Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CA06F0C884E911F1A1EC2AEACE1D38B0.roa
File: CA06F0C884E911F1A1EC2AEACE1D38B0.roa (raw, json)
Hash identifier: 6zOGOYM+wuEo8FoLFHFnqWz8XZS+eXKY28DzwgoYj6I=
Subject key identifier: 83:2B:40:9B:0E:01:E0:FC:64:9D:DE:9E:10:C8:10:9A:A7:7D:C9:DD
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C6CC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CA06F0C884E911F1A1EC2AEACE1D38B0.roa
Signing time: Tue 21 Jul 2026 09:51:48 +0000
ROA not before: Tue 21 Jul 2026 09:51:44 +0000
ROA not after: Sat 29 Aug 2026 09:51:44 +0000
asID: 44559
IP address blocks: 45.199.220.0/24 maxlen: 24
45.199.231.0/24 maxlen: 24
45.199.232.0/24 maxlen: 24
45.199.233.0/24 maxlen: 24
45.199.234.0/24 maxlen: 24
45.199.235.0/24 maxlen: 24
45.199.236.0/24 maxlen: 24
45.199.237.0/24 maxlen: 24
45.199.238.0/24 maxlen: 24
45.199.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116428 (0x1c6cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 21 09:51:44 2026 GMT
Not After : Aug 29 09:51:44 2026 GMT
Subject: CN=6a5f4134-bcc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c2:8a:d9:a6:2a:da:d8:ac:59:2a:fc:dd:23:
54:c0:33:4f:99:15:50:c9:59:bc:3d:9b:76:48:a7:
36:1b:81:21:47:4a:89:1f:f4:8b:29:ca:86:36:ab:
e1:c3:4b:bd:12:fc:41:4b:85:28:c8:93:62:4d:7d:
25:6e:e3:17:5f:0a:2b:c4:b9:d2:2f:a3:1a:79:89:
a1:6f:19:e5:87:9c:3f:ca:a8:eb:ba:63:f1:04:5f:
ae:25:4f:08:49:74:3c:35:ff:cd:1d:41:32:51:63:
f4:8e:04:25:63:93:51:40:11:23:7e:c1:40:95:a5:
78:86:a7:e9:c3:7f:65:41:14:e6:dc:4e:4e:39:30:
29:4f:d5:b8:57:62:c2:8d:24:1f:43:aa:73:48:19:
17:2f:4f:47:49:e1:61:6d:0b:e7:9d:8d:87:eb:23:
ae:9e:f1:83:62:48:92:c6:87:3d:7b:fa:4f:8d:db:
a8:d5:30:00:06:2e:50:f3:2f:60:69:88:88:a1:4c:
c6:78:8c:68:3f:94:59:3d:b1:9c:70:fc:28:26:d8:
b7:d8:5f:ab:4c:f2:82:35:9b:f1:a4:a8:e0:53:fb:
07:56:42:75:21:33:0e:fa:fc:43:26:5d:31:fa:8b:
17:ca:88:f3:25:33:2b:a8:82:19:d2:cc:b9:af:33:
8a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:2B:40:9B:0E:01:E0:FC:64:9D:DE:9E:10:C8:10:9A:A7:7D:C9:DD
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/CA06F0C884E911F1A1EC2AEACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.220.0/24
45.199.231.0-45.199.239.255
Signature Algorithm: sha256WithRSAEncryption
2d:80:c7:d9:27:72:30:c7:20:3e:80:85:c2:39:81:81:b7:9e:
14:f8:64:36:86:2f:46:ec:bb:9e:0f:1c:aa:47:8f:64:1f:ed:
66:9c:3a:c2:e9:0b:98:b4:48:c6:74:ee:d8:13:19:d9:cb:7c:
cc:9c:dd:6a:dc:b3:b6:d4:ee:b1:3b:cd:5a:fc:2b:cc:1d:1a:
0a:9b:66:12:d1:c5:5a:ef:af:4d:89:39:fc:a9:b4:43:08:72:
60:57:20:8b:36:d1:3b:f3:56:d1:97:4c:21:8e:1d:d4:ca:01:
86:8c:c1:1f:c4:23:f1:97:38:e3:63:47:08:6b:79:7a:38:03:
bb:bf:6c:61:20:b0:4e:0c:17:ea:73:46:38:39:c7:f6:8b:0f:
3e:00:ef:38:56:70:53:df:05:df:e1:5a:e1:b9:78:87:58:fa:
bd:6e:4c:9c:98:1d:70:ab:3a:65:cc:12:9f:15:e5:74:60:cb:
35:17:65:7c:3a:b1:a4:f5:8d:8d:c7:12:00:b9:62:c6:72:6d:
b4:ee:1d:a9:60:d3:b0:03:c3:90:a8:fd:ca:c9:a0:c0:f4:68:
88:db:7c:f3:2a:2a:cc:2f:74:3b:54:0f:97:cc:d0:a5:a4:67:
13:37:ab:7a:7f:ce:a0:96:53:79:a7:0c:70:17:d9:cf:77:49:
a8:be:e0:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:01:47 2026 by rpki-client