Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/499F5BAE841811F1A5EEE0EACE1D38B0.roa
File: 499F5BAE841811F1A5EEE0EACE1D38B0.roa (raw, json)
Hash identifier: OTVEyhwrRzKTtgy8ikW0tiOibyLfLBPY3O8lknk0Xgg=
Subject key identifier: 61:B5:3E:5D:7B:E2:62:4D:89:DD:E1:8D:08:E1:06:99:BE:4D:05:D8
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C64C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/499F5BAE841811F1A5EEE0EACE1D38B0.roa
Signing time: Mon 20 Jul 2026 08:52:08 +0000
ROA not before: Mon 20 Jul 2026 08:52:04 +0000
ROA not after: Wed 19 Aug 2026 08:52:04 +0000
asID: 147176
IP address blocks: 45.201.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116300 (0x1c64c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 20 08:52:04 2026 GMT
Not After : Aug 19 08:52:04 2026 GMT
Subject: CN=6a5de1b8-99b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:72:b1:c2:12:c5:07:c5:65:bf:b8:80:6a:67:
ea:3b:3c:28:f7:6b:9c:25:0d:45:8a:1b:42:ff:0f:
5b:3e:7c:5e:6a:3a:83:ab:7c:1f:ba:fc:cf:9a:72:
6a:61:35:60:96:68:70:c4:ae:3d:57:73:f9:9d:c8:
35:80:c4:d1:6c:0a:91:75:f6:88:bc:8e:99:7b:fa:
8c:95:c1:18:ef:f5:8e:f6:f6:53:a0:0a:bc:00:38:
83:81:35:4f:4b:96:e9:f0:ae:1c:e9:e8:46:cb:3c:
c8:37:9b:f0:b4:f3:dc:1e:22:b1:1a:cf:1f:20:8f:
3b:e4:b4:27:64:ee:01:b6:4c:22:d9:4b:9a:cf:6d:
e2:40:6d:55:1a:50:e7:fc:7b:da:82:c1:a8:32:3e:
32:c3:6b:f1:67:7e:6d:f5:e6:bc:77:e6:06:7a:26:
b7:13:2f:39:2b:ba:fc:ab:e6:28:67:82:1b:e8:b1:
51:40:19:4a:16:bc:c9:aa:90:a5:34:c6:f6:53:6c:
b9:d0:b3:d5:e4:2d:51:f8:23:2c:c1:ae:f0:31:db:
e2:a3:28:a9:89:a1:15:e9:85:79:e4:78:61:44:54:
d9:ba:4b:c5:95:b5:b3:15:29:a9:e0:77:a3:39:c0:
94:d2:f7:6a:93:34:e5:60:83:6f:ed:ff:36:93:eb:
fa:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:B5:3E:5D:7B:E2:62:4D:89:DD:E1:8D:08:E1:06:99:BE:4D:05:D8
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/499F5BAE841811F1A5EEE0EACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.201.0.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:02:17:b8:34:24:ad:a8:e8:39:66:18:2a:d0:5b:ad:19:ad:
19:f5:02:03:14:d8:72:99:c3:2b:2a:3a:6b:b8:c0:97:a3:10:
d1:aa:1e:b6:99:b6:3b:4f:d1:8f:da:80:b8:12:4a:a3:b8:89:
fa:29:cd:f3:18:61:4c:17:dd:4e:e8:59:3a:97:10:1e:07:db:
80:8d:a2:c3:3c:33:c7:df:34:88:7b:74:53:18:cb:eb:25:b2:
82:27:2f:ac:57:2e:2b:da:80:a6:15:08:f1:6d:05:43:00:fe:
25:6f:f5:48:88:ec:7b:a6:c8:ed:15:fa:d8:60:f2:84:c4:ac:
fc:e8:f2:39:79:38:a9:6b:69:39:eb:8e:e5:08:09:52:87:ef:
68:15:ee:ab:f1:6c:74:ad:48:1c:73:a9:9d:3a:79:47:d5:3e:
a0:51:4e:26:44:84:b5:f5:3e:fc:20:79:18:f8:7e:be:93:20:
b9:4c:2a:c4:62:44:65:bd:52:2b:53:77:38:9d:b2:62:22:e5:
32:91:5d:ec:08:62:a0:bb:63:ea:1a:f1:2a:48:1d:0f:30:c0:
b8:4b:8c:52:23:6b:d3:3f:dd:88:64:65:59:41:59:e5:1f:23:
3d:e5:b4:9c:89:13:7c:58:cd:be:7d:48:40:80:fb:ea:bd:fe:
ac:ac:bd:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:29:06 2026 by rpki-client