Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AC4B23F296DB11F1B249311ECF1D38B0.roa
File: AC4B23F296DB11F1B249311ECF1D38B0.roa (raw, json)
Hash identifier: ugYwr1SAV6QRpJ/leAKBSo2XYRnHyh2Rn2QnAuDACfo=
Subject key identifier: BF:62:4F:73:B1:9B:EE:05:DD:58:9D:47:72:96:AE:95:B9:CF:A5:F8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01CC53
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AC4B23F296DB11F1B249311ECF1D38B0.roa
Signing time: Thu 13 Aug 2026 05:56:06 +0000
ROA not before: Thu 13 Aug 2026 05:56:01 +0000
ROA not after: Fri 11 Sep 2026 05:56:01 +0000
asID: 14618
IP address blocks: 45.204.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 22 Aug 2026 00:26:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117843 (0x1cc53)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 13 05:56:01 2026 GMT
Not After : Sep 11 05:56:01 2026 GMT
Subject: CN=6a7d5c76-7fe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e0:5d:0a:43:54:43:7f:f7:2c:30:47:6a:8d:
95:a9:18:4c:eb:35:d9:af:87:88:f6:ac:78:2b:62:
25:05:39:bd:72:e7:fb:ae:3f:9d:77:77:d2:6b:9e:
d6:67:be:7e:4b:e7:67:5d:77:20:e9:48:de:fb:2f:
00:97:51:e7:1c:dc:e9:b3:47:ea:23:d4:aa:cb:8c:
1c:39:83:63:29:0c:77:ed:96:e4:55:71:af:96:65:
aa:59:77:47:49:e4:6d:ea:aa:e9:50:2c:dc:ba:17:
31:44:47:67:7f:b5:d1:d5:84:d5:c1:22:8e:49:e0:
27:08:19:47:4c:e1:04:95:4e:38:0e:e4:9d:c3:cc:
db:f6:08:fa:dd:84:90:95:d3:97:cd:15:4f:72:79:
93:c8:6f:99:f5:18:ac:bb:23:a4:ef:d9:39:d9:01:
97:31:f8:6e:c0:b4:b1:e9:69:d2:fc:ea:70:b8:c6:
d0:3c:7b:e6:49:98:a0:c6:45:19:b0:82:0d:12:98:
34:72:6f:6f:b5:bd:2e:67:e7:97:d9:9e:b1:0d:15:
85:9a:aa:d4:0e:a7:db:6c:60:7b:ad:84:f7:6e:99:
9d:45:c8:87:4d:6a:5a:97:81:0d:0f:f8:d5:26:1d:
92:9e:ec:46:85:b1:85:cb:c8:79:97:f3:f8:da:e4:
27:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:62:4F:73:B1:9B:EE:05:DD:58:9D:47:72:96:AE:95:B9:CF:A5:F8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AC4B23F296DB11F1B249311ECF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.204.70.0/24
Signature Algorithm: sha256WithRSAEncryption
30:05:c7:10:47:49:e1:59:63:e1:7f:95:f6:99:7b:ef:ce:db:
ce:30:2c:38:78:9d:c9:60:8e:51:cd:42:16:92:97:a3:a8:4b:
fb:66:0c:fb:12:c1:77:87:cc:74:3a:db:66:b0:9e:06:a9:f8:
af:29:c8:64:6d:64:2a:52:3d:ba:f7:ce:0f:93:40:71:af:6b:
d3:12:a2:2c:f6:54:88:29:eb:9f:84:1a:3a:c9:25:d2:8b:b9:
fb:02:d6:66:1d:90:01:a0:73:8b:b1:d4:ef:a7:ca:49:ef:7e:
7c:9a:85:48:c1:de:83:db:b4:37:8c:89:9d:91:38:5e:43:e6:
e5:65:e8:dd:48:2e:06:91:b8:22:28:da:59:2e:be:2b:b2:a6:
ee:27:e4:b9:98:87:fa:bf:62:e5:1e:5b:80:c7:c7:bb:a5:52:
26:64:9c:86:df:94:23:1f:00:5c:9c:58:cc:28:bb:88:13:f5:
ad:8e:b4:5e:91:a0:ec:d7:f6:37:a4:e1:37:c8:3a:82:3f:ef:
c0:6b:02:ca:bf:5d:a6:75:d6:c4:87:50:bc:9c:9a:9f:2a:4b:
60:32:b4:e7:06:65:42:9c:ff:2d:1e:63:a9:6a:bf:66:2f:33:
4b:88:29:ec:ef:f5:4e:40:bc:b4:f5:ee:1b:82:ce:7b:07:99:
bc:2a:c8:98
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAcxTMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwODEzMDU1NjAxWhcNMjYwOTExMDU1NjAxWjAYMRYw
FAYDVQQDEw02YTdkNWM3Ni03ZmU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAuuBdCkNUQ3/3LDBHao2VqRhM6zXZr4eI9qx4K2IlBTm9cuf7rj+dd3fS
a57WZ75+S+dnXXcg6Uje+y8Al1HnHNzps0fqI9Sqy4wcOYNjKQx37ZbkVXGvlmWq
WXdHSeRt6qrpUCzcuhcxREdnf7XR1YTVwSKOSeAnCBlHTOEElU44DuSdw8zb9gj6
3YSQldOXzRVPcnmTyG+Z9RisuyOk79k52QGXMfhuwLSx6WnS/OpwuMbQPHvmSZig
xkUZsIINEpg0cm9vtb0uZ+eX2Z6xDRWFmqrUDqfbbGB7rYT3bpmdRciHTWpal4EN
D/jVJh2SnuxGhbGFy8h5l/P42uQnIwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFL9i
T3Oxm+4F3VidR3KWrpW5z6X4MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9BQzRCMjNGMjk2REIxMUYxQjI0OTMxMUVDRjFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALcxGMA0GCSqGSIb3DQEBCwUA
A4IBAQAwBccQR0nhWWPhf5X2mXvvztvOMCw4eJ3JYI5RzUIWkpejqEv7Zgz7EsF3
h8x0OttmsJ4GqfivKchkbWQqUj26984Pk0Bxr2vTEqIs9lSIKeufhBo6ySXSi7n7
AtZmHZABoHOLsdTvp8pJ7358moVIwd6D27Q3jImdkTheQ+blZejdSC4GkbgiKNpZ
Lr4rsqbuJ+S5mIf6v2LlHluAx8e7pVImZJyG35QjHwBcnFjMKLuIE/WtjrRekaDs
1/Y3pOE3yDqCP+/AawLKv12mddbEh1C8nJqfKktgMrTnBmVCnP8tHmOpar9mLzNL
iCns7/VOQLy09e4bgs57B5m8KsiY
-----END CERTIFICATE-----
Generated at Thu Aug 20 21:54:44 2026 by rpki-client