Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8CE0045A84E411F1908790C9CE1D38B0.roa
File: 8CE0045A84E411F1908790C9CE1D38B0.roa (raw, json)
Hash identifier: JBgy8H4Oq4Zc0fYnSeS1iQEFYK62p7wEd9G9IC6tt/Y=
Subject key identifier: 7A:4E:0E:F2:2C:34:E0:EA:81:6B:12:50:E9:A7:26:63:D2:F9:4F:38
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C6BA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8CE0045A84E411F1908790C9CE1D38B0.roa
Signing time: Tue 21 Jul 2026 09:14:18 +0000
ROA not before: Tue 21 Jul 2026 09:14:14 +0000
ROA not after: Sat 29 Aug 2026 09:14:14 +0000
asID: 202656
IP address blocks: 45.199.224.0/24 maxlen: 24
45.199.225.0/24 maxlen: 24
45.199.226.0/24 maxlen: 24
45.199.227.0/24 maxlen: 24
45.199.228.0/24 maxlen: 24
45.199.229.0/24 maxlen: 24
45.199.230.0/24 maxlen: 24
45.199.241.0/24 maxlen: 24
45.199.242.0/24 maxlen: 24
45.199.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 16:17:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116410 (0x1c6ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 21 09:14:14 2026 GMT
Not After : Aug 29 09:14:14 2026 GMT
Subject: CN=6a5f386a-18e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:74:0a:4c:6b:35:fa:4d:18:65:ac:90:b3:00:
5d:11:6c:8b:7a:ff:4c:88:e3:9f:b6:59:d1:e1:09:
8d:66:cc:11:6e:74:ae:1d:b7:fb:2a:3a:e2:3a:1d:
ff:74:fb:8a:8a:d3:ae:29:13:23:73:3a:49:44:0c:
68:e0:5a:6c:e7:74:7d:a9:2c:1a:41:5c:2e:7d:45:
0b:f5:45:60:7a:7f:52:27:38:da:7c:a9:56:51:26:
e9:68:b9:b0:9d:2f:f7:49:35:b7:8c:d1:74:34:0b:
e9:6d:cc:85:4a:54:d6:26:0b:3c:63:9e:af:70:d4:
8d:59:92:53:10:43:48:08:36:e6:97:d8:5d:c6:32:
80:fd:6c:1b:ae:42:6c:d8:73:60:48:a5:77:a4:2f:
97:9d:08:72:2e:e1:b3:a8:de:05:b0:ab:f2:9b:34:
25:19:64:67:f2:d2:56:86:bf:0c:85:38:9c:74:36:
68:da:cf:a6:ce:a9:e0:fc:d7:09:a9:3f:88:4a:40:
ca:8c:ad:2f:fd:8c:cd:28:ec:1c:c6:14:4e:f8:15:
bd:fe:a9:cc:9b:65:a5:7c:a0:72:d1:5b:98:b7:c6:
ff:a4:be:6c:c2:69:e1:18:bb:6d:04:79:20:90:72:
f8:a0:27:fa:65:d1:09:41:27:db:4c:e4:05:1a:66:
19:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:4E:0E:F2:2C:34:E0:EA:81:6B:12:50:E9:A7:26:63:D2:F9:4F:38
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/8CE0045A84E411F1908790C9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.224.0-45.199.230.255
45.199.241.0-45.199.243.255
Signature Algorithm: sha256WithRSAEncryption
69:2a:8f:c6:26:4e:d4:70:2e:cb:07:87:77:20:18:f2:a7:4f:
ad:22:93:aa:cb:11:88:63:ec:fd:e2:1e:9e:7b:ed:c1:0f:74:
9a:d6:f3:45:4d:6f:3b:32:83:85:ed:da:a1:c1:a4:8b:96:76:
a1:ba:24:aa:43:97:b5:b7:68:ad:c7:7a:40:3d:42:02:24:d6:
3d:d4:3c:a7:46:5a:3a:3b:14:d9:29:fc:e2:fb:08:82:fd:03:
75:a9:d3:69:46:5d:64:76:cb:39:95:c1:26:3f:d1:2c:ee:35:
8a:a4:4b:cc:4f:47:85:36:db:fd:d9:23:d2:33:09:ef:af:34:
a1:f1:91:e4:fb:fe:c2:23:a3:c9:f8:ca:06:a0:8a:27:96:1d:
e3:66:1d:14:6b:7a:e7:ae:4e:1b:aa:a8:48:ca:68:9e:48:5a:
5b:b0:3c:b7:44:77:9f:d2:ff:84:c4:23:fc:96:c8:bc:04:e4:
09:3b:ac:95:8b:7d:63:c7:b0:c7:43:33:fd:e6:56:ea:ba:c4:
6e:70:c9:76:46:92:3f:2a:6e:1e:1a:26:08:29:22:4b:6c:53:
cc:0a:d5:b4:8c:7e:84:67:bc:04:59:9d:f3:9d:09:4d:74:4c:
7e:3a:bf:39:2b:c4:92:7d:8a:63:66:63:13:4d:7a:bc:24:60:
66:67:fb:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:01:59 2026 by rpki-client