Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FDCC2CF0842811F18C7F92CFCE1D38B0.roa
File: FDCC2CF0842811F18C7F92CFCE1D38B0.roa (raw, json)
Hash identifier: IRZz0AzJdYQHwRNbddqCJIIvWIQdlre1hZzoXamvxuA=
Subject key identifier: 1C:3A:F7:A3:CA:5A:78:50:2D:BE:79:2D:4E:71:90:C0:C0:F3:BF:B4
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C673
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FDCC2CF0842811F18C7F92CFCE1D38B0.roa
Signing time: Mon 20 Jul 2026 10:51:42 +0000
ROA not before: Mon 20 Jul 2026 10:51:38 +0000
ROA not after: Thu 27 Aug 2026 10:51:38 +0000
asID: 6079
IP address blocks: 45.197.208.0/20 maxlen: 24
45.197.240.0/20 maxlen: 24
45.198.185.0/24 maxlen: 24
45.198.186.0/23 maxlen: 24
45.198.192.0/24 maxlen: 24
45.203.139.0/24 maxlen: 24
45.203.196.0/23 maxlen: 24
45.203.198.0/24 maxlen: 24
45.203.210.0/24 maxlen: 24
45.203.221.0/24 maxlen: 24
45.203.222.0/23 maxlen: 24
45.203.244.0/24 maxlen: 24
45.205.85.0/24 maxlen: 24
45.205.110.0/23 maxlen: 24
45.205.132.0/24 maxlen: 24
45.205.151.0/24 maxlen: 24
45.205.154.0/24 maxlen: 24
45.205.172.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 00:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116339 (0x1c673)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 20 10:51:38 2026 GMT
Not After : Aug 27 10:51:38 2026 GMT
Subject: CN=6a5dfdbe-1999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:45:f9:2b:89:62:25:1b:6e:35:1b:75:7e:5a:
23:9a:0f:1a:55:6c:f1:24:5b:36:f5:f0:ad:23:66:
ba:21:e1:fb:a8:df:4e:bf:ca:b5:8f:c4:4c:dd:d9:
b9:99:ec:f9:cc:2b:f5:83:e4:e8:2f:74:8f:b6:15:
bb:c0:ac:39:e6:07:2a:aa:e0:3a:9f:0d:b4:d0:01:
4d:23:8b:7f:aa:a7:b5:91:8f:f3:4e:a6:cf:ef:51:
55:44:d8:84:7a:c9:01:6b:f5:71:e1:e2:c9:b7:6e:
b7:cb:69:0a:1d:44:94:6b:09:f2:e5:48:18:d1:ec:
c1:74:3b:0f:4e:89:24:b0:7a:9d:33:b5:93:04:9a:
88:f9:89:68:05:85:00:2a:58:03:d4:09:79:4d:c8:
a1:9f:22:72:cc:a3:50:03:d8:26:b5:dc:a1:9b:d1:
37:12:29:41:a8:d8:0c:a4:26:23:70:cf:e7:ca:d2:
35:02:cb:ad:a5:71:cf:2f:5a:ef:c7:13:77:27:bc:
44:3c:71:14:c7:1d:32:5e:45:36:f7:df:2c:9b:5a:
5d:c2:c6:db:8b:a4:98:28:1f:79:26:22:4d:82:e3:
f5:47:1c:43:04:c1:a5:0b:13:24:15:fd:07:73:b6:
2f:bf:5d:49:f0:df:ca:62:20:0a:f4:f9:97:e1:4a:
04:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:3A:F7:A3:CA:5A:78:50:2D:BE:79:2D:4E:71:90:C0:C0:F3:BF:B4
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/FDCC2CF0842811F18C7F92CFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.208.0/20
45.197.240.0/20
45.198.185.0-45.198.187.255
45.198.192.0/24
45.203.139.0/24
45.203.196.0-45.203.198.255
45.203.210.0/24
45.203.221.0-45.203.223.255
45.203.244.0/24
45.205.85.0/24
45.205.110.0/23
45.205.132.0/24
45.205.151.0/24
45.205.154.0/24
45.205.172.0/23
Signature Algorithm: sha256WithRSAEncryption
92:72:a8:28:a7:72:b8:96:95:ee:25:f7:16:6c:90:33:c7:94:
d3:ea:f7:ef:56:5c:53:e1:f8:05:20:1e:c1:36:cd:f5:66:62:
f7:07:b6:b7:46:a4:9a:20:8e:c9:48:9b:81:63:0f:b6:5c:16:
b4:6e:28:e5:d7:06:7e:4d:9c:54:d7:ca:ea:17:d1:e9:c3:d7:
27:69:84:a1:79:95:df:64:be:c4:db:2e:da:70:05:57:c4:ae:
0d:1d:95:e6:77:10:24:5d:14:22:99:4f:0c:ac:5d:7b:af:e4:
6f:95:02:dc:40:e8:40:99:83:dd:b9:5b:47:82:a4:38:37:dc:
b9:b4:71:f2:01:9f:7b:c9:bd:25:a0:97:aa:28:b4:ec:d3:45:
a9:b3:01:87:31:de:b0:2d:0f:a5:ce:3c:ba:20:75:64:8b:79:
92:93:4d:33:f0:2b:e1:fb:b1:44:c8:af:dc:a7:b5:d9:60:d0:
c3:f5:5f:7d:97:7c:10:3a:7c:8b:c3:08:f9:81:31:09:64:62:
3a:67:d4:79:df:9b:dc:9f:0c:37:15:8e:5e:be:6f:fc:fa:2a:
f4:b6:57:00:0c:95:ed:ab:04:c6:09:94:56:b2:9e:a1:7e:29:
65:20:7c:1f:ab:38:02:10:64:a6:21:c4:d7:e5:74:f2:0c:20:
ef:cc:3f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:05:18 2026 by rpki-client