Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA780E4634CA11F18856EFD6CE1D38B0.roa
File: AA780E4634CA11F18856EFD6CE1D38B0.roa (raw, json)
Hash identifier: 1aksdbm7wCefjBTXuL2n2fMNE4A4lMEhjt8xkLtiSIs=
Subject key identifier: 15:8F:0B:C1:BE:7B:A1:11:97:E9:28:8E:E1:C0:AF:D5:ED:2D:37:10
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01ABA8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA780E4634CA11F18856EFD6CE1D38B0.roa
Signing time: Fri 10 Apr 2026 10:47:28 +0000
ROA not before: Fri 10 Apr 2026 10:47:22 +0000
ROA not after: Sun 10 May 2026 10:47:22 +0000
asID: 54801
IP address blocks: 45.200.14.0/23 maxlen: 24
45.200.16.0/23 maxlen: 24
45.200.18.0/23 maxlen: 24
45.200.20.0/22 maxlen: 24
45.200.24.0/21 maxlen: 24
45.200.32.0/19 maxlen: 24
45.200.49.0/24 maxlen: 24
45.201.214.0/23 maxlen: 24
45.201.216.0/21 maxlen: 24
45.201.224.0/21 maxlen: 24
45.201.240.0/20 maxlen: 24
45.204.0.0/24 maxlen: 24
45.207.224.0/19 maxlen: 24
45.207.224.0/20 maxlen: 24
45.207.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Apr 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109480 (0x1aba8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 10 10:47:22 2026 GMT
Not After : May 10 10:47:22 2026 GMT
Subject: CN=69d8d53f-47bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c5:09:50:97:38:f2:99:c8:4e:1e:c8:63:98:
40:18:f8:6c:34:ad:53:7a:59:5f:49:7a:0c:e7:a0:
a0:16:2a:d9:12:76:dd:42:0f:5b:83:e6:21:80:a0:
cb:f5:c3:79:50:84:7a:02:86:e1:c8:d6:d1:e6:c3:
9c:1d:7b:bb:54:06:61:7c:04:2d:b9:b0:6b:2c:8d:
30:ef:44:92:df:a6:d6:a3:d8:2c:c0:f5:77:b8:37:
e2:cf:80:51:9c:97:55:f3:82:a4:47:e5:a5:12:0d:
72:3d:0f:4b:c7:bd:f3:23:81:31:99:65:2f:26:5a:
86:57:c2:65:68:89:aa:07:c8:cb:14:24:c6:ad:0c:
82:5b:83:16:66:7b:14:59:ca:69:cc:ef:bb:7a:8c:
62:bc:eb:6d:33:ac:2e:99:20:a1:1a:0a:e2:9d:8e:
b3:ce:43:e2:6b:78:3b:eb:6b:f5:ed:34:e6:d2:34:
29:6b:01:09:0e:b5:19:78:11:5b:4a:4b:4d:13:63:
7c:00:01:5a:3a:ef:df:2b:03:82:77:6b:9e:53:4a:
a0:a0:02:17:1c:5d:19:81:78:d3:a6:46:b2:5d:4e:
0a:23:df:0f:0c:7f:c4:4e:f7:99:3d:ae:0c:3f:78:
20:0a:9c:ab:4b:49:42:8e:ed:02:4f:1b:91:97:11:
dc:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:8F:0B:C1:BE:7B:A1:11:97:E9:28:8E:E1:C0:AF:D5:ED:2D:37:10
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AA780E4634CA11F18856EFD6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.14.0-45.200.63.255
45.201.214.0-45.201.231.255
45.201.240.0/20
45.204.0.0/24
45.207.224.0/19
Signature Algorithm: sha256WithRSAEncryption
a2:63:fc:a4:1d:70:f9:ed:e3:73:e2:17:82:ae:cc:2e:26:20:
05:42:2b:4c:59:43:e9:3a:4d:26:06:be:d3:cd:55:ec:0a:f2:
6a:e9:fb:d9:df:b4:34:f0:5c:67:f9:c1:b3:25:e1:28:56:01:
32:e8:03:3a:13:22:b5:d1:92:e9:e6:46:2a:39:84:a3:ed:d1:
40:f5:2c:41:1b:47:25:4b:17:10:04:d3:ff:83:43:5a:99:ae:
2e:55:53:a4:d8:32:5d:34:e9:22:ab:b5:da:c4:85:57:44:b8:
03:55:26:16:c9:99:7d:97:dd:c6:68:5f:2f:89:9c:7a:0c:0e:
79:5d:60:1c:2e:b3:e2:e3:44:c2:58:31:48:15:e8:c1:69:8d:
f7:50:0a:6d:de:d3:9b:c5:3d:96:ef:cb:3c:72:be:01:94:84:
3a:be:63:a1:4b:36:2c:18:d2:cf:13:7f:d0:7b:9b:a0:95:32:
60:05:dd:9d:da:f8:6d:a6:a1:82:46:0f:54:a7:63:a8:70:43:
2e:51:ce:b0:70:20:a8:4d:22:fa:78:06:ca:03:5e:49:67:cd:
bc:a6:3a:ba:a0:be:45:de:e9:b1:d3:6f:44:47:d3:b4:04:e4:
05:11:5b:1f:16:95:0f:9f:52:04:70:15:d5:98:e9:99:97:97:
73:99:ff:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 14:30:54 2026 by rpki-client