Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/67E6914E779911F1AB573BE8CE1D38B0.roa
File: 67E6914E779911F1AB573BE8CE1D38B0.roa (raw, json)
Hash identifier: K0a26TJcXLrTAwMnWsp2Z/QR848n/lR4xuOfeZ9SdvQ=
Subject key identifier: 74:58:71:03:EE:F5:96:A7:F2:12:0E:19:AC:05:01:73:2E:4A:38:51
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C2E9
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/67E6914E779911F1AB573BE8CE1D38B0.roa
Signing time: Sat 04 Jul 2026 11:13:39 +0000
ROA not before: Sat 04 Jul 2026 11:13:34 +0000
ROA not after: Mon 10 Aug 2026 11:13:34 +0000
asID: 213169
IP address blocks: 45.192.240.0/22 maxlen: 24
45.202.252.0/23 maxlen: 24
45.202.252.0/24 maxlen: 24
45.202.253.0/24 maxlen: 24
45.202.254.0/23 maxlen: 24
45.202.254.0/24 maxlen: 24
45.202.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115433 (0x1c2e9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 4 11:13:34 2026 GMT
Not After : Aug 10 11:13:34 2026 GMT
Subject: CN=6a48eae2-93f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d1:ef:17:05:c8:11:cb:26:6c:ea:02:63:ba:
5c:a1:7d:ed:8a:e6:51:5f:9b:28:83:4c:29:d3:23:
56:42:8e:2f:9e:db:a2:c5:e8:d0:64:e2:b1:f2:14:
b8:e0:06:ac:94:46:fc:38:9a:df:72:19:e3:2e:7a:
a7:d1:f0:92:b1:26:89:20:ea:36:d4:fb:cb:33:d8:
88:15:1f:b8:91:3c:c8:21:7e:75:32:64:7f:e0:32:
54:3a:c3:b9:07:e0:ee:bc:da:1a:a8:6f:04:ba:67:
6e:52:9a:b2:e3:d2:f1:0b:55:d0:a9:85:3f:cf:e7:
a2:27:82:7a:9d:88:9d:fd:4c:91:d2:0d:ac:f6:77:
b0:44:aa:84:13:63:9f:ee:b7:86:0f:e4:2b:76:a8:
8b:b6:44:63:1a:69:ca:f8:57:6f:89:be:05:32:0a:
85:99:4a:18:e2:eb:94:1d:7c:59:3d:0d:b3:c8:24:
96:06:e7:06:94:f1:99:a1:d6:fc:ba:ed:d7:c1:84:
f4:38:05:87:fa:d5:08:93:95:c8:4c:b0:cf:4f:77:
da:98:95:5b:27:e1:cf:7c:e0:e5:d1:33:64:00:83:
dc:4c:25:2b:06:9f:5a:a9:97:66:51:00:3b:67:c2:
46:74:1f:e4:e7:89:6f:9b:d9:f0:27:67:75:11:77:
67:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:58:71:03:EE:F5:96:A7:F2:12:0E:19:AC:05:01:73:2E:4A:38:51
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/67E6914E779911F1AB573BE8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.240.0/22
45.202.252.0/22
Signature Algorithm: sha256WithRSAEncryption
bc:08:9d:21:08:c5:71:21:e2:4e:71:8c:e7:64:50:28:78:31:
a0:de:96:f8:98:32:c2:f1:1c:b5:a7:15:48:d2:6c:6e:f6:13:
82:d1:ce:11:cf:e3:ff:86:e6:ef:22:a4:cd:7b:92:fd:14:4c:
3f:71:a3:fb:ae:a2:c7:b0:3f:e6:f3:74:00:05:86:f8:d5:fe:
15:8e:65:2f:3d:c8:ed:65:4b:72:dc:6c:52:d6:43:21:30:b0:
d6:f5:9c:76:44:9f:8f:f4:1d:67:84:da:d2:32:4a:66:93:5b:
40:66:9e:fb:57:78:e0:74:49:90:1e:a2:bb:b2:a3:45:b7:23:
55:03:7a:82:4e:d7:73:5a:d6:91:d6:d6:22:86:c5:fc:44:21:
3e:60:ac:59:99:62:af:35:aa:a5:d3:7d:dc:3b:1a:99:ff:aa:
08:1b:12:ff:c4:59:14:ae:6e:47:e1:1e:56:d0:9b:f1:98:be:
1a:cc:24:db:e4:a6:41:91:50:76:08:30:dd:f9:c4:86:19:e7:
55:14:01:43:29:64:25:b4:9a:19:7b:ed:02:5c:3a:e1:0c:43:
db:46:de:47:4a:e2:11:df:fb:97:4a:8c:a1:cb:4e:f3:e6:70:
53:a3:c7:13:09:18:b8:c6:11:18:39:57:be:fd:b8:62:5d:8f:
1c:e1:f7:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 21:12:52 2026 by rpki-client