Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BFFA43A05E9211F1AF17EFFBCE1D38B0.roa
File: BFFA43A05E9211F1AF17EFFBCE1D38B0.roa (raw, json)
Hash identifier: JI9gVHxuEP29glwc2D/mHJ9DuGtZHjZB3stDHY88TdI=
Subject key identifier: AA:EA:11:65:25:F4:C2:14:E0:69:0F:8B:80:1C:06:9C:94:B5:F6:97
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BB40
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BFFA43A05E9211F1AF17EFFBCE1D38B0.roa
Signing time: Tue 02 Jun 2026 14:53:01 +0000
ROA not before: Tue 02 Jun 2026 14:52:56 +0000
ROA not after: Tue 25 May 2027 14:52:56 +0000
asID: 23764
IP address blocks: 45.195.4.0/24 maxlen: 24
45.195.5.0/24 maxlen: 24
45.195.7.0/24 maxlen: 24
45.196.24.0/24 maxlen: 24
45.196.25.0/24 maxlen: 24
45.196.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113472 (0x1bb40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 2 14:52:56 2026 GMT
Not After : May 25 14:52:56 2027 GMT
Subject: CN=6a1eee4d-426f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c2:4e:54:52:83:64:c6:80:e5:92:e4:48:ce:
80:33:90:98:ec:41:e7:fb:60:cc:e0:69:79:f2:25:
75:46:64:58:65:de:19:eb:7d:40:92:f2:ba:38:7c:
e9:ef:c0:5a:a1:ec:bd:8e:32:88:16:d8:dc:7d:01:
ea:74:95:ac:c8:7d:19:6f:e7:17:17:b2:53:00:40:
1f:6e:23:b9:4e:da:20:e5:bb:6b:f8:2d:20:70:a4:
79:8b:c6:e3:70:46:4e:d3:7e:3c:51:77:c9:6a:c3:
6b:d3:db:f4:ca:5a:bf:02:2c:32:d9:68:08:31:1c:
4f:b1:17:95:8f:bd:91:d6:7d:5a:b5:a5:bf:6c:08:
18:35:57:38:1c:01:62:8f:2a:d7:c6:ce:a1:a1:c9:
91:52:57:16:8b:64:4f:31:82:89:12:b4:db:42:b8:
7f:ca:59:cb:5b:c5:12:f0:fe:c7:c3:ce:ca:c0:ae:
c8:12:09:22:98:1a:4c:96:2b:5a:4e:4a:fb:bc:e7:
43:ff:1a:5d:9b:f5:33:15:18:94:07:d4:7f:8c:c5:
1d:72:ea:ff:80:7a:77:67:c9:8b:e2:12:cd:27:63:
01:5a:27:ca:ef:b2:a5:94:c1:40:13:b4:c8:45:89:
e4:09:02:67:0a:f4:5f:d2:16:f6:e7:52:41:f3:c4:
ac:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:EA:11:65:25:F4:C2:14:E0:69:0F:8B:80:1C:06:9C:94:B5:F6:97
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BFFA43A05E9211F1AF17EFFBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.4.0/23
45.195.7.0/24
45.196.24.0/23
45.196.27.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:71:30:6b:36:c5:97:0a:a8:6d:c2:cd:33:39:ad:3e:4d:a6:
84:91:26:96:05:c4:30:a5:fe:71:a6:7d:62:76:cc:d9:37:fc:
ab:08:4b:e0:10:86:c4:06:de:c2:f6:50:63:89:2f:c5:fc:00:
9c:11:36:30:0b:1a:02:aa:25:ad:a8:6c:d0:87:88:3e:70:88:
c1:86:8a:25:a6:d0:4b:3c:a1:e3:6d:3c:7a:11:77:15:f9:0c:
9b:c9:5c:11:36:54:5c:73:3b:82:2a:c9:ee:3a:0f:c7:14:4e:
d1:7e:b2:f7:e7:9f:5e:b5:aa:5b:20:e6:6e:32:43:12:39:c5:
a6:a7:a9:1d:02:01:03:8e:37:d7:68:e7:7d:75:fd:7b:1a:fd:
55:55:19:0f:4c:b2:79:b1:8d:3b:14:8b:a5:2e:33:52:e0:e4:
2c:6f:b3:a5:cd:20:0b:55:aa:5e:cc:9a:f8:89:0e:85:22:a4:
aa:ab:8a:6d:5a:7a:1e:89:86:b6:7a:bf:b7:f4:21:cf:79:a6:
59:a9:4f:60:35:54:d6:93:96:13:24:fe:68:dc:a0:67:ba:0a:
8b:ae:4c:48:6c:41:3f:0c:6f:2a:2f:56:0e:8e:31:d1:b7:ab:
91:fd:44:89:dc:f8:0f:4d:3b:3b:4c:23:ed:63:ff:38:7c:2c:
c2:aa:b1:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:07:17 2026 by rpki-client