Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D88372A0854511F1A61D470CCF1D38B0.roa
File: D88372A0854511F1A61D470CCF1D38B0.roa (raw, json)
Hash identifier: EZGQu70686wKl0Pfc9sVhSYaxHe1ne1bZVtd3gJyf+w=
Subject key identifier: 72:84:A3:4A:0C:BF:4C:4F:35:EB:C4:59:4E:75:9F:C5:C0:38:BD:54
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C742
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D88372A0854511F1A61D470CCF1D38B0.roa
Signing time: Tue 21 Jul 2026 20:50:46 +0000
ROA not before: Tue 21 Jul 2026 20:50:42 +0000
ROA not after: Sun 16 Aug 2026 20:50:42 +0000
asID: 134365
IP address blocks: 45.197.144.0/21 maxlen: 24
45.197.144.0/24 maxlen: 24
45.197.145.0/24 maxlen: 24
45.197.146.0/24 maxlen: 24
45.197.147.0/24 maxlen: 24
45.197.148.0/24 maxlen: 24
45.197.149.0/24 maxlen: 24
45.197.150.0/24 maxlen: 24
45.197.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116546 (0x1c742)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 21 20:50:42 2026 GMT
Not After : Aug 16 20:50:42 2026 GMT
Subject: CN=6a5fdba6-399f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:41:81:b3:3b:8a:b1:83:b8:f8:59:5d:8a:eb:
ed:15:43:e1:05:b5:33:f3:19:6e:c8:83:8e:27:b4:
81:bf:b3:4b:bc:7c:c9:2c:a5:2f:bf:72:db:8c:c0:
e2:9d:e3:18:f3:73:5d:71:45:9a:9c:be:9d:8c:33:
ed:95:6b:08:64:23:f7:d5:70:d1:cd:04:ac:49:2a:
c9:1b:03:f5:18:a0:57:37:73:91:ca:fe:62:f8:89:
7e:80:18:b5:f1:e1:a0:7c:2f:e8:87:fa:fb:31:90:
54:b4:49:b0:de:fa:1d:8f:c9:fa:dd:aa:f0:eb:cc:
ff:30:a4:d2:75:a4:50:f1:73:01:2e:84:08:40:db:
de:b1:86:f8:d0:bf:43:00:78:c7:d4:97:f6:de:7d:
68:a6:4f:1e:bb:41:a9:30:e3:5a:6d:3f:ad:ab:d9:
4a:b3:8b:90:2e:40:43:68:4e:a7:46:3a:08:92:6c:
49:01:ef:b5:f9:80:c1:22:4a:38:7f:66:a9:cd:c1:
77:50:ce:02:a7:be:e7:7e:6f:ce:20:41:eb:d4:7a:
8e:ac:04:ac:31:79:fc:1c:70:57:66:cb:fe:3e:c5:
1f:64:d8:ec:f1:41:5f:48:ae:e0:b6:91:a0:89:24:
0d:b8:3e:7e:63:ec:19:9c:9d:fd:bc:d2:81:4f:ec:
a5:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:84:A3:4A:0C:BF:4C:4F:35:EB:C4:59:4E:75:9F:C5:C0:38:BD:54
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/D88372A0854511F1A61D470CCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.144.0/21
Signature Algorithm: sha256WithRSAEncryption
05:08:a5:f9:0f:d0:11:32:a8:4e:4f:27:08:5b:97:ed:5e:97:
9e:4f:77:8e:c4:33:1b:7a:d4:a0:bf:2c:d9:8e:7c:6b:04:38:
a1:55:71:d2:41:26:7d:b5:60:4b:d0:30:80:1a:fb:1c:12:83:
4d:ef:cc:ba:76:20:7e:42:69:44:35:04:4a:ce:d1:0a:1b:0e:
e4:6a:c8:9d:14:fb:d3:59:55:f7:dc:7f:6f:33:78:13:48:b7:
8c:65:8b:10:59:81:1a:e5:d0:60:36:ea:c8:7e:b3:37:91:bf:
d6:56:93:cb:c6:8d:c9:c4:96:45:f3:8d:53:ef:f9:e7:3b:e7:
da:f5:56:60:db:77:40:41:85:3b:c0:b9:0a:b1:da:36:3e:b5:
ff:2e:a0:bf:d3:b9:1f:67:2e:a9:58:fb:e5:44:4b:6b:0d:1c:
65:6d:1b:90:87:63:ce:3e:b6:62:45:55:87:15:fb:00:81:ce:
bc:53:60:d2:81:0b:b4:68:77:58:64:a2:34:ed:1a:f3:3e:0f:
e3:d8:e9:98:eb:42:89:cc:68:b2:41:31:a0:9d:64:0a:bd:65:
fb:83:10:11:3a:79:9f:31:89:55:c4:32:d7:4d:45:ae:ac:18:
91:6d:88:81:2c:5c:cd:ee:2a:c8:7b:06:5b:0a:38:f2:1a:b5:
8c:73:d1:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:38:25 2026 by rpki-client