Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7B40525434CB11F1935D1FDBCE1D38B0.roa
File: 7B40525434CB11F1935D1FDBCE1D38B0.roa (raw, json)
Hash identifier: c4n+/vxeGny1F3T9MMsPhtlrj8xsh9OS3xO3GQvbC20=
Subject key identifier: 45:51:20:7D:7F:6F:83:2F:BF:67:27:C4:CA:BF:10:9C:0F:88:EC:DC
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01ABAC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7B40525434CB11F1935D1FDBCE1D38B0.roa
Signing time: Fri 10 Apr 2026 10:53:18 +0000
ROA not before: Fri 10 Apr 2026 10:53:13 +0000
ROA not after: Sun 10 May 2026 10:53:13 +0000
asID: 141883
IP address blocks: 45.200.24.0/21 maxlen: 24
45.200.32.0/19 maxlen: 24
45.201.214.0/23 maxlen: 24
45.201.216.0/21 maxlen: 24
45.201.224.0/21 maxlen: 24
45.201.240.0/20 maxlen: 24
45.204.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 14:05:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109484 (0x1abac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Apr 10 10:53:13 2026 GMT
Not After : May 10 10:53:13 2026 GMT
Subject: CN=69d8d69e-46a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:da:a7:69:3b:14:3f:c7:0d:6e:25:6a:c8:1f:
aa:87:dd:8e:6f:26:e9:1b:c1:b6:3d:33:ac:4e:16:
a6:86:2c:ae:1c:77:e9:4a:21:9f:ee:40:85:8d:18:
c8:ef:42:d2:68:20:0a:ce:ee:e4:b0:4e:87:cb:96:
3f:d7:74:65:59:6b:56:bc:a9:44:a2:ea:45:f3:8d:
52:c1:75:30:73:be:c6:bf:61:e9:f6:75:bd:5e:fd:
44:d9:98:24:80:8c:92:71:59:7c:ae:08:3e:e2:58:
36:88:f7:9c:0d:6e:b2:0d:c7:18:f5:f0:a5:2a:15:
ed:0e:ec:b4:b6:b0:af:ea:25:65:71:fb:0b:71:3e:
0b:e3:60:9e:74:cf:34:49:f4:62:c3:62:95:59:96:
8d:27:a8:85:6a:4e:87:03:0a:9f:55:4e:0e:ab:c4:
a8:f9:ab:29:12:8d:db:83:d1:e6:03:ab:db:20:4d:
74:7c:8c:21:e7:1f:8f:be:9c:74:30:07:6a:54:16:
cb:4a:65:a4:19:63:ce:d9:aa:9c:dd:d9:36:4c:9b:
e8:08:2e:42:bc:02:bf:61:56:0e:84:b7:7b:2e:5f:
db:c2:13:76:c1:55:9c:6f:17:aa:34:f8:a8:d4:0c:
a6:97:9e:d6:c5:73:af:a2:09:90:7c:d3:c9:40:f2:
3a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:51:20:7D:7F:6F:83:2F:BF:67:27:C4:CA:BF:10:9C:0F:88:EC:DC
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/7B40525434CB11F1935D1FDBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.24.0-45.200.63.255
45.201.214.0-45.201.231.255
45.201.240.0/20
45.204.0.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:45:0e:c5:ec:16:f3:c9:45:27:a9:53:ec:45:40:ea:81:ed:
5c:b0:60:87:92:7d:38:c8:e7:10:21:d8:92:5f:58:b2:f9:bf:
ca:61:9e:11:13:23:bc:f3:6d:b1:bd:36:dc:92:6a:32:70:5f:
d7:3f:88:fd:f8:f7:b0:16:4a:12:52:47:67:67:aa:f5:ce:1a:
9b:28:ca:6a:b3:42:78:5a:2a:0d:22:e8:9c:6d:b9:d2:a0:d1:
89:4a:20:a0:17:2b:9a:5b:c0:62:ac:50:8c:72:44:ba:fd:3c:
57:6e:8f:aa:ba:67:d0:8e:ea:79:14:e8:95:9d:e7:36:16:61:
dd:48:10:fe:38:0a:a3:3c:d5:b8:07:36:ea:83:2f:e0:27:7a:
10:45:c1:6d:f1:55:17:15:8f:c1:25:f2:b8:d7:b8:40:1e:e6:
15:e7:92:1a:ad:4e:e4:be:0b:02:2c:75:01:b0:94:93:21:3d:
c4:5b:02:84:9a:fb:e3:fb:79:cf:de:e2:f6:3d:ea:88:c2:65:
03:ac:4b:f7:a2:b1:fb:40:7a:cf:db:03:df:75:a1:bb:a9:0b:
92:d1:9c:a9:20:f8:3c:ad:f4:11:56:c7:dc:fa:6d:03:a7:3d:
e3:c2:65:23:35:0f:bf:ab:36:46:56:ab:7e:5b:af:9a:26:c2:
8f:ad:0c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:25:51 2026 by rpki-client