Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/435E89586D5D11F1B8D380AECE1D38B0.roa
File: 435E89586D5D11F1B8D380AECE1D38B0.roa (raw, json)
Hash identifier: pJNehWT0mHlEBFTbxU8j08QNvR0fVkQIvHzVJybpyP0=
Subject key identifier: 43:83:CE:7C:CB:B6:CF:88:2D:B0:83:52:AC:66:B5:65:90:0A:A9:37
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BF49
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/435E89586D5D11F1B8D380AECE1D38B0.roa
Signing time: Sun 21 Jun 2026 10:37:56 +0000
ROA not before: Sun 21 Jun 2026 10:37:51 +0000
ROA not after: Tue 21 Jul 2026 10:37:51 +0000
asID: 214143
IP address blocks: 45.195.157.0/24 maxlen: 24
45.195.158.0/24 maxlen: 24
45.196.136.0/24 maxlen: 24
45.196.137.0/24 maxlen: 24
45.198.176.0/24 maxlen: 24
45.203.60.0/24 maxlen: 24
45.203.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114505 (0x1bf49)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 21 10:37:51 2026 GMT
Not After : Jul 21 10:37:51 2026 GMT
Subject: CN=6a37bf04-026f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:10:60:12:be:47:c2:f2:d0:cd:c6:21:93:47:
8d:20:85:fb:35:8e:24:5f:07:47:b1:fb:3b:02:4a:
d1:22:5e:a0:90:72:6e:d3:fa:9f:1b:50:36:85:b8:
2b:14:03:f4:7c:4e:9a:45:e8:fe:fd:45:56:64:94:
f0:95:e0:eb:f5:60:5a:13:73:8a:a4:cd:2b:64:73:
59:71:e0:62:97:4d:14:e1:ae:58:d9:37:c4:72:15:
15:17:76:e0:ca:cb:11:be:c4:ad:7c:ef:07:14:47:
94:b8:1e:c7:d6:c3:1b:16:43:75:6b:93:13:c9:f1:
47:35:8d:2b:8a:e7:7d:45:11:e9:ee:c6:40:85:54:
d6:2f:6a:cd:5f:58:25:24:08:e1:73:e7:b1:ce:1d:
0b:30:fa:8a:9d:64:56:03:df:87:69:8c:8b:28:34:
5d:0f:27:74:8d:77:6f:5e:f5:f6:47:98:1e:20:28:
22:6d:b8:6a:c7:6d:09:01:91:31:6c:ea:c5:7f:16:
16:4e:f7:9d:f3:62:d3:62:8a:df:b4:15:09:48:18:
06:41:19:bc:5d:05:f1:bb:f8:30:d7:8f:7e:a8:96:
e6:39:77:b1:d5:5a:a0:86:50:f6:3e:8c:37:68:a4:
32:e0:72:ab:15:c3:6f:42:7e:1f:a7:a2:41:88:46:
2a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:83:CE:7C:CB:B6:CF:88:2D:B0:83:52:AC:66:B5:65:90:0A:A9:37
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/435E89586D5D11F1B8D380AECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.157.0-45.195.158.255
45.196.136.0/23
45.198.176.0/24
45.203.60.0/23
Signature Algorithm: sha256WithRSAEncryption
99:37:cc:a6:fa:67:64:65:12:96:89:fc:64:a4:3a:92:6c:53:
df:d1:6b:8c:e1:aa:cf:c5:56:07:33:d3:d5:59:30:09:85:fb:
5c:d3:4e:09:1c:4a:f3:26:0b:a5:ca:13:ea:f9:a4:c4:dd:3d:
24:f0:54:41:ec:46:c7:63:34:e9:73:71:bf:cd:d2:27:df:de:
47:1a:2b:8a:89:d4:f2:3a:1e:f8:6a:86:42:88:6a:f7:72:8e:
67:44:c6:cc:69:b3:2a:d9:68:fa:2f:2d:68:d0:5b:02:39:b5:
46:0c:58:c0:ca:7e:5d:8f:ba:c9:ee:ad:ef:f7:fb:e1:57:c1:
7d:03:90:71:86:2a:d3:53:55:8b:29:52:9a:ca:b7:ce:18:70:
8b:73:35:3f:d1:30:02:d2:fa:bc:e8:2e:c5:1c:df:81:1c:52:
c0:70:e3:f0:5e:79:58:95:9c:13:ab:c8:ce:66:bf:dd:21:3f:
95:e7:35:17:52:f9:3b:7b:93:02:77:4b:3a:61:81:e3:d2:43:
01:f7:e9:c5:1a:7c:ba:28:36:d9:5a:d3:01:02:ad:f1:7a:44:
4b:41:33:bb:07:13:d9:c4:59:e4:12:f6:d8:bd:6c:54:cd:aa:
f4:a9:96:2e:7d:9d:88:bf:66:44:60:b5:5d:0c:42:f1:8f:f7:
7e:50:16:53
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:51 2026 by rpki-client