Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9FE1139E7E0B11F1B4F965CECE1D38B0.roa
File: 9FE1139E7E0B11F1B4F965CECE1D38B0.roa (raw, json)
Hash identifier: JFV5gM0oNyBVurcGY6wxM+nAi3ih6OIdiopS0jFx7pc=
Subject key identifier: DE:1B:15:18:08:6B:BF:9A:73:B5:BF:34:6D:C7:E1:9D:5B:49:85:BF
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C4B4
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9FE1139E7E0B11F1B4F965CECE1D38B0.roa
Signing time: Sun 12 Jul 2026 16:06:22 +0000
ROA not before: Sun 12 Jul 2026 16:06:17 +0000
ROA not after: Sat 10 Jul 2027 16:06:17 +0000
asID: 328608
IP address blocks: 45.205.42.0/24 maxlen: 24
45.205.43.0/24 maxlen: 24
45.205.44.0/24 maxlen: 24
45.205.45.0/24 maxlen: 24
45.205.46.0/24 maxlen: 24
45.205.47.0/24 maxlen: 24
45.205.48.0/24 maxlen: 24
45.205.49.0/24 maxlen: 24
45.205.50.0/24 maxlen: 24
45.205.51.0/24 maxlen: 24
45.205.52.0/24 maxlen: 24
45.205.53.0/24 maxlen: 24
45.205.54.0/24 maxlen: 24
45.205.55.0/24 maxlen: 24
45.205.56.0/24 maxlen: 24
45.205.57.0/24 maxlen: 24
45.205.58.0/24 maxlen: 24
45.205.59.0/24 maxlen: 24
45.205.60.0/24 maxlen: 24
45.205.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115892 (0x1c4b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 12 16:06:17 2026 GMT
Not After : Jul 10 16:06:17 2027 GMT
Subject: CN=6a53bb7e-5c52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d5:ee:9f:a4:25:f6:ea:20:51:84:54:5f:88:
52:85:ba:e5:8e:4d:df:d8:32:b5:d6:1a:41:c5:c8:
90:3a:1e:12:e8:d7:8d:1a:99:28:4e:6d:4e:fc:fa:
38:79:0e:02:fd:f6:31:7f:11:a0:c8:47:dc:30:c2:
18:5f:10:65:ae:8b:79:58:c3:1d:03:b3:10:94:c3:
c1:cd:ea:25:8a:a0:ae:1b:0b:5c:e4:fe:4e:ed:00:
36:37:07:79:db:25:7d:43:2e:0a:8e:b2:f3:88:9f:
11:76:22:67:99:3c:ea:c0:35:ed:9a:9d:9e:18:12:
64:20:bd:9c:a8:f3:b8:ac:ec:7b:69:57:15:8b:8e:
17:99:1e:7b:a3:3f:a7:6c:42:62:0b:0a:2d:15:35:
25:c8:56:a4:ed:ca:a2:46:97:95:5d:39:50:66:91:
d8:81:c1:4b:c3:ed:ea:19:f3:9a:77:23:46:46:a7:
1b:5e:d8:cc:ec:73:81:fe:20:f0:2f:54:84:c5:44:
4e:af:9b:fc:ea:d7:10:47:99:e5:9b:e5:5c:b8:ea:
00:c5:dd:ec:82:b6:eb:4a:6f:18:54:fa:73:92:92:
83:a0:55:b3:fe:ab:5a:0b:27:ac:ec:83:1e:c3:5e:
c8:90:fc:f3:df:d6:b1:79:74:52:dd:46:86:7a:9d:
86:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:1B:15:18:08:6B:BF:9A:73:B5:BF:34:6D:C7:E1:9D:5B:49:85:BF
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/9FE1139E7E0B11F1B4F965CECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.205.42.0-45.205.61.255
Signature Algorithm: sha256WithRSAEncryption
a3:fc:41:f7:50:eb:d3:1c:56:7c:f1:49:69:20:f9:11:7d:3b:
e9:3e:94:74:00:d3:61:7e:ad:78:3c:c6:11:4c:f9:1f:bb:45:
2a:3b:3e:88:ba:da:d9:7c:81:ab:dc:8f:84:7c:68:84:1f:1e:
13:6d:e4:94:69:2c:f5:0c:ad:c8:af:1a:d2:17:0c:84:f7:16:
31:c1:4e:55:8d:2b:52:d0:e5:b3:89:dc:43:7d:be:6e:14:05:
1f:88:c3:80:60:3f:f8:b6:04:a7:ea:4c:c0:99:d2:fd:8c:f1:
41:a0:71:be:c5:e6:b4:cd:33:ef:b0:1a:40:c3:22:4c:84:1f:
77:99:3a:2e:16:b3:8b:d0:dc:36:48:51:dc:51:a3:74:b9:7c:
fa:4e:aa:76:e3:fa:b9:93:79:75:47:19:c5:c5:f7:4d:8f:ba:
c9:b5:72:09:e0:3e:08:af:ac:59:1f:7f:36:76:19:e1:38:6d:
d3:1d:a3:a8:42:c5:b7:31:7a:b0:a0:54:4c:50:ba:5c:78:4f:
c4:41:d4:1a:34:a0:d3:0c:59:7f:6e:44:9e:1b:4f:9c:54:4f:
a0:b3:7b:a2:6d:3c:c4:ad:64:ed:ec:46:6e:57:a9:9a:cd:d5:
9d:e0:6e:f0:68:e1:50:77:b8:c1:97:47:c1:15:1e:66:e2:07:
43:54:49:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:43:11 2026 by rpki-client