Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BDB06CF2810411F19579A1AFCE1D38B0.roa
File: BDB06CF2810411F19579A1AFCE1D38B0.roa (raw, json)
Hash identifier: AX8+Z/PqtpenAswkMw2GTZQyiQLJ+/2Nxpi2RzCF7Co=
Subject key identifier: FA:85:83:6E:2D:DC:C4:25:3A:04:E7:87:7A:7F:DE:CC:13:B1:6C:FE
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C56C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BDB06CF2810411F19579A1AFCE1D38B0.roa
Signing time: Thu 16 Jul 2026 10:54:39 +0000
ROA not before: Thu 16 Jul 2026 10:54:35 +0000
ROA not after: Sat 29 Aug 2026 10:54:35 +0000
asID: 212238
IP address blocks: 45.195.111.0/24 maxlen: 24
45.196.201.0/24 maxlen: 24
45.196.208.0/24 maxlen: 24
45.196.214.0/24 maxlen: 24
45.198.96.0/24 maxlen: 24
45.206.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116076 (0x1c56c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 16 10:54:35 2026 GMT
Not After : Aug 29 10:54:35 2026 GMT
Subject: CN=6a58b86f-9880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:02:a7:0e:be:99:20:c8:44:27:fa:75:4a:41:
35:bf:75:5f:94:1b:66:82:4e:be:90:1e:b1:6f:6e:
62:bf:55:d2:c4:84:b7:b6:a7:8c:04:54:db:72:35:
be:96:40:ca:98:89:f9:c0:d5:d9:7a:ed:c2:1f:0e:
1a:8c:ad:14:e6:8a:aa:70:f5:44:ca:a6:84:bd:d4:
5f:62:aa:13:ba:98:07:f4:fb:3c:16:0b:39:dc:da:
d1:0b:ea:a1:8a:06:0c:04:63:dc:c5:69:ba:a7:5f:
e8:a5:51:a8:bc:6a:86:75:d4:ae:f0:14:4d:19:46:
4d:6e:6e:6e:fe:81:4d:60:71:f3:0d:1a:56:46:68:
0e:88:ac:b8:66:32:92:ab:db:ce:39:d2:0e:1f:77:
4f:06:2b:98:98:65:82:d6:d8:9b:9f:3e:57:d2:9e:
06:d8:7f:53:32:2c:dc:54:6e:6a:57:c4:25:0c:4b:
c7:b1:24:af:02:49:43:f8:21:4e:ae:14:f8:89:79:
f3:a3:24:0d:2f:2e:60:d9:f2:25:35:44:43:d7:20:
8b:81:a3:a6:70:af:f7:01:c1:b0:2f:40:9d:87:f9:
4f:35:b9:a5:80:d2:76:34:8f:27:1d:6a:f8:43:33:
0f:ee:fa:06:6e:82:df:65:20:5a:ee:02:bb:58:c5:
4a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:85:83:6E:2D:DC:C4:25:3A:04:E7:87:7A:7F:DE:CC:13:B1:6C:FE
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BDB06CF2810411F19579A1AFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.111.0/24
45.196.201.0/24
45.196.208.0/24
45.196.214.0/24
45.198.96.0/24
45.206.5.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:c2:43:11:f0:61:b3:38:ee:45:7a:36:7e:4f:43:b7:ff:4b:
7a:e9:67:19:cf:08:b8:3c:03:62:3c:2f:1e:ff:5d:44:49:fc:
8c:dc:3d:fb:f6:5c:39:5e:17:d5:1c:7d:2e:d9:fa:1d:be:1a:
e6:1b:b1:4c:90:a1:e6:20:d6:a6:66:e0:24:8a:0c:c1:6b:a3:
18:d1:47:c8:8b:48:22:d8:eb:82:4b:ba:45:be:37:70:78:7a:
09:80:59:1f:3a:83:9f:ee:d1:49:9d:9e:81:ee:c4:89:30:c1:
c4:0a:b9:87:bb:dd:65:74:e9:14:5e:3e:ef:4d:58:2d:e4:4a:
47:1b:78:06:d0:68:45:b1:39:9d:54:e1:a6:5e:f3:e2:8f:97:
5d:b9:2c:78:8d:e0:2d:4b:9f:a1:b5:f7:1d:61:b0:7e:cf:1f:
99:4a:64:42:d9:3d:ae:85:21:1c:69:c4:19:59:a7:d0:bb:fc:
45:9b:be:4b:5f:3d:20:9d:9e:3e:a8:e6:a0:30:78:ef:d4:17:
ce:12:46:a2:46:e6:0d:39:d6:64:41:ee:89:35:31:65:08:a9:
bc:b5:a8:30:c5:b2:77:69:60:f9:3d:19:bd:32:6e:57:76:e0:
b6:5c:72:c5:ad:b0:cf:56:7d:82:86:e7:0c:ce:1e:ff:1a:c6:
5e:2b:26:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:43:09 2026 by rpki-client