Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BDACCE8A716E11F1ACD257E3CE1D38B0.roa
File: BDACCE8A716E11F1ACD257E3CE1D38B0.roa (raw, json)
Hash identifier: SO/xsIINjsMgDFc+rZgyL+ZJ75tvihwY4cgdHXZE8FM=
Subject key identifier: 34:49:13:52:7C:81:E8:44:6A:F9:9C:24:9E:14:A7:E6:69:58:EE:6F
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C0B3
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BDACCE8A716E11F1ACD257E3CE1D38B0.roa
Signing time: Fri 26 Jun 2026 14:53:07 +0000
ROA not before: Fri 26 Jun 2026 14:53:02 +0000
ROA not after: Tue 04 Aug 2026 14:53:02 +0000
asID: 44509
IP address blocks: 45.207.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114867 (0x1c0b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 26 14:53:02 2026 GMT
Not After : Aug 4 14:53:02 2026 GMT
Subject: CN=6a3e9253-a933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f7:a0:0e:7c:11:92:e3:73:a2:d2:44:e3:94:
b7:8a:1d:ad:f4:ad:31:de:b5:8f:ee:52:ae:af:b6:
ae:d9:d4:1b:c8:b8:64:f2:8d:f5:26:64:16:3f:6d:
89:6d:26:f0:3c:fc:ab:09:95:5f:9c:04:c7:ca:1a:
a7:14:cc:16:29:6b:3f:cc:27:83:e8:9d:cb:ee:00:
2f:c0:bf:f7:54:fa:ee:27:74:32:43:de:b1:ca:99:
d2:a0:28:3a:ef:93:fb:75:25:8a:6f:fd:50:c9:25:
cd:ae:44:87:e9:ed:8a:51:e9:28:c7:20:aa:2e:62:
dd:db:f4:37:b3:98:1e:9c:61:8c:95:65:e2:fd:b7:
98:53:c1:5c:77:61:12:36:b3:1b:a6:d9:00:5e:c0:
78:01:8a:8f:9a:27:dd:99:2e:0a:0a:f3:57:da:70:
e9:07:77:01:3c:ab:0f:91:be:d7:b4:25:8b:8c:dd:
de:5e:b9:56:13:9f:98:ee:20:20:24:30:bd:ce:ef:
0e:bb:ae:c5:9f:77:4b:38:f5:1c:74:3b:07:19:56:
ca:de:a3:ab:40:94:a1:0d:e5:f8:00:61:90:1a:c5:
6f:13:78:25:b8:d0:4b:51:a8:fe:f3:ae:9a:5c:06:
aa:f5:3d:c7:12:7e:f4:7c:98:ba:c2:b2:e7:84:dd:
86:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:49:13:52:7C:81:E8:44:6A:F9:9C:24:9E:14:A7:E6:69:58:EE:6F
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BDACCE8A716E11F1ACD257E3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.40.0/24
Signature Algorithm: sha256WithRSAEncryption
11:bf:42:6e:9a:03:3c:a9:75:ff:e8:47:18:09:75:69:36:3e:
4e:7d:e0:99:2c:46:ad:e5:5a:ac:a3:07:72:eb:d4:53:83:4a:
67:85:55:b6:ed:10:be:a8:57:08:27:2f:6f:d9:2a:57:82:d6:
4a:88:d1:5c:98:55:ce:94:81:44:02:c7:2b:90:8f:d6:4c:e1:
4a:84:be:95:60:c3:0e:1e:30:f6:38:52:59:86:bd:b1:fc:7f:
f4:03:78:cd:49:58:be:64:c7:71:c8:88:b3:1b:82:ad:5e:81:
fc:04:47:99:da:49:df:3e:26:9a:47:ae:2a:41:43:cd:47:06:
2d:2f:09:7e:0e:68:7f:f8:73:02:5f:b5:ff:2e:ce:05:cd:c6:
6a:a8:30:5a:e4:50:61:15:2b:2b:ab:62:72:e5:96:3a:81:2f:
bc:d3:77:a7:2f:da:49:d0:ab:f1:c3:be:dd:7a:53:44:75:05:
d2:7c:fd:54:35:ce:8d:d1:29:73:da:25:cd:bf:ba:57:2d:e3:
d9:cf:05:d5:59:a0:9c:7f:e7:ba:4c:c5:70:2a:ab:1d:3e:df:
b9:31:7e:09:22:16:b8:1c:61:1f:01:e8:1b:cc:a9:ee:98:d8:
c8:ce:61:fb:f3:f3:c1:13:4e:1e:b2:72:9a:7a:2d:72:4e:f4:
d7:d2:d6:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:43:00 2026 by rpki-client