb:f4:08:81:f3:e7:c8:67:27:f7:8a:a0:0d:46:37:e1:24:
98:e4:b6:19:a9:5f:56:f9:36:91:fa:84:25:92:40:4c:58:0f:
71:be:70:4a:fe:dd:65:b6:bc:f6:1c:e7:9e:1d:b7:13:34:98:
ef:14:59:26:9d:a5:d0:5b:d3:51:b9:b7:1a:8b:b5:37:9e:0e:
e0:96:ef:35:f3:90:94:cf:a1:4d:0d:2e:ba:31:fd:30:ab:69:
ba:7c:69:b6:5c:99:29:88:75:fb:49:57:26:54:7b:5f:e6:79:
f4:ad:4c:d6:91:8f:07:05:ca:27:48:63:dc:67:41:5a:0a:4d:
ac:85:c7:c3:70:52:24:3b:60:4f:50:6f:5f:c9:c3:68:ba:f7:
d8:bf:48:68:4f:7e:22:6e:23:2a:1f:67:93:76:2e:c4:3d:5b:
42:51:20:45:3f:36:ac:f2:b9:04:6c:e9:6c:37:3d:f6:31:04:
76:d6:3e:ae:e2:5c:b5:dd:4f:32:c2:08:6a:96:26:16:11:ae:
ad:4f:32:dc:e8:76:93:6b:1e:29:72:bf:fd:2f:a0:e1:4a:e9:
00:ae:1d:0d:ad:a4:1b:0d:27:4f:96:0e:fb:35:6c:2a:33:72:
a3:86:f8:f2:6e:2e:fa:9a:a1:fd:70:e1:03:ef:87:d9:32:99:
d9:69:0a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:51:18 2026 by rpki-client