Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/23B878C080EA11F1A7EBD210CF1D38B0.roa
File: 23B878C080EA11F1A7EBD210CF1D38B0.roa (raw, json)
Hash identifier: cSAr1DMMuODSRUDmCYyONoHKRb8iMrG6NcWE4IZRwvA=
Subject key identifier: 49:6D:35:C7:C1:5B:32:AB:C5:A6:7C:0E:41:07:6C:4C:F3:B4:89:A7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C543
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/23B878C080EA11F1A7EBD210CF1D38B0.roa
Signing time: Thu 16 Jul 2026 07:44:14 +0000
ROA not before: Thu 16 Jul 2026 07:44:10 +0000
ROA not after: Fri 21 Aug 2026 07:44:10 +0000
asID: 273020
IP address blocks: 45.192.20.0/24 maxlen: 24
45.195.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116035 (0x1c543)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 16 07:44:10 2026 GMT
Not After : Aug 21 07:44:10 2026 GMT
Subject: CN=6a588bce-d292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c7:d6:77:c6:ed:b9:cf:53:29:83:83:71:31:
ec:21:a6:14:90:34:3e:f8:1d:9e:a4:ba:d4:35:c2:
23:cc:00:c9:65:f7:de:56:b1:6a:12:51:78:a2:7c:
9d:5e:5b:1d:73:a9:3c:ed:0a:c2:e6:9a:d7:60:0e:
11:69:bd:91:57:9c:bd:bd:57:5e:e3:11:be:44:cc:
8d:d5:56:57:c6:03:4f:14:4c:31:f8:8d:11:a9:12:
4a:9a:4f:67:32:60:8d:83:2a:fe:d0:d8:96:17:3d:
05:d9:f0:8b:aa:5b:ce:79:8d:0c:34:18:69:4a:60:
45:66:8c:a5:2e:ac:95:d6:ea:d5:7f:73:55:14:bb:
62:c4:2e:e2:29:d3:fd:21:de:50:c4:ce:ef:d2:8a:
65:77:8c:6b:8a:1f:bc:5f:79:12:17:05:ec:25:0a:
11:54:fb:b2:8c:a0:15:94:9c:62:7c:bc:34:8f:af:
ea:60:10:af:13:63:43:0a:56:3c:46:4e:10:0f:6d:
2d:d5:d4:dc:68:a2:d7:99:64:71:d3:62:69:ff:e0:
c0:a5:6b:5b:23:75:ee:e3:b5:a5:d8:55:63:66:cf:
a8:13:4a:05:00:57:52:ba:55:92:0c:ed:74:31:0e:
6e:8d:91:79:41:96:5d:7c:90:c4:dc:be:be:d7:2c:
58:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:6D:35:C7:C1:5B:32:AB:C5:A6:7C:0E:41:07:6C:4C:F3:B4:89:A7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/23B878C080EA11F1A7EBD210CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.20.0/24
45.195.104.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:75:2a:95:50:9a:63:67:b2:34:8c:b8:3e:0e:38:93:66:ce:
e7:90:45:75:6c:16:af:e9:63:51:4a:63:46:3d:f6:49:c3:52:
d1:6b:e8:45:ba:a3:a9:c4:c8:44:e1:ca:ad:07:4f:50:8e:23:
97:9b:bd:69:20:81:8f:b9:ca:ed:7d:4f:23:ee:04:2a:e7:fe:
67:f7:58:4f:a9:ec:18:c6:19:9b:54:6c:fd:2c:ce:7f:12:a5:
63:b7:c0:36:f3:21:0c:d8:c3:69:cf:e5:31:1e:52:b6:8b:8d:
5a:68:51:35:a0:c2:33:98:24:9e:04:33:f0:5b:05:6d:8a:80:
c5:f7:95:85:b3:1f:a7:28:c2:a4:4e:50:be:70:4c:48:60:db:
71:10:99:fd:d5:d9:8b:9a:f1:54:2c:cd:41:59:18:84:0c:fe:
23:0f:30:c0:36:7a:59:68:0c:13:be:5f:8e:14:fc:01:6c:5e:
25:a0:ec:3d:d4:7b:48:14:3f:39:e5:d4:b8:f2:ef:b4:89:a1:
a9:ad:33:7d:cc:6d:a0:64:a9:34:03:65:0d:7f:c2:29:ba:04:
6a:6b:9d:b3:1b:9f:91:8d:c9:69:1c:20:30:bd:c3:05:e0:36:
e1:21:a5:b6:8a:f0:74:12:bf:d4:9a:12:4d:b4:3a:0f:39:b7:
a0:b2:40:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:53 2026 by rpki-client