Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A88BD3B045FF11F1A69BE807CF1D38B0.roa
File: A88BD3B045FF11F1A69BE807CF1D38B0.roa (raw, json)
Hash identifier: /0xSog5dwYA9JOYjpZCBy4edSdqCVf6wAikNHh/Xtcw=
Subject key identifier: 94:93:8E:59:62:C7:6E:B6:CD:7D:FB:7D:2D:28:DE:00:C8:B5:45:5E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B125
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A88BD3B045FF11F1A69BE807CF1D38B0.roa
Signing time: Sat 02 May 2026 08:19:38 +0000
ROA not before: Sat 02 May 2026 08:19:26 +0000
ROA not after: Tue 09 Jun 2026 08:19:26 +0000
asID: 401434
IP address blocks: 45.207.154.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110885 (0x1b125)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 2 08:19:26 2026 GMT
Not After : Jun 9 08:19:26 2026 GMT
Subject: CN=69f5b399-965d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:1b:88:f6:47:dc:f6:7f:75:61:b1:7a:3b:df:
43:54:be:9b:a5:34:d3:8b:33:c7:14:6a:10:ee:91:
f1:4a:b9:f7:58:ab:be:4e:6a:99:f1:e2:a4:6a:48:
db:41:cf:fe:35:c5:aa:ad:a4:4d:ef:36:45:5e:21:
d7:53:6c:cd:a0:54:06:3a:ed:bd:7a:2e:13:ea:b4:
17:6d:5a:14:93:e3:e0:82:bb:67:da:51:e4:b5:98:
f5:41:77:a5:7e:37:bb:82:ff:5c:7a:49:18:02:9a:
86:bd:35:1c:c8:c9:bc:f5:ec:6b:dc:8b:a6:6e:c3:
a1:4d:13:90:04:14:8d:ab:79:b8:0c:0d:c5:20:0b:
ff:5f:1f:2e:e4:f8:e9:79:6b:2c:20:a3:63:57:5c:
df:72:f5:e6:d2:78:a9:9d:ed:41:84:4a:6a:5d:8b:
34:ee:b0:f9:f2:47:09:f4:d7:bd:2d:57:3b:59:d4:
37:92:0d:00:bc:34:26:c1:9d:e6:52:cf:a8:05:8d:
62:84:63:68:86:91:a0:79:fb:b9:35:bf:c0:78:bf:
1e:19:3a:80:c4:32:26:23:b0:26:54:b5:55:28:b5:
17:48:8e:c0:b9:fd:8d:38:ea:f3:dd:4e:4d:03:e4:
0d:b9:77:c7:d8:fa:6b:57:8e:5c:8e:fa:fb:d5:a9:
b1:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:93:8E:59:62:C7:6E:B6:CD:7D:FB:7D:2D:28:DE:00:C8:B5:45:5E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/A88BD3B045FF11F1A69BE807CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.154.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:01:1a:f0:c7:b1:5e:1e:5b:69:4f:dc:31:48:38:15:e3:a2:
7e:c4:cb:16:83:76:7b:19:97:8e:50:c1:39:f5:32:bc:0c:96:
1a:24:a6:79:13:07:55:59:33:03:90:72:bc:f8:48:57:ed:12:
7d:fd:48:c0:25:01:5f:1b:70:a3:68:69:1e:70:2b:73:9b:e3:
43:af:47:25:9f:f9:99:44:fd:ed:14:cb:30:2f:8a:88:31:7d:
f0:43:87:16:43:a5:7d:86:a0:e3:b6:42:83:33:95:1b:2d:36:
d4:08:47:f6:64:b1:dd:d1:7f:f4:12:1e:9f:f2:c2:70:15:ef:
5d:1b:44:2b:85:dd:b2:ba:8e:3c:2a:36:66:c4:fe:b6:fc:94:
2f:56:88:8d:83:6d:e6:27:f7:0a:cd:4b:3d:32:13:cb:42:93:
6b:f8:d1:4f:c6:99:ea:3e:00:98:f3:da:2c:eb:d9:56:06:6c:
f1:5b:f7:45:f9:36:79:fa:20:88:e9:95:b0:19:bb:4a:64:6b:
70:e8:76:a9:32:e8:ba:83:9f:c9:58:a3:b1:5e:d0:b5:74:d5:
0b:2a:9d:66:4c:46:dc:0b:2a:1f:c0:66:1d:dc:34:9b:98:1a:
84:56:37:92:dd:a2:2d:79:80:a2:c2:91:e1:48:1a:14:fc:26:
ee:e7:9c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:48:28 2026 by rpki-client