Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FEDC38DC770911F1BBDFFEF7CE1D38B0.roa
File: FEDC38DC770911F1BBDFFEF7CE1D38B0.roa (raw, json)
Hash identifier: rYRlxPEjM6CmkAZ7o9esDzcHCa+3xXp91ElAdBYBAok=
Subject key identifier: 8F:82:A3:25:C4:41:04:27:70:12:26:4F:09:4E:B9:7D:82:48:0A:5B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C2BA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FEDC38DC770911F1BBDFFEF7CE1D38B0.roa
Signing time: Fri 03 Jul 2026 18:07:04 +0000
ROA not before: Fri 03 Jul 2026 18:07:00 +0000
ROA not after: Thu 03 Sep 2026 18:07:00 +0000
asID: 140224
IP address blocks: 45.194.16.0/21 maxlen: 24
45.207.8.0/24 maxlen: 24
45.207.9.0/24 maxlen: 24
45.207.10.0/24 maxlen: 24
45.207.11.0/24 maxlen: 24
45.207.12.0/24 maxlen: 24
45.207.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115386 (0x1c2ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 3 18:07:00 2026 GMT
Not After : Sep 3 18:07:00 2026 GMT
Subject: CN=6a47fa48-377a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:46:44:a2:5c:51:57:77:d3:d6:a4:24:15:0a:
5c:4d:3d:24:e1:f8:34:72:ad:b0:61:28:63:d7:d7:
69:de:70:80:b7:0e:a7:22:6d:cd:96:84:ca:22:bd:
43:e7:c0:7e:13:a9:97:da:bf:6e:aa:45:2e:1b:99:
ba:3d:65:f5:da:5e:c0:5b:02:c1:91:c3:52:74:f1:
84:25:20:82:2b:54:5a:ae:72:25:b2:6d:df:8c:e3:
7b:01:a6:df:da:2c:69:5a:22:e6:ed:fa:98:06:da:
9c:c8:f8:3d:ea:68:2a:a2:07:a1:75:74:f7:56:ab:
29:b0:70:96:fe:5c:70:d6:ee:0d:75:da:42:a8:e2:
cb:79:3b:c3:ac:cf:90:31:de:ee:0a:45:d9:2b:74:
81:74:40:a3:1e:fa:b1:04:70:68:8f:1f:f3:f6:df:
48:61:ef:1b:44:b4:a4:c0:a0:e9:75:c3:28:e7:01:
dd:d3:cc:d3:2c:aa:82:eb:08:e5:34:91:3f:0e:56:
28:e9:02:7a:8c:70:bf:21:14:75:a3:04:1b:c5:88:
ed:f9:45:0b:bd:27:c6:7f:e7:21:04:f7:02:2f:69:
2f:7c:d5:0a:d3:8d:4b:c9:a7:57:7b:1f:3e:88:14:
c5:08:d5:92:99:46:ec:ec:98:99:91:ae:b0:f5:c7:
7a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:82:A3:25:C4:41:04:27:70:12:26:4F:09:4E:B9:7D:82:48:0A:5B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FEDC38DC770911F1BBDFFEF7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.16.0/21
45.207.8.0-45.207.13.255
Signature Algorithm: sha256WithRSAEncryption
b6:19:9a:1b:fe:61:fc:c1:f7:33:cc:13:c5:86:e1:52:f9:f0:
eb:7e:30:b9:f9:cb:f1:37:32:07:52:bb:6f:04:65:6c:f2:3e:
74:48:4a:52:2c:b1:6e:11:26:da:e0:dd:a1:3d:b9:bb:cf:f3:
a6:96:ef:98:e6:6c:45:bc:d2:eb:17:c0:f8:d4:a1:9d:7d:45:
a6:b5:0e:00:fb:c5:0c:8f:fa:17:4f:71:54:67:5f:c8:f2:33:
30:cf:af:7b:b8:07:a2:ac:60:f1:ff:d4:b1:d9:68:ef:72:96:
55:74:db:fa:f7:09:8e:6e:89:dc:a5:3b:bd:02:d0:30:03:17:
b7:4e:8d:63:b8:10:be:2a:97:b8:8c:52:1b:13:ea:25:dd:0f:
78:1d:f3:ad:55:bf:2c:9c:13:06:b9:37:d5:cd:8a:f5:91:7d:
59:43:c8:08:4c:47:25:5b:ed:a4:ca:8e:d0:96:71:14:7e:3a:
e1:7b:f9:20:e3:6a:7c:85:3a:d2:48:ce:3b:6f:3c:26:b5:40:
0e:57:33:01:ea:a9:2a:92:3d:e8:27:b5:c4:b5:47:10:49:6b:
dd:b0:e6:67:48:0f:30:6b:07:79:c9:d9:89:86:1c:2a:3c:e5:
39:b2:95:f4:ca:7f:a0:76:e7:ba:b5:24:18:ae:b6:e7:0d:9b:
5e:72:80:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:39 2026 by rpki-client