Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/209089EC835811F1B9477FDACE1D38B0.roa
File: 209089EC835811F1B9477FDACE1D38B0.roa (raw, json)
Hash identifier: FJjkDQ/UWQU+AVk2mTF6Wk+T6IGj2Hku1hAPx1KLaaQ=
Subject key identifier: A8:8F:B9:74:4C:D9:DD:B2:EF:35:86:85:E2:42:AE:A7:E6:A7:D0:B6
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C629
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/209089EC835811F1B9477FDACE1D38B0.roa
Signing time: Sun 19 Jul 2026 09:56:35 +0000
ROA not before: Sun 19 Jul 2026 09:56:31 +0000
ROA not after: Wed 26 Aug 2026 09:56:31 +0000
asID: 140869
IP address blocks: 45.203.213.0/24 maxlen: 24
45.203.214.0/24 maxlen: 24
45.203.215.0/24 maxlen: 24
45.203.216.0/24 maxlen: 24
45.203.217.0/24 maxlen: 24
45.203.218.0/24 maxlen: 24
45.203.219.0/24 maxlen: 24
45.203.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116265 (0x1c629)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 19 09:56:31 2026 GMT
Not After : Aug 26 09:56:31 2026 GMT
Subject: CN=6a5c9f53-a627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5b:ea:67:56:5a:1d:d3:46:16:be:09:1a:9c:
fc:74:4a:c4:a8:a1:cb:1b:41:4b:e2:14:e5:af:e1:
4b:5d:43:60:00:5d:75:20:66:f0:c4:20:e6:6f:bb:
c2:75:e0:1e:33:d5:78:24:1f:8d:ff:13:f7:42:7d:
a8:05:23:34:a5:57:47:3f:0b:78:ab:0d:dd:55:be:
dd:19:34:0d:69:03:54:b8:cb:75:f8:92:8b:f2:9e:
5e:6d:0f:b8:e2:e2:78:e0:b4:50:8b:16:98:66:4c:
2a:80:87:98:b0:0a:2d:f6:e9:b6:9b:44:70:f3:44:
2d:00:ed:d6:e4:36:3e:e1:fd:e7:ea:2c:9b:24:f9:
eb:a3:8a:5e:70:ce:79:12:ae:1a:c2:c1:b0:0b:52:
01:93:c3:ae:03:64:43:ea:54:ce:63:bc:44:a3:29:
bf:2c:be:15:f6:ab:d7:c0:93:6f:3c:06:d5:ae:47:
ad:d2:e3:99:8c:71:e8:b7:d5:db:d8:92:8e:07:e3:
ff:76:a3:4e:ea:15:3e:4d:ae:a3:c8:99:47:31:87:
33:b8:d5:79:12:ce:b3:89:ed:1d:0e:d2:5f:13:9f:
31:a6:09:7f:42:42:ad:20:09:c2:ed:0b:0b:6a:03:
31:c9:5a:ef:35:a6:24:0c:3b:52:8a:f2:44:51:0f:
be:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:8F:B9:74:4C:D9:DD:B2:EF:35:86:85:E2:42:AE:A7:E6:A7:D0:B6
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/209089EC835811F1B9477FDACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.203.213.0-45.203.220.255
Signature Algorithm: sha256WithRSAEncryption
4e:de:c5:92:31:58:a8:e0:a1:46:c0:36:a4:69:d3:aa:c0:ef:
11:ed:0d:00:8f:75:fa:fe:95:bd:a3:b0:03:d0:b5:7c:54:11:
9a:a1:b1:9f:77:b6:73:d3:e3:5c:07:4d:ad:dd:17:17:af:45:
0a:74:8c:c7:4d:40:3f:52:87:0d:b8:be:34:e4:e0:07:74:8e:
25:35:9c:fd:4d:85:7c:54:e1:73:01:b9:89:30:6b:c4:d6:48:
d3:41:93:89:d1:df:34:16:ab:75:ba:b8:2c:d7:53:49:79:f4:
89:3c:73:ec:08:33:21:f4:37:5b:b1:ba:6b:fa:46:65:db:a9:
20:bd:74:d2:07:dc:f6:8c:a5:f4:4f:1a:73:31:b4:82:8b:7b:
1e:eb:f8:94:52:eb:3a:3f:ed:8b:27:60:21:98:26:39:57:f0:
8d:66:b0:31:61:30:0c:be:c4:59:b4:ec:38:f4:d7:8a:c3:01:
79:bd:75:9e:9b:83:9f:9e:c9:46:d7:06:e6:95:70:2d:e4:5f:
bb:44:df:83:08:99:9c:2d:41:48:6b:be:80:47:21:8f:50:0a:
85:31:35:63:2f:77:3f:e6:04:c6:d4:99:4d:73:68:d3:bd:8e:
e7:69:a2:8d:b9:80:2a:1b:cd:b3:f0:e3:95:78:8b:78:8c:c2:
f7:f0:a1:64
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAcYpMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNzE5MDk1NjMxWhcNMjYwODI2MDk1NjMxWjAYMRYw
FAYDVQQDEw02YTVjOWY1My1hNjI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwlvqZ1ZaHdNGFr4JGpz8dErEqKHLG0FL4hTlr+FLXUNgAF11IGbwxCDm
b7vCdeAeM9V4JB+N/xP3Qn2oBSM0pVdHPwt4qw3dVb7dGTQNaQNUuMt1+JKL8p5e
bQ+44uJ44LRQixaYZkwqgIeYsAot9um2m0Rw80QtAO3W5DY+4f3n6iybJPnro4pe
cM55Eq4awsGwC1IBk8OuA2RD6lTOY7xEoym/LL4V9qvXwJNvPAbVrket0uOZjHHo
t9Xb2JKOB+P/dqNO6hU+Ta6jyJlHMYczuNV5Es6zie0dDtJfE58xpgl/QkKtIAnC
7QsLagMxyVrvNaYkDDtSivJEUQ++lQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFKiP
uXRM2d2y7zWGheJCrqfmp9C2MB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC8yMDkwODlFQzgzNTgxMUYxQjk0NzdGREFDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAAty9UDBAAty9wwDQYJKoZI
hvcNAQELBQADggEBAE7exZIxWKjgoUbANqRp06rA7xHtDQCPdfr+lb2jsAPQtXxU
EZqhsZ93tnPT41wHTa3dFxevRQp0jMdNQD9Shw24vjTk4Ad0jiU1nP1NhXxU4XMB
uYkwa8TWSNNBk4nR3zQWq3W6uCzXU0l59Ik8c+wIMyH0N1uxumv6RmXbqSC9dNIH
3PaMpfRPGnMxtIKLex7r+JRS6zo/7YsnYCGYJjlX8I1msDFhMAy+xFm07Dj014rD
AXm9dZ6bg5+eyUbXBuaVcC3kX7tE34MImZwtQUhrvoBHIY9QCoUxNWMvdz/mBMbU
mU1zaNO9judpoo25gCobzbPw45V4i3iMwvfwoWQ=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:33:28 2026 by rpki-client