Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CBA650287AAC11F18C720117CF1D38B0.roa
File: CBA650287AAC11F18C720117CF1D38B0.roa (raw, json)
Hash identifier: JaxK6yf+edjkLmh9ghb6Eaig06p19XSFecMKRqGy5WA=
Subject key identifier: 67:DF:8E:F5:9F:6C:EA:26:02:F7:33:E8:1E:D3:A3:07:A9:F0:82:9C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C3A0
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CBA650287AAC11F18C720117CF1D38B0.roa
Signing time: Wed 08 Jul 2026 09:10:00 +0000
ROA not before: Wed 08 Jul 2026 09:09:55 +0000
ROA not after: Mon 20 Jul 2026 09:09:55 +0000
asID: 139646
IP address blocks: 45.200.14.0/23 maxlen: 24
45.200.16.0/23 maxlen: 24
45.200.18.0/23 maxlen: 24
45.200.20.0/22 maxlen: 24
45.200.24.0/21 maxlen: 24
45.200.32.0/19 maxlen: 24
45.201.214.0/23 maxlen: 24
45.201.216.0/21 maxlen: 24
45.201.224.0/21 maxlen: 24
45.201.240.0/20 maxlen: 24
45.204.0.0/24 maxlen: 24
45.207.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115616 (0x1c3a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 8 09:09:55 2026 GMT
Not After : Jul 20 09:09:55 2026 GMT
Subject: CN=6a4e13e8-642d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:81:b3:34:95:dd:9d:71:8f:9d:8f:dd:11:c6:
73:8a:ca:77:cb:b8:32:03:c8:c1:a1:12:c4:5e:94:
61:a7:f5:98:a5:04:25:7e:f4:ae:2c:8d:44:75:b8:
df:13:c7:28:93:92:88:ba:41:46:a0:68:1b:34:3b:
e0:4e:96:07:f6:1d:5b:d5:62:98:3e:73:ed:7c:ef:
f4:c3:5a:3f:90:99:e1:a0:9e:0a:70:91:66:a4:33:
be:a4:dc:46:ab:5d:7d:bd:98:0f:68:36:f1:39:1e:
14:59:0c:44:a0:b8:fe:99:37:66:48:c9:a9:c8:d4:
e9:0e:d7:79:5c:f7:e4:1f:0a:4d:2f:4a:42:01:35:
2c:9c:f7:c5:15:54:c8:e7:07:6e:a4:40:ee:da:87:
b8:27:02:d6:07:94:33:43:7d:52:3e:38:bb:d7:3a:
cf:c5:9b:96:42:b0:87:b4:95:6d:72:45:79:29:87:
69:09:12:3f:05:6a:07:d3:62:3b:35:35:2c:6f:c2:
80:cd:6e:c4:ae:9e:72:00:ae:ec:18:ff:fb:30:1e:
db:56:d0:a0:fc:a5:8e:07:2f:8a:8c:ad:13:ef:c4:
77:66:37:13:09:64:ad:69:0a:38:12:cf:13:69:f7:
1c:01:b3:7f:d1:69:ef:85:ff:7b:d8:94:6c:3d:b0:
11:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:DF:8E:F5:9F:6C:EA:26:02:F7:33:E8:1E:D3:A3:07:A9:F0:82:9C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CBA650287AAC11F18C720117CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.14.0-45.200.63.255
45.201.214.0-45.201.231.255
45.201.240.0/20
45.204.0.0/24
45.207.224.0/19
Signature Algorithm: sha256WithRSAEncryption
5c:5c:d5:b8:47:b5:ef:42:92:a5:5d:13:53:cf:b1:87:27:9b:
cf:68:c7:30:19:e4:af:58:50:95:f0:a5:e9:a0:8a:e5:27:60:
0a:ac:7e:cd:7c:04:2b:f9:da:44:dd:ac:be:cd:9a:54:9e:ce:
bf:71:42:1f:8f:46:77:30:f2:a6:7c:6f:93:aa:d5:8e:96:41:
7d:70:61:44:6f:20:9a:11:16:39:7f:40:98:d2:f8:09:1d:ec:
12:33:f0:94:6f:50:2a:bc:45:63:95:ff:cd:c1:34:3b:5a:cb:
a8:ce:84:b1:1b:4b:e0:6d:8a:08:de:57:99:08:47:61:22:23:
17:3c:cd:bd:18:32:1d:b0:3a:c9:17:9f:1b:fd:e4:6c:b7:98:
b7:db:80:0f:9d:fd:56:93:93:bd:a8:35:5e:a0:14:4b:a0:33:
6d:6e:04:c4:69:cd:a6:b4:89:b5:5c:47:40:07:bf:09:3a:fb:
80:d5:5a:ca:48:21:58:1b:61:d6:c8:d2:7b:04:e6:ca:37:af:
5a:23:34:0a:43:3a:a9:35:bc:38:46:1a:f9:26:33:06:f6:cd:
83:10:39:e4:e6:74:ea:fa:62:99:5f:53:fb:19:e5:29:78:15:
d8:f1:70:89:f4:8a:3c:cb:ab:f3:67:fd:53:8c:6e:fa:bc:53:
22:ce:3e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:10 2026 by rpki-client