Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4B22F1D0778D11F19C87A2A1CE1D38B0.roa
File: 4B22F1D0778D11F19C87A2A1CE1D38B0.roa (raw, json)
Hash identifier: bDyGAU39jy/x9dqQjw69wrF2SVdI74qyb9iBse+yeLY=
Subject key identifier: 01:3C:4A:34:4E:CE:CD:4E:59:31:E3:F2:69:B9:94:FD:81:33:35:46
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C2D5
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4B22F1D0778D11F19C87A2A1CE1D38B0.roa
Signing time: Sat 04 Jul 2026 09:46:56 +0000
ROA not before: Sat 04 Jul 2026 09:46:51 +0000
ROA not after: Mon 10 Aug 2026 09:46:51 +0000
asID: 61112
IP address blocks: 45.192.240.0/22 maxlen: 24
45.192.240.0/24 maxlen: 24
45.196.96.0/24 maxlen: 24
45.196.97.0/24 maxlen: 24
45.202.240.0/22 maxlen: 24
45.202.244.0/24 maxlen: 24
45.202.245.0/24 maxlen: 24
45.202.246.0/23 maxlen: 24
45.202.246.0/24 maxlen: 24
45.202.247.0/24 maxlen: 24
45.202.248.0/22 maxlen: 24
45.202.248.0/23 maxlen: 24
45.202.248.0/24 maxlen: 24
45.202.249.0/24 maxlen: 24
45.202.254.0/23 maxlen: 24
45.202.254.0/24 maxlen: 24
45.202.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115413 (0x1c2d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 4 09:46:51 2026 GMT
Not After : Aug 10 09:46:51 2026 GMT
Subject: CN=6a48d690-2784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:14:28:8d:2c:9a:2d:b7:d1:7e:cd:f3:c1:73:
09:28:2a:3c:ab:86:de:40:04:4b:ba:a2:9f:eb:24:
4e:d0:8a:8c:83:29:f6:90:ac:6c:85:86:93:0e:54:
62:a5:6f:84:2c:13:dd:6e:7f:5a:f8:42:3d:d4:f4:
a6:0e:83:b9:2c:09:01:40:87:59:95:c6:5b:1a:0d:
d7:db:af:8f:22:51:10:6c:38:51:58:a5:5e:6d:7a:
53:a3:29:2e:97:c6:44:37:49:c4:65:f9:f0:9d:4e:
4d:02:ff:3e:41:59:df:68:12:eb:ff:15:43:36:6d:
de:d5:93:1a:a8:9e:5d:89:ee:dd:e6:78:0d:a7:3b:
4e:85:33:cc:e9:e7:bc:e6:6a:36:bc:3a:61:7d:99:
96:f6:29:d6:ef:ec:7b:57:1a:86:8a:39:99:a8:24:
9b:1c:c1:b5:77:8e:6d:53:d4:83:10:1a:a8:e4:e6:
85:6d:16:e1:e2:b4:4c:7a:2a:53:fe:d8:e7:07:0f:
0d:8d:68:55:94:8c:54:6d:55:6d:c9:33:12:7c:80:
c2:cb:f8:2f:f4:ec:ce:46:f6:c4:d9:43:e6:79:97:
41:40:9f:55:db:76:af:2d:80:c1:74:7b:d2:cf:c5:
31:2c:9b:1c:48:02:50:26:23:2e:8f:2f:6a:0b:18:
37:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:3C:4A:34:4E:CE:CD:4E:59:31:E3:F2:69:B9:94:FD:81:33:35:46
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4B22F1D0778D11F19C87A2A1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.240.0/22
45.196.96.0/23
45.202.240.0-45.202.251.255
45.202.254.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:aa:0f:f5:38:63:ae:4d:d1:d7:cf:06:34:9b:f5:6f:bd:d1:
69:03:1e:0a:5f:07:30:fc:3f:d4:74:a4:a4:b8:77:f0:a3:65:
dc:41:a6:67:3e:33:07:22:61:55:24:c1:15:14:f1:1e:aa:d4:
2a:ed:5d:72:e2:ed:f9:a4:88:21:da:bf:a6:8a:85:8e:d3:3f:
bf:08:d0:05:a3:34:b4:52:b1:b3:96:9e:b3:a6:ec:69:8b:71:
9c:2f:00:f3:9f:6c:4a:48:31:2f:d1:9c:9c:d4:87:2e:3a:6f:
47:2a:33:24:84:78:c2:e3:1a:5f:df:cd:7d:d7:26:a2:68:a1:
ed:8a:84:8c:91:b0:21:65:61:88:fd:19:b3:5c:eb:73:ca:c1:
6d:8d:87:a1:58:85:e1:45:44:9d:1e:2b:4f:58:ba:3d:f5:5d:
de:4e:ff:5e:4d:b2:21:ba:91:7c:0c:49:a4:57:3b:62:31:41:
82:58:dc:05:c5:a1:d7:6b:c3:06:c0:94:06:49:7c:75:02:28:
23:00:2d:bf:e8:db:7a:ad:89:68:90:29:b1:02:e2:ec:88:0b:
9d:b5:45:f4:45:ca:42:3b:1d:61:83:78:ca:6e:b6:8f:ea:f7:
ed:59:b2:33:4f:bb:c1:fb:1b:77:f5:b3:11:92:bb:25:01:4c:
0f:31:8b:65
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:38 2026 by rpki-client