Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CBE53C425C0311F19B0832F9CE1D38B0.roa
File: CBE53C425C0311F19B0832F9CE1D38B0.roa (raw, json)
Hash identifier: ILCXy6ZFCHBHw9i2JDNUwJ7Ldwx1BiYUbQVkJor8FUM=
Subject key identifier: 78:97:A9:57:90:25:1E:01:9B:C7:EB:CA:B0:93:19:A1:6D:E8:B4:A9
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BACD
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CBE53C425C0311F19B0832F9CE1D38B0.roa
Signing time: Sat 30 May 2026 08:44:40 +0000
ROA not before: Sat 30 May 2026 08:44:36 +0000
ROA not after: Mon 06 Jul 2026 08:44:36 +0000
asID: 199707
IP address blocks: 45.202.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:26:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113357 (0x1bacd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 30 08:44:36 2026 GMT
Not After : Jul 6 08:44:36 2026 GMT
Subject: CN=6a1aa378-9763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:77:31:73:64:72:a7:3b:7c:e5:4b:3c:08:40:
9b:67:ce:88:ee:49:07:a9:a1:0e:2f:99:68:65:8a:
79:d1:1d:bc:1e:8a:95:21:15:17:7b:c4:3e:54:59:
c0:67:19:7f:7f:df:13:bc:ab:e0:17:3e:b8:5c:6d:
db:91:31:68:88:03:f1:24:18:48:27:e8:c8:c3:50:
a1:67:d1:0c:99:77:f9:36:23:82:e5:76:83:b0:57:
a5:c7:58:bd:00:01:69:38:c5:58:b5:a2:77:8a:4d:
86:91:1f:05:42:6a:14:9e:7e:76:dc:07:9c:92:29:
33:44:46:b8:b3:4b:ab:51:dd:8b:1f:13:60:09:ca:
60:93:9c:e5:d5:2a:48:60:e2:7b:66:f2:3f:f9:5f:
5b:25:d5:f5:75:21:46:ef:46:76:b0:09:a8:71:1d:
d1:34:ed:7b:46:1b:b0:45:88:e5:0e:63:58:9b:f6:
22:93:e0:b5:59:f8:dc:e0:6d:40:77:aa:a4:22:4f:
53:d8:77:7a:29:ab:e2:c3:27:87:c8:41:8a:55:c6:
b1:f1:16:e9:2d:87:7a:76:27:76:58:dd:45:5f:e8:
16:8e:e1:61:ab:68:0c:33:83:de:75:18:44:0c:09:
40:f1:0e:1f:66:d4:7b:cf:d2:5a:b5:6f:c2:4b:24:
71:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:97:A9:57:90:25:1E:01:9B:C7:EB:CA:B0:93:19:A1:6D:E8:B4:A9
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CBE53C425C0311F19B0832F9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.202.107.0/24
Signature Algorithm: sha256WithRSAEncryption
87:af:d1:27:ab:79:e3:5f:4d:9d:ee:e8:a6:e9:2c:04:d6:06:
9a:24:2a:ca:08:73:25:cd:c6:07:27:b9:df:a5:19:d4:7f:c5:
6c:93:51:66:9a:11:26:8b:c6:d3:05:08:db:40:83:1b:5a:b0:
fa:19:5f:3a:ab:43:d7:e5:d4:bf:f9:fd:ec:83:f6:f7:65:de:
84:20:79:a8:00:48:a0:92:47:fd:80:2a:b1:76:3e:87:a8:9e:
0d:6e:a0:41:cf:b9:93:45:dd:82:6c:5c:7d:a5:6c:e2:b3:18:
44:66:cf:82:cc:32:58:3f:0d:1c:e6:eb:d5:81:e8:34:18:12:
c4:2d:69:46:6a:ca:21:8d:f7:83:f0:06:68:d7:46:95:15:a3:
71:89:31:8e:65:22:6a:04:92:0a:0e:6a:81:95:76:41:28:cc:
39:f9:d6:fd:16:e6:14:cc:8a:95:8d:83:2f:6e:fc:91:ea:37:
d0:08:11:b7:2a:59:df:57:b3:e8:e0:a1:5c:26:6e:39:bc:5a:
69:fb:32:04:91:4b:dc:27:9b:6c:12:39:5d:41:95:01:29:03:
6f:79:50:cf:b0:6c:4d:c5:2d:fb:68:0c:9d:99:f4:0f:96:6f:
5e:3c:1d:1c:1c:73:e5:f3:aa:e2:eb:97:33:f2:fb:56:52:df:
cf:b8:4c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:28:49 2026 by rpki-client