Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/85ABF63E688E11F1AAEBEAAECE1D38B0.roa
File: 85ABF63E688E11F1AAEBEAAECE1D38B0.roa (raw, json)
Hash identifier: 74LmSys/NGXVv3+ViXDuguuhvvpBzn9DtpFB9TaBLLY=
Subject key identifier: 49:7D:F3:83:1E:65:6E:4F:60:46:60:CD:A8:3D:43:53:46:8F:E4:25
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BD17
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/85ABF63E688E11F1AAEBEAAECE1D38B0.roa
Signing time: Mon 15 Jun 2026 07:47:56 +0000
ROA not before: Mon 15 Jun 2026 07:47:51 +0000
ROA not after: Mon 20 Jul 2026 07:47:51 +0000
asID: 29802
IP address blocks: 45.200.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 03 Jul 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113943 (0x1bd17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 15 07:47:51 2026 GMT
Not After : Jul 20 07:47:51 2026 GMT
Subject: CN=6a2fae2c-2b33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c6:33:9d:82:48:59:d0:bb:00:fc:fd:ea:0e:
6c:89:eb:1a:74:4f:4d:1d:16:26:bf:56:c0:f6:99:
ab:50:d1:75:66:f5:95:d8:2a:49:d7:3a:86:c2:7e:
71:79:79:7b:54:87:73:5d:4c:37:b6:cd:fd:0f:75:
4a:71:de:cc:f8:30:48:18:4c:a1:84:61:49:75:9d:
13:a5:4e:0a:ff:40:9d:54:be:bb:18:de:cb:df:c1:
33:77:83:95:b1:0d:8d:7e:10:e3:f5:63:da:ee:98:
db:0d:0b:76:50:72:42:fa:23:f9:1b:89:c8:35:88:
b9:c0:49:5c:56:12:e2:16:4d:9e:13:4d:ad:1c:c0:
48:13:47:6a:73:a2:02:3a:4d:25:07:31:93:f8:b1:
c8:fb:44:90:70:b0:22:44:25:36:4b:39:69:d1:c3:
bf:a0:a1:7f:0a:3f:25:37:2a:cc:cb:b6:0b:f1:32:
e9:ad:04:12:1a:2c:f9:ab:84:01:68:8c:27:82:4a:
8f:79:52:3f:7a:39:c0:b1:01:21:f0:c6:3d:c6:10:
02:98:62:27:25:5f:fd:cc:cc:65:3a:8e:62:27:7a:
89:37:61:0e:76:f5:c0:42:2d:96:26:8c:83:94:5c:
fc:85:54:1a:80:9c:dc:7f:01:a3:e7:95:8b:34:ef:
9b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:7D:F3:83:1E:65:6E:4F:60:46:60:CD:A8:3D:43:53:46:8F:E4:25
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/85ABF63E688E11F1AAEBEAAECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.133.0/24
Signature Algorithm: sha256WithRSAEncryption
03:b5:5d:53:71:2c:dd:e2:b8:5d:81:d6:68:16:7a:d7:3d:98:
e7:b2:fc:aa:d2:e9:e9:6f:1c:f0:c0:75:30:eb:67:93:92:ac:
be:75:f3:aa:58:fd:f7:21:c4:0e:5f:7d:a6:9e:25:bb:d1:f1:
33:96:e1:ef:17:1c:c8:92:34:19:a2:aa:93:d6:29:0b:ac:ad:
e8:81:ae:78:eb:bb:f7:e6:aa:fc:31:8d:ef:ac:42:35:ac:d1:
a2:91:57:6e:60:21:aa:ae:7b:ab:08:dc:10:43:9f:fa:8c:13:
35:fc:16:82:2b:c8:f5:e2:58:e4:68:69:24:ac:a4:68:b3:e4:
4e:d8:d9:a0:cd:67:72:e4:89:34:3f:bc:ee:14:e6:53:03:6d:
07:c7:39:50:df:82:41:af:69:eb:44:5a:ca:1f:40:78:79:79:
15:dc:0b:a0:12:f7:e2:63:b5:63:59:58:9a:df:df:6b:11:a6:
94:fc:82:04:f9:67:2a:20:13:d6:be:70:4f:1e:70:4b:cc:ee:
13:02:b4:00:40:43:9d:e1:4d:72:b3:b8:7e:9c:ab:09:81:2c:
f2:85:8a:d4:3c:56:19:45:c8:4f:65:0a:e6:50:ed:00:49:60:
31:93:e6:d9:98:24:d4:f7:f6:3a:7a:d1:39:7f:d9:68:a5:21:
63:7a:d1:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 13:51:18 2026 by rpki-client