Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BC45033849E511F1A21145BFCE1D38B0.roa
File: BC45033849E511F1A21145BFCE1D38B0.roa (raw, json)
Hash identifier: T3KyX/BoDJuykoQT6oyh3MJtDruOIpMu7DjI1KZRiaQ=
Subject key identifier: FD:40:15:C8:91:B8:CF:D3:54:B1:0D:CB:01:35:D1:72:E7:74:C6:6D
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01B213
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BC45033849E511F1A21145BFCE1D38B0.roa
Signing time: Thu 07 May 2026 07:24:08 +0000
ROA not before: Thu 07 May 2026 07:24:04 +0000
ROA not after: Sat 16 May 2026 07:24:04 +0000
asID: 216211
IP address blocks: 45.192.196.0/22 maxlen: 24
45.192.200.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:26:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111123 (0x1b213)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: May 7 07:24:04 2026 GMT
Not After : May 16 07:24:04 2026 GMT
Subject: CN=69fc3e18-dcc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7d:28:ad:6d:ae:bc:6f:53:95:dd:88:f3:f1:
9e:0f:d5:4d:7f:76:36:94:00:36:2f:9e:ca:26:eb:
a3:9c:c5:e2:c2:a2:cc:74:71:29:cb:94:8f:7d:78:
8e:48:db:c6:97:9e:7d:64:80:88:8b:50:0f:91:a0:
03:e1:2b:ac:f3:14:f9:53:f8:97:60:f8:fe:12:70:
00:30:f7:f3:a7:3b:76:42:7e:21:dc:87:2f:f6:5d:
07:b7:dd:e7:a7:2d:ee:8e:0d:e3:4e:95:7f:50:8f:
77:50:4e:75:fe:03:56:9b:7b:d4:d5:4c:13:19:8c:
b9:ff:c2:3a:88:fc:f8:68:61:8f:af:38:34:93:41:
26:b2:da:96:4e:8c:81:29:d7:62:c1:b9:79:31:d8:
0b:1d:84:cc:01:b5:9f:87:a1:ac:16:ba:f4:64:63:
5e:f8:8c:8e:3e:be:eb:69:97:af:3c:9e:aa:70:07:
76:90:22:a4:26:ec:af:75:9f:91:f3:77:ca:2a:c5:
ce:60:5b:3d:85:dd:a8:cc:bf:b5:bc:e8:1e:e1:e9:
77:ab:f6:c6:a1:2a:8d:47:6e:0b:83:63:28:c6:dd:
85:b7:e2:12:d3:9a:e4:9f:54:4e:e1:01:49:66:4b:
98:a5:8a:fb:40:4b:15:1d:33:17:b3:7e:99:c9:f7:
5d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:40:15:C8:91:B8:CF:D3:54:B1:0D:CB:01:35:D1:72:E7:74:C6:6D
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/BC45033849E511F1A21145BFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.196.0-45.192.203.255
Signature Algorithm: sha256WithRSAEncryption
74:f4:7e:61:9c:9b:eb:9b:e8:52:7b:44:d6:28:6e:26:c0:f0:
22:10:e3:26:6c:77:33:ec:43:23:9a:ef:f4:c0:36:76:86:05:
07:66:90:39:18:00:60:52:a8:6e:77:20:b4:b3:93:2e:2a:a2:
c7:99:43:7e:03:6b:12:91:7b:af:9d:4c:29:e5:89:fa:ff:51:
13:10:f6:8a:d7:81:d7:f7:98:d0:c1:8c:86:75:8f:c8:d4:07:
0a:9b:5e:b5:86:39:be:2b:b5:67:24:38:30:bf:68:48:e7:d4:
