Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D152C3DA757511F1A8DB1DDCCE1D38B0.roa
File: D152C3DA757511F1A8DB1DDCCE1D38B0.roa (raw, json)
Hash identifier: 97+aYkce3AoYx9rk+qs3+dLlmofQt+eBTcrzs98MtQU=
Subject key identifier: F4:0E:81:CC:72:17:70:F2:27:FC:D9:36:7B:DC:0C:BF:BB:32:0D:B1
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C22A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D152C3DA757511F1A8DB1DDCCE1D38B0.roa
Signing time: Wed 01 Jul 2026 17:53:51 +0000
ROA not before: Wed 01 Jul 2026 17:53:46 +0000
ROA not after: Mon 03 Aug 2026 17:53:46 +0000
asID: 40115
IP address blocks: 45.207.8.0/24 maxlen: 24
45.207.9.0/24 maxlen: 24
45.207.10.0/24 maxlen: 24
45.207.11.0/24 maxlen: 24
45.207.12.0/24 maxlen: 24
45.207.13.0/24 maxlen: 24
45.207.14.0/24 maxlen: 24
45.207.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115242 (0x1c22a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 1 17:53:46 2026 GMT
Not After : Aug 3 17:53:46 2026 GMT
Subject: CN=6a45542f-4b88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6d:14:f2:8a:74:4a:e4:25:24:57:62:2a:f6:
25:ed:bb:75:c6:6d:48:06:1c:ce:7e:32:77:58:6d:
08:17:09:73:6c:e5:94:ff:2b:cf:ff:c0:52:71:ae:
e2:33:c2:22:2a:6e:1c:ad:fc:8d:b5:4d:80:e6:11:
52:ba:e1:76:9b:59:1e:42:13:c8:70:51:0c:43:35:
8a:79:a9:a3:55:a2:da:29:1f:34:fb:4e:5b:0b:56:
97:bc:69:07:bf:60:2b:8a:0f:0d:08:d5:78:69:af:
fe:3c:23:de:c9:0b:23:81:eb:09:ed:c7:10:1c:a6:
a0:4d:dd:97:69:ad:ba:ae:17:30:9f:3a:a0:d8:52:
3a:b4:59:93:e4:8b:88:3e:58:27:12:dd:b1:c4:5f:
84:50:78:34:55:00:cb:c7:53:0a:e9:a5:54:e4:27:
a6:c8:78:95:e6:bc:7d:f0:cc:d8:6c:11:da:83:0d:
17:68:1d:ce:00:06:1a:91:9a:c3:71:36:a1:09:d0:
e0:88:97:43:d3:fa:bd:78:4d:d7:c9:83:92:e1:1e:
99:84:cf:58:16:c9:8b:18:91:6d:de:4a:22:b8:1c:
13:06:6e:27:61:b8:86:a7:61:f5:a3:b7:13:25:59:
c9:eb:0f:36:19:f5:94:52:38:c3:e8:a9:de:b2:2c:
ae:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:0E:81:CC:72:17:70:F2:27:FC:D9:36:7B:DC:0C:BF:BB:32:0D:B1
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D152C3DA757511F1A8DB1DDCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.8.0/21
Signature Algorithm: sha256WithRSAEncryption
40:8e:ee:ec:d4:a2:b2:05:b8:25:16:eb:d4:ec:db:23:d3:5c:
71:c5:49:47:0a:61:8d:cb:1a:6d:84:9e:29:80:ca:0b:27:07:
f3:91:06:64:2b:da:0f:a7:c9:a7:f1:9c:91:ed:d8:e9:bc:ff:
7b:f6:86:19:a0:bd:99:49:10:ee:5d:f7:89:53:de:4e:1a:20:
8b:62:3e:bd:b8:01:1b:dc:11:83:41:2c:8e:e4:c3:d6:32:0c:
73:9e:65:07:7d:38:3e:1b:c7:d6:03:52:52:1e:45:e0:18:7c:
45:1f:41:96:72:17:b7:4e:c6:d5:13:d5:d6:1d:b2:58:b9:2d:
e9:23:d4:17:15:42:b8:97:0e:fa:31:43:cc:ce:ef:e1:75:3b:
56:24:1c:b5:43:43:fd:eb:c4:c1:5e:a5:1e:bd:1d:f8:31:02:
81:a7:e7:c1:0b:ed:5b:5b:a2:8f:32:4c:79:96:f5:74:0f:89:
b2:d4:bf:0f:06:cd:3e:fd:7e:36:72:72:2b:2b:d4:a5:3b:75:
8f:0d:d6:12:da:e8:11:b7:54:a3:be:4d:07:ea:72:2f:5c:7b:
2b:f9:c8:13:7b:df:c6:4d:97:3f:f2:90:da:ba:2c:21:39:6f:
cb:ee:80:92:dd:fc:2c:a3:aa:ef:e3:13:4a:21:3a:f8:01:c6:
c5:b9:f1:7d
-----BEGIN CERTIFICATE-----
MIIFgTCCBGmgAwIBAgIDAcIqMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNzAxMTc1MzQ2WhcNMjYwODAzMTc1MzQ2WjAYMRYw
FAYDVQQDEw02YTQ1NTQyZi00Yjg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAtG0U8op0SuQlJFdiKvYl7bt1xm1IBhzOfjJ3WG0IFwlzbOWU/yvP/8BS
ca7iM8IiKm4crfyNtU2A5hFSuuF2m1keQhPIcFEMQzWKeamjVaLaKR80+05bC1aX
vGkHv2Arig8NCNV4aa/+PCPeyQsjgesJ7ccQHKagTd2Xaa26rhcwnzqg2FI6tFmT
5IuIPlgnEt2xxF+EUHg0VQDLx1MK6aVU5CemyHiV5rx98MzYbBHagw0XaB3OAAYa
kZrDcTahCdDgiJdD0/q9eE3XyYOS4R6ZhM9YFsmLGJFt3koiuBwTBm4nYbiGp2H1
o7cTJVnJ6w82GfWUUjjD6Knesiyu+QIDAQABo4ICojCCAp4wHQYDVR0OBBYEFPQO
gcxyF3DyJ/zZNnvcDL+7Mg2xMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9EMTUyQzNEQTc1NzUxMUYxQThEQjFERENDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDLc8IMA0GCSqGSIb3DQEBCwUA
A4IBAQBAju7s1KKyBbglFuvU7Nsj01xxxUlHCmGNyxpthJ4pgMoLJwfzkQZkK9oP
p8mn8ZyR7djpvP979oYZoL2ZSRDuXfeJU95OGiCLYj69uAEb3BGDQSyO5MPWMgxz
nmUHfTg+G8fWA1JSHkXgGHxFH0GWche3TsbVE9XWHbJYuS3pI9QXFUK4lw76MUPM
zu/hdTtWJBy1Q0P968TBXqUevR34MQKBp+fBC+1bW6KPMkx5lvV0D4my1L8PBs0+
/X42cnIrK9SlO3WPDdYS2ugRt1Sjvk0H6nIvXHsr+cgTe9/GTZc/8pDauiwhOW/L
7oCS3fwso6rv4xNKITr4AcbFufF9
-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:46 2026 by rpki-client