Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1F0848E4714211F1A9A542DACE1D38B0.roa
File: 1F0848E4714211F1A9A542DACE1D38B0.roa (raw, json)
Hash identifier: bNRxnpbAvHV/lexJndIp78FKn8wbZOk/Ef8iRJ1YCrM=
Subject key identifier: 93:43:98:E9:0F:01:55:76:97:58:44:2D:3E:B2:17:DE:C9:52:FB:B9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C08D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1F0848E4714211F1A9A542DACE1D38B0.roa
Signing time: Fri 26 Jun 2026 09:33:43 +0000
ROA not before: Fri 26 Jun 2026 09:33:38 +0000
ROA not after: Thu 30 Jul 2026 09:33:38 +0000
asID: 9304
IP address blocks: 45.198.5.0/24 maxlen: 24
45.201.35.0/24 maxlen: 24
45.201.41.0/24 maxlen: 24
45.201.42.0/24 maxlen: 24
45.201.48.0/24 maxlen: 24
45.201.61.0/24 maxlen: 24
45.204.132.0/24 maxlen: 24
45.204.154.0/24 maxlen: 24
45.204.248.0/24 maxlen: 24
45.204.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114829 (0x1c08d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 26 09:33:38 2026 GMT
Not After : Jul 30 09:33:38 2026 GMT
Subject: CN=6a3e4777-faa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:25:ab:e5:8a:9b:1e:ac:cf:0b:80:59:52:3e:
ae:e4:5f:3d:eb:81:99:94:96:4d:34:ad:d5:a0:bb:
a1:e5:6d:5c:24:08:6a:82:b0:f8:fc:11:24:2c:c4:
5a:80:60:33:6c:9c:fe:14:cf:04:fc:dc:25:87:90:
b2:03:55:2d:a7:6e:8a:3b:87:85:0b:0b:9a:95:60:
6c:cc:de:87:7e:c0:2c:33:a6:15:e9:cf:d4:97:d3:
7a:3b:b1:eb:2b:76:6a:14:0b:5f:02:9b:4a:fb:21:
de:63:62:a6:a8:f9:84:f8:bc:80:ce:0f:ac:e1:17:
35:ea:05:84:13:8b:91:c6:c1:66:eb:5e:cc:cf:dc:
f4:e8:76:4d:59:0f:8b:a4:8e:8e:e9:f5:f0:ef:cf:
32:e8:72:d5:61:e7:89:ef:ba:44:04:3d:f2:dc:21:
ae:89:9c:41:70:0e:d5:86:12:17:a9:21:b5:e7:5e:
ef:39:c8:72:9f:65:d4:28:67:74:28:c3:ad:97:b8:
d0:31:76:84:81:64:9c:af:af:f9:8b:20:36:3b:ee:
6e:05:08:49:f2:05:4e:4f:79:62:10:44:a3:a4:eb:
ce:d8:a5:31:eb:a1:43:ed:4c:c9:2d:2f:6a:e5:21:
f0:7e:40:c9:fd:c7:61:f8:cc:33:90:19:2e:53:bc:
08:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:43:98:E9:0F:01:55:76:97:58:44:2D:3E:B2:17:DE:C9:52:FB:B9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/1F0848E4714211F1A9A542DACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.5.0/24
45.201.35.0/24
45.201.41.0-45.201.42.255
45.201.48.0/24
45.201.61.0/24
45.204.132.0/24
45.204.154.0/24
45.204.248.0/24
45.204.255.0/24
Signature Algorithm: sha256WithRSAEncryption
85:39:61:0a:25:97:e9:58:37:c4:f4:a3:68:c4:ba:f2:10:44:
79:1d:60:e9:a5:6f:e0:72:50:59:a9:2a:ce:eb:13:36:3e:24:
1a:26:76:dd:c0:6e:af:dc:be:09:a4:18:7e:81:c9:d8:8b:5e:
7d:00:08:98:3c:ce:07:b6:6d:2e:31:b3:6a:15:c5:cc:df:5a:
f8:53:e4:92:27:4d:78:9d:0a:63:27:b7:52:58:74:1e:94:82:
e6:e8:43:51:bf:1c:04:40:f6:47:4c:ea:12:c6:4c:79:7a:f1:
09:39:0a:72:15:e3:47:d9:7b:61:7c:51:34:c5:50:81:8b:58:
c7:df:b9:03:c9:d7:a3:33:36:ca:0f:a3:8e:be:40:60:ce:24:
8f:b8:5e:8a:e0:00:fe:d5:ae:df:54:1e:99:c5:cd:86:2a:12:
d6:78:b1:ba:9f:30:ce:5f:04:e7:72:cf:a4:5e:32:30:68:ca:
e7:be:3f:9f:ca:7a:e7:90:27:1a:1d:03:2a:05:48:2c:52:4e:
db:1a:59:c1:cd:f4:8a:5a:5d:cf:6c:0a:1b:3a:8d:9a:b8:54:
20:83:7a:ff:a5:5a:9a:62:b8:86:cb:fb:05:7c:f5:51:2d:a9:
32:64:9e:cb:1b:f5:eb:10:45:d3:3f:f4:61:e3:34:64:b3:53:
52:3f:41:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:16 2026 by rpki-client