Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BF2EACA64F9011F1B3EC68AFCE1D38B0.roa
File: BF2EACA64F9011F1B3EC68AFCE1D38B0.roa (raw, json)
Hash identifier: Yd3h04hNZoB1zspKT3MTH9HDvcFImVPrd4d3lt7gmNY=
Subject key identifier: 14:47:B2:1F:B3:24:47:B0:00:56:13:74:6E:29:AE:63:85:94:05:33
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B485
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BF2EACA64F9011F1B3EC68AFCE1D38B0.roa
Signing time: Thu 14 May 2026 12:30:53 +0000
ROA not before: Thu 14 May 2026 12:30:48 +0000
ROA not after: Mon 14 May 2029 12:30:48 +0000
asID: 17561
IP address blocks: 45.196.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111749 (0x1b485)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 14 12:30:48 2026 GMT
Not After : May 14 12:30:48 2029 GMT
Subject: CN=6a05c07d-f8a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:9b:6c:4e:f1:5d:86:34:ef:5c:d1:e8:e6:07:
51:b0:3d:ee:ca:77:2d:09:be:6e:87:b0:69:12:39:
8b:93:0a:8b:c7:b4:09:ff:3d:a0:0a:d1:d4:5b:15:
be:39:58:df:ff:66:d2:17:78:20:f5:35:80:87:a6:
bf:fc:12:b2:b8:e6:35:83:ce:6b:9a:0b:a0:77:b5:
9b:92:b7:04:1a:cb:3b:ee:44:4d:a0:bd:71:a8:5f:
c0:fc:db:be:67:2b:0b:99:7f:46:96:93:d9:01:8b:
a3:5f:d1:4e:5d:73:34:87:ac:57:00:6e:a2:f8:43:
77:81:38:e9:31:d9:63:63:7e:6b:ee:07:e9:ff:e2:
2b:85:0f:90:3e:ed:b1:5c:a2:75:c4:b1:7a:ea:68:
7b:3f:e5:2a:0b:a8:34:f6:9f:a8:c2:a8:46:64:f8:
b8:50:21:fd:68:cc:43:ab:42:61:ea:f7:1b:57:98:
2e:10:9c:9f:89:65:97:87:ef:bb:3e:e0:49:44:28:
08:a1:c9:83:ba:ef:8c:09:bb:37:a6:13:a8:42:39:
5d:60:da:70:17:70:6a:b9:fe:76:06:6e:47:7d:65:
f5:91:59:ce:80:64:b5:17:43:ef:86:d4:c3:ef:e3:
8b:cc:42:26:81:17:b5:87:6b:1b:43:09:cc:3a:cc:
48:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:47:B2:1F:B3:24:47:B0:00:56:13:74:6E:29:AE:63:85:94:05:33
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BF2EACA64F9011F1B3EC68AFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.208.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:19:1b:3b:3c:e6:7c:5a:dd:df:c8:1d:75:9b:3e:ca:bd:0d:
2e:0a:bd:0c:6f:50:03:4f:3e:07:e4:d1:c0:03:32:db:4d:f6:
e9:54:a6:b1:a0:f8:0c:d2:52:9d:ea:af:83:d8:00:ad:38:1d:
3f:1b:09:bc:d0:e9:dc:6e:a6:51:a1:0c:01:22:83:4b:95:c3:
0f:80:19:b3:32:e4:0f:4a:cb:b1:72:6b:b5:2e:e9:bc:31:45:
70:78:c5:60:57:e1:b8:48:e1:4f:2f:a3:c4:be:ee:3a:78:50:
4d:43:42:79:eb:86:2c:ef:2c:d3:35:27:a0:98:84:af:c6:20:
aa:65:31:b3:6a:8e:f6:ff:29:d4:b2:ff:87:78:95:11:bb:2d:
7b:22:78:7c:36:8d:27:b3:32:2a:45:dc:af:eb:e8:1d:51:ed:
7c:ae:3e:71:fb:78:85:b8:01:5b:bf:b6:cf:4f:35:d9:d4:1e:
6b:fb:f5:42:9a:7f:42:a9:d0:99:3d:f9:1d:6f:23:c0:1f:27:
5b:a8:57:ad:0e:22:64:9a:b7:bb:45:c6:13:5c:5b:8f:50:76:
2b:df:fd:4b:fa:5b:39:4a:e5:e1:6d:3b:50:91:84:f0:97:c2:
5c:5c:2a:1f:7a:23:fc:31:ac:1d:2d:36:c2:e5:1a:fb:d2:03:
54:43:65:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:06:53 2026 by rpki-client