Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F92B31DA7AA211F18A8FA8DCCE1D38B0.roa
File: F92B31DA7AA211F18A8FA8DCCE1D38B0.roa (raw, json)
Hash identifier: mS0HcVFDOM2X3Th3bM7On1Blqjd4urGSpaDTjfYKKdU=
Subject key identifier: D6:34:11:BC:6A:C6:3C:AD:A1:80:EF:25:66:6E:FB:87:68:40:DA:EC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C38A
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F92B31DA7AA211F18A8FA8DCCE1D38B0.roa
Signing time: Wed 08 Jul 2026 07:59:41 +0000
ROA not before: Wed 08 Jul 2026 07:59:37 +0000
ROA not after: Mon 20 Jul 2026 07:59:37 +0000
asID: 139613
IP address blocks: 45.201.216.0/21 maxlen: 24
45.201.224.0/21 maxlen: 24
45.201.240.0/20 maxlen: 24
45.207.224.0/19 maxlen: 24
45.207.224.0/20 maxlen: 24
45.207.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115594 (0x1c38a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 8 07:59:37 2026 GMT
Not After : Jul 20 07:59:37 2026 GMT
Subject: CN=6a4e036d-caf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fd:42:68:5d:e0:86:5e:8e:f0:51:fc:82:07:
fc:88:cb:0f:0d:4f:61:8a:26:3e:e0:f8:f1:46:dd:
e2:a0:c5:09:c7:e5:59:1f:d1:31:68:36:e8:9a:66:
65:1d:f3:77:3d:8c:ad:55:ec:9b:e9:a2:0e:be:e2:
31:3f:b0:c5:0d:07:ba:74:6d:07:92:74:4e:51:eb:
01:4d:6a:ea:63:f5:b3:0e:49:fa:67:82:0f:bf:d7:
e9:7f:08:52:85:9a:5b:b8:35:51:66:b5:5d:47:5e:
c4:82:7b:8c:8d:93:b8:ff:d4:fd:da:0c:f2:09:de:
d1:1a:80:bf:ed:3a:03:f8:99:85:cf:53:04:bb:77:
19:14:6e:01:34:7a:4e:25:b6:71:ad:9a:8d:6d:79:
85:af:ce:1b:93:85:4d:12:32:58:07:cc:12:99:ca:
1e:b9:c1:b9:26:9e:ec:c6:7d:b4:c6:75:3f:04:7a:
9b:ff:9c:12:e7:1a:1a:90:17:15:bb:81:15:71:d3:
4e:43:9b:08:ff:da:b0:0c:31:40:12:1a:6f:59:ac:
9b:53:46:f3:b4:bb:cb:a4:4b:aa:74:b8:66:63:19:
43:39:75:5e:d6:1c:00:8a:00:05:e2:e6:2b:6b:6d:
1f:ae:c0:c4:28:6c:a5:96:a2:23:99:9d:ad:c6:32:
d1:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:34:11:BC:6A:C6:3C:AD:A1:80:EF:25:66:6E:FB:87:68:40:DA:EC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/F92B31DA7AA211F18A8FA8DCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.216.0-45.201.231.255
45.201.240.0/20
45.207.224.0/19
Signature Algorithm: sha256WithRSAEncryption
2e:8c:1b:1a:d9:da:99:15:1d:dd:c9:52:e1:dc:87:37:35:72:
63:d2:d1:c7:80:e3:9a:29:dd:81:30:4c:48:65:d1:a4:7f:12:
11:aa:66:80:aa:ca:46:ff:33:04:24:55:c8:d4:84:8f:0d:21:
5d:38:41:7b:a7:36:50:8d:d6:55:b0:0c:21:5e:fc:e9:63:55:
f9:d7:9f:c7:ca:ce:32:85:7d:5a:b3:05:80:f2:05:b4:04:0e:
e3:49:b4:a1:0b:86:a4:b2:7c:f0:38:e3:69:02:45:9c:28:5a:
77:1e:50:58:ca:16:a6:2d:b4:ce:5c:7a:0f:85:0e:0f:cd:27:
8a:73:d2:f8:1e:46:bd:97:a1:68:17:6c:67:a8:f9:03:2a:69:
a1:12:c2:2c:a1:41:57:6d:04:61:c0:80:76:98:dc:bf:c3:15:
c3:ee:6a:40:cf:3b:43:8f:db:ba:92:70:af:c1:69:52:60:7e:
04:cb:d2:c8:8c:28:4d:21:c9:19:8c:36:3c:c9:49:94:c2:c2:
40:ef:40:82:73:a8:10:a6:51:87:4d:87:47:41:c5:c6:63:d8:
b2:cd:d1:21:95:c6:fa:a0:82:17:2e:f7:8f:31:20:28:37:9d:
89:99:21:99:bd:32:a6:95:dd:cf:7d:94:82:eb:56:30:80:70:
c1:ad:57:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:41:48 2026 by rpki-client