Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/62F739D681C611F19DD374CCCE1D38B0.roa
File: 62F739D681C611F19DD374CCCE1D38B0.roa (raw, json)
Hash identifier: s4vNJHWvIC03SECt2f9BiOX9gmDQlqlo4dkgRgerx2s=
Subject key identifier: 57:44:83:51:CE:C5:27:E7:6A:8E:5B:E5:F4:8C:A8:C7:74:F2:4C:B9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C5DA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/62F739D681C611F19DD374CCCE1D38B0.roa
Signing time: Fri 17 Jul 2026 10:00:49 +0000
ROA not before: Fri 17 Jul 2026 10:00:45 +0000
ROA not after: Mon 24 Aug 2026 10:00:45 +0000
asID: 212238
IP address blocks: 45.198.88.0/24 maxlen: 24
45.198.91.0/24 maxlen: 24
45.198.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116186 (0x1c5da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 17 10:00:45 2026 GMT
Not After : Aug 24 10:00:45 2026 GMT
Subject: CN=6a59fd51-8924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1b:45:38:e7:38:fa:73:a5:c5:cb:9e:d5:7d:
a4:dd:d6:6d:44:0e:a3:dc:b6:53:3e:c6:1c:13:6e:
8a:2f:81:54:48:26:22:e5:91:b7:5c:fb:2c:8d:b7:
f5:ab:c5:d0:d3:4f:61:dc:1a:70:13:e6:8f:78:d5:
26:be:00:46:b8:d8:f7:f5:e3:6d:bc:8e:d8:4d:0f:
15:67:58:b4:9d:c5:c5:92:c0:76:6f:c0:4a:8f:4c:
be:2c:21:7c:86:14:15:7c:e1:01:de:81:8b:f3:ac:
28:b8:4e:8e:66:49:e0:e6:9f:5a:b2:01:95:e1:c1:
b2:df:78:d6:f9:c1:22:28:d3:e8:1b:e7:e0:1a:9a:
59:9d:83:07:de:fe:48:c2:31:25:d8:a9:c2:bc:af:
4b:a9:ff:0e:1b:36:24:8e:7d:20:fa:21:19:2b:fd:
52:74:3f:b8:1f:1c:7a:ab:79:a4:95:f9:37:c3:7a:
20:48:86:0d:ea:65:73:d4:6e:cf:97:d4:8e:be:7d:
f1:d8:fa:8f:2a:fa:27:be:51:d4:7b:b4:c0:a5:68:
87:49:c6:22:79:42:46:8e:39:a0:ef:79:66:e4:65:
c5:d2:d3:27:91:3d:e7:04:38:be:b0:c9:91:c9:be:
17:7c:7b:ae:cc:38:13:88:af:7a:ad:d3:a5:32:4f:
82:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:44:83:51:CE:C5:27:E7:6A:8E:5B:E5:F4:8C:A8:C7:74:F2:4C:B9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/62F739D681C611F19DD374CCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.88.0/24
45.198.91.0/24
45.198.105.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:80:f5:23:5e:89:55:e0:07:e6:31:d9:37:ef:47:85:8b:c6:
3c:a1:bb:b3:98:27:b2:99:7e:e1:2c:9e:66:28:d9:32:53:57:
06:e9:2f:16:01:55:34:b8:21:4d:b7:9a:b8:c7:06:e6:64:25:
78:86:3f:9e:0f:28:c7:9f:cf:27:39:5b:86:38:5f:b9:fb:3f:
06:8a:75:9b:bf:bd:ec:18:3a:a6:31:bc:f5:e3:c8:d4:9c:51:
d2:7e:4e:55:b4:86:64:8a:cd:46:5e:8c:7e:ae:1e:5c:c8:4f:
a5:fd:45:45:b5:c5:df:50:bf:7f:0c:85:f9:5f:b1:25:72:18:
65:d6:5f:ce:ee:f6:f0:33:77:1a:68:1f:86:a2:7c:8e:9b:b5:
c0:d8:c9:bf:6e:00:9b:3b:c7:47:97:06:65:ae:d1:a7:fc:1e:
8f:2d:20:3a:0a:4b:f5:ca:2e:6b:ea:8a:1c:df:7c:ef:c3:eb:
6b:76:47:84:e3:20:52:e4:02:e5:e8:ec:05:6f:99:40:3e:94:
47:e2:51:5e:26:1f:d1:25:9a:75:47:9e:c3:ac:09:ce:6b:ae:
8a:10:c3:69:1f:dc:46:13:11:fc:a4:78:7e:9e:0e:87:ef:da:
53:e8:65:3f:58:59:7d:16:d2:00:a3:64:0f:cd:f4:50:01:bc:
1f:da:9a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:05 2026 by rpki-client