Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2F93BB7C85FA11F1B5339ADDCE1D38B0.roa
File: 2F93BB7C85FA11F1B5339ADDCE1D38B0.roa (raw, json)
Hash identifier: XyjOYEly/UbH8ZAqpkURwfxr4SAzSY/JPELJYPKogJk=
Subject key identifier: 2C:49:52:6D:0B:E8:61:6E:75:F5:E1:B8:14:50:AB:22:93:F0:06:51
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C78F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2F93BB7C85FA11F1B5339ADDCE1D38B0.roa
Signing time: Wed 22 Jul 2026 18:21:41 +0000
ROA not before: Wed 22 Jul 2026 18:21:37 +0000
ROA not after: Wed 09 Sep 2026 18:21:37 +0000
asID: 202036
IP address blocks: 45.198.231.0/24 maxlen: 24
45.201.24.0/24 maxlen: 24
45.201.25.0/24 maxlen: 24
45.201.28.0/24 maxlen: 24
45.201.29.0/24 maxlen: 24
45.201.30.0/24 maxlen: 24
45.201.31.0/24 maxlen: 24
45.201.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116623 (0x1c78f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 22 18:21:37 2026 GMT
Not After : Sep 9 18:21:37 2026 GMT
Subject: CN=6a610a35-1528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:92:0e:09:74:9b:f3:75:2d:f9:1b:8d:80:5b:
dc:fa:2d:ae:9d:c8:21:2c:c8:64:f4:40:82:11:b2:
b2:1b:57:31:08:28:7f:43:52:ed:54:69:64:8a:9e:
89:b8:17:fc:43:3d:ad:33:f7:97:5a:9c:07:1f:2b:
8b:cc:fb:c1:5d:31:90:41:08:31:9f:45:58:44:1f:
2b:16:d7:5c:74:72:9b:07:0e:e2:08:31:f4:4a:19:
43:59:0f:37:ee:66:70:0f:5d:7c:80:2f:21:e9:e0:
db:82:5d:58:46:cb:12:e5:0a:8c:36:2d:1f:64:42:
97:2d:d0:64:3a:bc:54:2a:ab:a4:63:c0:41:52:8f:
56:ea:b2:cb:88:b3:02:42:dd:c8:4c:3b:2a:ed:f3:
a5:ce:d6:a8:e8:2d:ed:14:e2:3a:f9:63:ef:b1:6a:
51:8a:44:23:e8:6b:8e:60:76:f6:92:69:67:6b:c0:
c4:00:76:2b:02:f8:7b:ab:1e:62:7e:bc:f4:a9:7f:
f0:c8:9d:4d:e4:9f:f8:f8:df:93:3a:ba:9c:9c:60:
11:36:d9:53:b0:04:17:df:d7:d2:ce:c0:77:ff:15:
9e:0a:6d:30:f6:ad:55:fd:0a:d2:d3:d5:69:8b:67:
16:80:2e:c8:c3:bc:8d:dc:00:8f:4f:e7:f4:c9:55:
ac:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:49:52:6D:0B:E8:61:6E:75:F5:E1:B8:14:50:AB:22:93:F0:06:51
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/2F93BB7C85FA11F1B5339ADDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.198.231.0/24
45.201.24.0/23
45.201.28.0-45.201.32.255
Signature Algorithm: sha256WithRSAEncryption
40:d7:b6:8e:80:ba:17:e5:98:61:14:8b:68:54:45:c4:6e:cc:
4c:c4:d6:b5:1d:bf:f0:ff:d7:99:d1:5d:28:ac:77:92:27:48:
f6:eb:29:57:20:c4:a8:22:a6:88:f9:a3:53:d0:04:4e:da:59:
a1:f0:d1:6f:b5:f8:a8:e6:85:1a:cb:91:39:1d:35:a9:42:5a:
95:27:b7:aa:07:ef:60:27:dc:b8:4b:48:2b:76:c6:50:d6:5b:
55:57:1d:7e:92:98:68:8e:45:a8:3e:be:f1:aa:a8:61:45:2e:
3f:63:fb:8e:15:12:e0:0a:f3:60:cb:a3:23:59:ab:12:7e:83:
7b:57:47:8c:19:a2:1c:e6:24:1b:c8:c2:0a:0f:ab:86:52:1f:
71:72:f4:37:cc:ff:5a:6a:08:40:16:b5:9b:5e:11:e2:cf:64:
4f:1b:f5:64:c5:e0:14:2a:f4:3c:e4:58:32:81:79:19:f3:0b:
7a:b1:de:81:e3:a4:66:3b:dd:0a:e9:ad:c2:39:65:07:9b:2e:
bc:75:e6:82:d4:5b:ef:aa:58:6f:a2:db:78:9c:23:db:a5:f8:
f8:1f:ba:8a:fe:6a:5b:5b:33:8c:6d:43:78:4f:b8:81:d8:14:
f0:8e:c0:55:04:25:89:b8:e9:5b:26:ae:00:1a:b2:c5:0d:7d:
e0:5a:13:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:38:33 2026 by rpki-client