Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BA0B6982934011F18C72FBB9CE1D38B0.roa
File: BA0B6982934011F18C72FBB9CE1D38B0.roa (raw, json)
Hash identifier: 5bJBo67JzeMki0IxJtE3SGA3CGYXD1Lmh7W1K2ko73U=
Subject key identifier: 2B:2F:4B:94:05:D3:99:6E:D8:04:18:EC:C5:E6:61:85:A0:8F:F0:88
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01CA94
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BA0B6982934011F18C72FBB9CE1D38B0.roa
Signing time: Sat 08 Aug 2026 15:49:24 +0000
ROA not before: Sat 08 Aug 2026 15:49:20 +0000
ROA not after: Sun 13 Sep 2026 15:49:20 +0000
asID: 142240
IP address blocks: 45.196.109.0/24 maxlen: 24
45.199.138.0/24 maxlen: 24
45.205.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 11 Aug 2026 00:26:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117396 (0x1ca94)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Aug 8 15:49:20 2026 GMT
Not After : Sep 13 15:49:20 2026 GMT
Subject: CN=6a775004-541a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:13:39:3a:12:e9:f8:e3:48:ce:99:4b:45:56:
3e:a0:61:43:ff:99:82:0e:83:fd:41:3d:fe:44:75:
c0:91:be:c3:4b:1d:d0:06:07:0d:eb:21:c6:a0:1c:
6e:ec:34:cf:a4:66:69:4b:5d:38:98:9b:a3:fc:99:
e2:66:cb:ee:67:ad:20:ac:4e:6f:81:13:fd:83:89:
28:1f:4e:58:aa:5e:48:b9:70:1b:2e:e8:af:a5:a9:
d6:9c:83:44:0f:58:aa:ec:aa:d4:3b:f9:8a:fa:4d:
3a:95:f5:61:dd:ec:04:63:41:0a:48:00:d9:36:e6:
b8:dd:29:21:f1:60:f4:f1:d6:28:e9:87:cf:c4:1b:
24:fc:49:ba:f8:d1:27:2f:66:8e:eb:59:ee:e6:80:
7a:b1:9b:23:2a:79:fe:1f:c4:55:d1:dd:15:c4:ba:
60:90:1f:03:41:cd:77:a9:8e:f3:7d:a9:28:df:54:
4c:51:fb:5c:48:2b:b5:f1:80:00:04:82:39:ee:99:
83:1b:f0:e8:ba:66:29:09:01:a8:bc:e5:61:d6:9c:
a3:ce:2e:ee:28:86:27:8d:5f:12:6c:ec:89:33:32:
bf:ab:0b:28:1b:da:aa:60:ea:7d:0f:27:9d:53:46:
42:8f:8f:a5:fe:9d:09:af:f8:28:a7:d9:97:df:37:
f9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:2F:4B:94:05:D3:99:6E:D8:04:18:EC:C5:E6:61:85:A0:8F:F0:88
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BA0B6982934011F18C72FBB9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.109.0/24
45.199.138.0/24
45.205.155.0/24
Signature Algorithm: sha256WithRSAEncryption
99:d4:15:90:5f:35:6c:e2:02:90:dd:23:f2:ba:de:4a:ba:b5:
d6:ac:47:20:53:05:49:3f:87:bd:c8:e4:60:6d:5c:cb:8a:5f:
17:9a:33:5d:51:2d:ce:c9:a6:1a:69:3a:f5:df:8b:37:ff:c8:
e7:8f:15:48:ee:38:ac:a6:9e:0c:ef:8a:c8:cb:28:8c:9e:30:
f7:e6:26:06:84:e4:60:55:e7:e8:ba:74:e0:32:ce:19:0b:bf:
e7:9e:3d:4b:3b:96:21:6e:eb:8a:53:8d:b8:75:15:e3:05:6d:
cd:8f:5b:dc:5a:7c:59:ca:2f:ba:44:76:4b:cc:35:c3:61:ed:
6e:5d:a7:a1:82:6c:70:2b:04:77:69:9d:f8:97:7c:e2:b6:b9:
4a:e9:13:a0:4e:b7:81:c2:b2:32:ce:3f:0e:cb:b5:7b:4e:bb:
2a:0e:c5:27:6a:68:aa:a0:84:0c:c5:fd:29:d2:72:04:33:d9:
f0:53:51:2d:1b:90:1e:19:e1:45:82:0e:11:0c:6d:2e:9d:18:
f0:8d:ff:79:fd:66:95:82:19:13:a1:7d:69:45:fa:fa:5a:ac:
f0:c4:6a:72:c8:77:e0:2e:05:59:4e:51:fa:ed:4f:03:4f:50:
2e:f7:ef:b3:63:96:e9:e4:5b:b7:82:a1:25:ec:d9:7d:6e:b2:
be:84:80:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 9 15:18:06 2026 by rpki-client