Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/160806348A4D11F1B9BF21CFCE1D38B0.roa
File: 160806348A4D11F1B9BF21CFCE1D38B0.roa (raw, json)
Hash identifier: XW0EBLlrIbpGHoL9hym2GWKYkT3DAX/F+xgAF0PFTH8=
Subject key identifier: 52:62:04:C5:73:C7:2C:8C:4D:DA:85:4E:F6:30:1B:51:FC:C9:5D:06
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C830
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/160806348A4D11F1B9BF21CFCE1D38B0.roa
Signing time: Tue 28 Jul 2026 06:25:12 +0000
ROA not before: Tue 28 Jul 2026 06:25:07 +0000
ROA not after: Sun 23 Aug 2026 06:25:07 +0000
asID: 138910
IP address blocks: 45.195.240.0/24 maxlen: 24
45.195.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 31 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116784 (0x1c830)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 28 06:25:07 2026 GMT
Not After : Aug 23 06:25:07 2026 GMT
Subject: CN=6a684b47-4842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:11:d9:88:35:51:26:eb:fa:e4:84:61:68:ee:
9a:5c:17:c6:cb:8d:11:bb:f0:79:4a:51:35:02:02:
2b:1f:c8:41:ee:1d:94:88:24:6c:ee:c1:fb:f2:cd:
e0:29:67:de:04:6c:e5:56:00:0c:48:38:a9:9e:32:
a3:5f:41:0a:31:1a:32:a4:05:d0:a2:00:ba:ae:c5:
ed:d0:54:ca:b9:4b:0e:e2:69:18:c1:f3:21:81:45:
6a:f7:86:1c:e3:f9:a6:1f:77:fb:84:39:83:8a:d7:
81:da:dc:47:31:0a:05:0a:fb:8c:d3:1e:35:15:ed:
7f:9c:8c:4a:0d:7f:39:8a:5d:28:2a:af:4c:48:51:
28:04:b7:59:50:61:44:8e:9f:3f:3a:28:0d:81:74:
f8:62:ad:b3:8e:f1:3d:54:6d:e0:10:6e:ab:b0:09:
dd:e2:de:6f:02:6d:f1:7d:a1:94:29:cb:51:b6:13:
f9:07:3b:39:64:01:21:0e:b1:9c:bb:24:ee:c7:0c:
40:c7:7c:ec:ba:39:9b:78:6b:1f:c8:1d:bf:ed:86:
a5:64:38:4d:81:8d:1c:da:f0:7b:c5:65:8f:88:25:
d4:40:15:de:32:87:c3:71:99:b2:0a:c9:a5:45:a0:
a4:d3:b5:2e:a1:59:35:fb:49:09:5e:15:df:b6:40:
a3:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:62:04:C5:73:C7:2C:8C:4D:DA:85:4E:F6:30:1B:51:FC:C9:5D:06
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/160806348A4D11F1B9BF21CFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.240.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:02:54:27:bc:c8:75:0a:ed:06:cb:48:3d:7b:35:03:68:71:
ee:77:66:c6:76:17:bc:07:2d:63:02:7f:a9:30:6e:6e:97:ed:
20:6d:53:d4:08:45:58:f5:bb:64:1c:5f:fc:e7:9f:85:78:70:
f0:b6:a6:4b:44:fa:56:2d:9a:05:31:42:2c:c4:3b:1c:07:24:
59:33:25:ca:95:a3:03:45:57:0d:1b:c9:fd:2e:1f:71:61:17:
d2:87:6e:dd:83:07:70:5e:86:68:22:1d:65:13:d2:dd:c0:c1:
ba:c3:40:aa:68:09:4c:dd:df:93:e1:3e:77:dd:d8:fe:a3:be:
1e:13:9a:cd:f9:40:02:bc:71:a5:9c:01:6b:72:c3:10:4a:a1:
4e:ff:8d:6f:74:e7:12:3a:db:1a:c8:db:d3:14:b5:af:81:a3:
bb:db:d8:b5:c0:79:ba:7c:83:af:78:4b:61:b1:ee:13:60:e4:
26:a1:2e:69:e2:5e:44:e4:5c:21:f1:5c:6b:fc:d2:91:b6:ef:
60:3e:76:83:a6:e7:7d:07:70:76:cf:84:02:87:fc:06:02:0d:
bf:23:00:4c:e5:db:b7:39:1b:7d:a2:af:e2:55:7f:c4:1b:46:
c3:ed:4f:09:48:64:b5:74:e6:3e:c5:af:a7:c5:07:98:ea:5a:
8e:9d:49:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:13:31 2026 by rpki-client