Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF347FF86E1D11F1A609E0BFCE1D38B0.roa
File: CF347FF86E1D11F1A609E0BFCE1D38B0.roa (raw, json)
Hash identifier: Vaxg2Xu2DKBvjHL/EoY83nXS5Dy74TfFTFKpXJL6C8w=
Subject key identifier: B9:F9:07:71:F5:E5:F8:BC:12:31:C4:9F:DB:D2:29:2D:B5:27:0C:C7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BF74
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF347FF86E1D11F1A609E0BFCE1D38B0.roa
Signing time: Mon 22 Jun 2026 09:36:14 +0000
ROA not before: Mon 22 Jun 2026 09:36:09 +0000
ROA not after: Tue 28 Jul 2026 09:36:09 +0000
asID: 202656
IP address blocks: 45.199.192.0/24 maxlen: 24
45.199.193.0/24 maxlen: 24
45.199.194.0/24 maxlen: 24
45.199.195.0/24 maxlen: 24
45.199.196.0/24 maxlen: 24
45.199.197.0/24 maxlen: 24
45.199.198.0/24 maxlen: 24
45.199.199.0/24 maxlen: 24
45.199.200.0/24 maxlen: 24
45.199.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114548 (0x1bf74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 22 09:36:09 2026 GMT
Not After : Jul 28 09:36:09 2026 GMT
Subject: CN=6a39020e-493a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:04:7f:03:50:a8:d6:d6:df:41:2a:0e:cb:0d:
7f:45:87:f2:1f:f8:8b:9b:d9:cc:8c:c9:9f:08:b3:
a4:39:d7:e3:5d:8b:51:9d:a0:d7:c2:52:8e:14:56:
34:08:bf:ce:04:e5:a3:cc:95:48:ab:48:1f:ea:a4:
de:27:99:03:9d:9a:51:80:54:da:1e:fb:68:d2:7b:
2a:a4:4e:74:c3:e6:1f:65:3d:cd:de:e8:0d:41:a9:
8a:22:3a:46:f9:76:dc:5e:6c:bb:40:9c:2f:41:67:
77:1f:70:6e:7c:09:ec:5f:40:23:a3:7c:70:ab:1c:
a5:2a:6b:0d:02:97:43:19:28:1b:79:4f:bc:08:88:
ab:ca:6d:05:ef:7d:5e:a1:ff:0e:d4:4e:8d:66:74:
7d:83:0a:f6:23:5e:04:82:03:f0:ed:26:17:cc:9f:
54:88:45:6f:e4:22:3e:e0:4d:e8:a0:94:00:14:02:
88:b9:af:37:9a:d3:2a:b4:59:da:b1:88:ec:e7:60:
41:09:38:67:04:4b:a2:e8:c1:67:07:83:0c:11:94:
01:e2:05:c2:6b:30:2b:52:9f:42:ee:cd:0c:79:8f:
6a:19:39:49:c5:46:d6:2e:e2:68:40:cd:fc:ce:86:
d4:1d:67:a6:08:09:19:20:4e:85:1f:32:2e:af:f6:
65:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:F9:07:71:F5:E5:F8:BC:12:31:C4:9F:DB:D2:29:2D:B5:27:0C:C7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CF347FF86E1D11F1A609E0BFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.192.0-45.199.200.255
45.199.252.0/24
Signature Algorithm: sha256WithRSAEncryption
71:5b:4b:71:f4:79:a5:9f:ba:a4:fb:e9:81:6e:df:f5:27:af:
83:ca:70:41:7e:50:d2:30:fc:42:59:8e:39:c4:00:2f:f7:95:
7f:b4:e2:c2:38:aa:5e:6f:ef:88:d0:33:3e:c1:f1:8b:f0:df:
be:37:e9:bb:93:8d:24:0b:88:22:c3:92:4b:92:b1:5e:a2:95:
51:9c:32:44:b9:61:81:ec:21:97:5d:55:5a:1a:59:fc:d3:88:
7c:c7:d7:4b:f6:13:00:d5:f4:d5:ab:f2:8f:73:67:36:42:bf:
11:c6:97:dd:1c:a3:76:df:e7:08:a3:eb:0b:50:99:ca:2d:d0:
e6:35:03:88:7a:d5:06:d0:d7:b8:e1:2f:12:e2:d0:0f:22:8d:
fc:80:55:4e:7b:49:2d:3b:73:d4:15:b1:61:71:c3:b3:bf:37:
37:47:d9:97:d3:66:ed:d6:05:d5:75:84:e8:4d:95:e0:02:d7:
8a:de:b8:fd:fb:8f:f2:62:c9:70:fc:c4:41:f4:2e:a7:5c:81:
1d:a8:c7:77:f3:e1:51:c0:b3:f2:1e:ee:bb:fe:eb:9d:9d:6d:
ee:90:c6:88:96:47:f0:4e:cc:0c:ca:fb:71:6b:8a:f0:d1:a5:
41:d5:a4:b0:da:e3:d1:07:ea:6b:bb:53:2e:b7:8c:23:2c:14:
57:24:d1:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:55 2026 by rpki-client