Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD488C5E82B811F1BE9F0107CF1D38B0.roa
File: AD488C5E82B811F1BE9F0107CF1D38B0.roa (raw, json)
Hash identifier: FcyYAE7XvijfAhrzEuxhb45xlhk51Mjg1fzf7l6WsJw=
Subject key identifier: 28:85:59:F3:5D:8F:73:66:98:E8:A4:D8:60:5D:71:D2:46:8B:5C:E0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C606
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD488C5E82B811F1BE9F0107CF1D38B0.roa
Signing time: Sat 18 Jul 2026 14:55:12 +0000
ROA not before: Sat 18 Jul 2026 14:55:08 +0000
ROA not after: Sun 16 Aug 2026 14:55:08 +0000
asID: 134365
IP address blocks: 45.197.144.0/21 maxlen: 24
45.197.144.0/24 maxlen: 24
45.197.145.0/24 maxlen: 24
45.197.146.0/24 maxlen: 24
45.197.147.0/24 maxlen: 24
45.197.148.0/24 maxlen: 24
45.197.149.0/24 maxlen: 24
45.197.150.0/24 maxlen: 24
45.197.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116230 (0x1c606)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 18 14:55:08 2026 GMT
Not After : Aug 16 14:55:08 2026 GMT
Subject: CN=6a5b93d0-2dc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:49:38:62:04:b5:e7:12:ac:0f:f6:96:f7:ff:
2b:07:c3:c1:0d:9f:06:d1:81:70:b0:84:17:12:d8:
37:51:c5:fb:b0:1f:7d:a7:3f:71:24:b6:90:e0:af:
6e:fc:bf:f3:fc:2d:87:41:99:8a:10:7b:e8:ec:50:
8c:f8:9c:7c:2b:cd:7d:9d:32:aa:07:fb:f9:30:0b:
4a:4b:0d:05:2b:e3:0a:3b:3e:03:7f:f4:93:54:95:
b8:42:b9:44:8c:22:90:73:cf:3d:12:23:52:df:7e:
ad:b8:49:d3:a7:9f:29:50:96:98:f4:32:17:9b:93:
eb:12:f1:3c:3d:d7:94:61:ec:2e:b7:22:99:da:7e:
2a:78:20:85:c3:94:de:33:ce:49:cc:46:c6:fa:44:
95:30:d1:6e:54:de:82:1c:43:75:f0:90:9e:5d:70:
a1:7d:30:b4:12:4c:3c:70:ba:28:63:12:f0:24:db:
97:36:8b:2f:28:5d:6b:dc:c3:80:d2:c1:d9:ef:2d:
aa:d4:93:07:66:58:0f:86:cb:e2:60:fa:f0:59:aa:
ba:3b:21:b4:0d:50:20:ad:34:63:ac:ac:7e:9a:87:
9a:c7:d6:4c:63:34:0b:c0:c1:78:7b:9f:aa:df:f1:
bb:de:55:19:df:72:f7:1b:58:a4:81:76:c7:73:85:
73:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:85:59:F3:5D:8F:73:66:98:E8:A4:D8:60:5D:71:D2:46:8B:5C:E0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/AD488C5E82B811F1BE9F0107CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.144.0/21
Signature Algorithm: sha256WithRSAEncryption
8f:ee:69:cf:1f:48:5c:d1:46:00:ff:78:31:64:b9:c7:ef:ed:
5f:ea:c6:03:4a:23:0e:ca:5c:bf:0d:14:92:89:76:c8:16:15:
78:53:51:41:14:c1:5c:9d:b2:8a:db:b7:93:b0:7a:4e:2b:36:
d6:ec:e2:a4:3c:f4:4f:e0:01:13:38:01:08:24:27:09:04:ea:
20:3d:b3:e8:20:71:0c:2d:7a:09:0c:4f:38:ac:e2:02:53:b6:
57:78:41:7f:e4:73:31:e9:c3:ae:8d:3a:88:59:42:b6:05:71:
1a:75:36:0b:b4:bc:96:d1:a4:a3:cd:b2:fd:4f:0f:ef:8e:94:
0f:2b:a4:8f:da:83:57:7c:1e:b2:21:69:3f:4d:0b:21:96:fe:
1a:4e:58:55:ce:7f:38:13:63:92:1b:af:98:34:1e:74:29:ab:
25:28:15:bf:01:1b:ed:fd:91:3f:3d:63:f2:f4:da:06:80:5c:
0e:cc:f3:fa:c3:84:db:c9:52:f5:74:f4:a8:2f:83:3b:07:93:
07:a8:ea:50:39:62:a0:f8:ae:03:29:2d:0d:a5:c3:03:65:0f:
a5:94:d5:f2:e3:db:80:7d:a2:fb:ad:23:7f:95:76:2e:de:d8:
f6:23:a1:1d:e3:8e:62:8a:96:37:75:49:44:4a:65:0c:26:b2:
25:5c:02:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:22:26 2026 by rpki-client