Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AE6407F64F0711F1BE6FE8E4CE1D38B0.roa
File: AE6407F64F0711F1BE6FE8E4CE1D38B0.roa (raw, json)
Hash identifier: BuOakdTcChm7wqeZk2j/SoLjspUAapsV+zHAlYiPmHA=
Subject key identifier: A3:4F:9E:F0:FC:59:9B:F3:D1:1B:1D:E1:AE:B4:C2:49:A9:C0:B9:45
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B455
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AE6407F64F0711F1BE6FE8E4CE1D38B0.roa
Signing time: Wed 13 May 2026 20:09:44 +0000
ROA not before: Wed 13 May 2026 20:09:39 +0000
ROA not after: Mon 08 Feb 2027 20:09:39 +0000
asID: 136907
IP address blocks: 45.202.128.0/19 maxlen: 24
45.202.160.0/20 maxlen: 24
45.202.176.0/21 maxlen: 24
45.202.184.0/21 maxlen: 24
45.203.40.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111701 (0x1b455)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 13 20:09:39 2026 GMT
Not After : Feb 8 20:09:39 2027 GMT
Subject: CN=6a04da88-3745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9d:6a:bb:87:66:85:af:2f:7f:d0:00:0f:44:
c9:61:80:c6:3a:a5:a0:3f:a2:ce:35:cb:16:6f:d7:
51:fe:3b:c2:5c:b2:15:e0:42:ab:bd:62:db:f2:db:
92:73:4d:11:b5:0d:f3:93:66:ec:a8:a7:a5:70:b4:
0d:a7:76:bd:38:92:77:62:9c:60:a1:13:06:72:aa:
73:38:fc:15:04:82:b7:19:1c:fd:15:91:84:ae:15:
2c:a7:f7:6e:41:d8:00:9f:9e:e8:bf:d7:e4:19:f9:
2e:ea:14:99:ca:10:d4:bf:2b:96:59:05:59:04:e6:
10:57:55:e8:33:76:09:34:59:bc:9e:59:71:83:c5:
2e:2d:04:30:c6:ee:b4:e3:9a:c9:0e:af:fa:6e:8b:
38:d0:b0:71:12:75:3e:ca:3b:b5:d4:5b:45:ce:be:
c4:6b:45:e3:3c:76:f1:34:fe:fe:13:03:79:76:cf:
e2:1b:6c:d9:ff:d7:d8:a5:c5:b6:f5:0e:4d:30:96:
e9:f4:30:6b:66:7b:ac:c0:3d:2b:27:08:7b:ea:bc:
f1:1f:ed:61:ad:1e:8b:ad:0e:ff:1a:58:bf:5f:62:
c2:c1:99:1a:b0:d6:bb:59:ea:65:7d:b9:ee:0b:e8:
7b:8c:d8:c7:8e:b1:8d:6e:6b:87:ac:bf:48:6d:54:
9b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:4F:9E:F0:FC:59:9B:F3:D1:1B:1D:E1:AE:B4:C2:49:A9:C0:B9:45
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AE6407F64F0711F1BE6FE8E4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.128.0/18
45.203.40.0/21
Signature Algorithm: sha256WithRSAEncryption
1f:9c:5c:dd:e0:06:57:5d:a6:e7:75:21:e8:8e:2b:62:33:6f:
a1:85:33:0e:ef:d7:34:f9:18:c9:6b:0a:0d:16:1b:33:67:90:
e0:91:89:e3:f3:98:d3:e4:d9:0b:5d:57:65:40:82:7d:2f:5e:
dc:84:b3:67:ea:e5:df:fb:c6:5a:66:7f:06:ec:85:2b:21:26:
ba:df:4e:8d:83:f4:a7:28:23:0f:bf:84:07:56:54:53:0e:77:
14:32:c7:ba:12:d4:59:35:9d:70:ee:e6:9c:5e:70:b5:3e:41:
87:03:7c:08:d9:b5:80:05:cf:a4:34:aa:d7:e9:79:15:2a:2d:
31:e6:40:38:ef:b8:79:bd:55:75:2a:36:9a:05:41:3e:2e:7e:
c0:e1:ee:2f:a1:65:85:34:0a:db:83:b9:5e:88:0b:fa:a8:32:
7d:34:57:f1:28:5b:2f:4a:3d:38:13:0d:e6:54:f4:b8:2b:94:
5f:7f:7f:b2:7a:b7:1e:13:16:b7:b4:01:7c:8c:d0:3e:d2:34:
65:dc:6b:e0:20:01:43:fe:a8:6b:dc:43:d9:46:0f:3f:64:79:
44:69:eb:34:26:d7:22:6b:9d:18:f7:0c:c1:2c:51:3f:93:04:
68:4f:be:cb:b2:ee:1b:5d:56:e0:96:b7:6b:de:d2:f9:c1:7e:
c1:e0:16:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:14:00 2026 by rpki-client