f6:20:ac:92:41:16:c4:c3:c8:fe:65:c8:3a:9b:e6:ab:e2:a8:
db:da:db:59:57:d0:be:2b:f4:f9:31:de:44:d6:38:d3:21:64:
3d:c1:27:e7:31:28:23:3a:f3:ba:cc:9f:07:0a:9e:8a:21:8f:
e0:54:a2:ca:01:36:c8:cb:de:f7:c8:e0:87:f2:d7:96:b5:54:
1e:85:59:a7:6a:ae:91:13:78:42:0a:5c:ec:8c:0f:92:64:04:
0b:80:70:b5:f6:55:88:3b:85:2a:70:f2:d2:c4:72:81:42:c1:
d7:20:bf:f8:a3:84:1b:3c:f1:02:7b:19:88:49:95:92:3d:bc:
01:4f:63:62:77:e2:e0:7e:af:f5:c7:ba:ff:da:e9:93:ca:07:
71:3e:97:ec
-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIDAbITMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQVIxMTAvBgNVBAUTKDc5N0Q4OEQ4MTNFMjBGRkY5ODJDQzc0MTlFOTY5
QkFFQTZCRkQ2OUIwHhcNMjYwNTA3MDcyNDA0WhcNMjYwNTE2MDcyNDA0WjAYMRYw
FAYDVQQDEw02OWZjM2UxOC1kY2M0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAwH0orW2uvG9Tld2I8/GeD9VNf3Y2lAA2L57KJuujnMXiwqLMdHEpy5SP
fXiOSNvGl559ZICIi1APkaAD4Sus8xT5U/iXYPj+EnAAMPfzpzt2Qn4h3Icv9l0H
t93npy3ujg3jTpV/UI93UE51/gNWm3vU1UwTGYy5/8I6iPz4aGGPrzg0k0EmstqW
ToyBKddiwbl5MdgLHYTMAbWfh6GsFrr0ZGNe+IyOPr7raZevPJ6qcAd2kCKkJuyv
dZ+R83fKKsXOYFs9hd2ozL+1vOge4el3q/bGoSqNR24Lg2Moxt2Ft+IS05rkn1RO
4QFJZkuYpYr7QEsVHTMXs36ZyfddlwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFP1A
FciRuM/TVLENywE10XLndMZtMB8GA1UdIwQYMBaAFHl9iNgT4g//mCzHQZ6Wm66m
v9abMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFFQTIyOC9lWDJJ
MkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY3JsMGQGCCsGAQUFBwEBBFgwVjBUBggr
BgEFBQcwAoZIcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYXJp
bi9lWDJJMkJQaURfLVlMTWRCbnBhYnJxYV8xcHMuY2VyME8GA1UdIAEB/wRFMEMw
QQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmluaWMu
bmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYBBQUH
MAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4RjJEMC85MkY4NkUxQzZFMDUxMUU4QTFCNTg1NEJGOEFF
QTIyOC9CQzQ1MDMzODQ5RTUxMUYxQTIxMTQ1QkZDRTFEMzhCMC5yb2EwNQYIKwYB
BQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24ueG1s
MCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAItwMQDBAItwMgwDQYJKoZI
hvcNAQELBQADggEBAHT0fmGcm+ub6FJ7RNYobibA8CIQ4yZsdzPsQyOa7/TANnaG
BQdmkDkYAGBSqG53ILSzky4qoseZQ34DaxKRe6+dTCnlifr/URMQ9orXgdf3mNDB
jIZ1j8jUBwqbXrWGOb4rtWckODC/aEjn1PYgrJJBFsTDyP5lyDqb5qviqNva21lX
0L4r9Pkx3kTWONMhZD3BJ+cxKCM687rMnwcKnoohj+BUosoBNsjL3vfI4Ify15a1
VB6FWadqrpETeEIKXOyMD5JkBAuAcLX2VYg7hSpw8tLEcoFCwdcgv/ijhBs88QJ7
GYhJlZI9vAFPY2J34uB+r/XHuv/a6ZPKB3E+l+w=
-----END CERTIFICATE-----
Generated at Wed May 13 11:49:28 2026 by rpki-client