Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E31B64E684E811F1989E8BE2CE1D38B0.roa
File: E31B64E684E811F1989E8BE2CE1D38B0.roa (raw, json)
Hash identifier: krJvbVHNVb7MgchRyo/dCEedWY2Ghbun7VBYe9M0j1g=
Subject key identifier: AE:AD:78:58:30:DB:8E:21:01:95:A4:EC:DC:0E:66:90:49:52:5E:1C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C6C8
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E31B64E684E811F1989E8BE2CE1D38B0.roa
Signing time: Tue 21 Jul 2026 09:45:21 +0000
ROA not before: Tue 21 Jul 2026 09:45:17 +0000
ROA not after: Sat 29 Aug 2026 09:45:17 +0000
asID: 44559
IP address blocks: 45.199.210.0/24 maxlen: 24
45.199.211.0/24 maxlen: 24
45.199.212.0/24 maxlen: 24
45.199.213.0/24 maxlen: 24
45.199.214.0/24 maxlen: 24
45.199.215.0/24 maxlen: 24
45.199.216.0/24 maxlen: 24
45.199.217.0/24 maxlen: 24
45.199.218.0/24 maxlen: 24
45.199.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 00:26:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116424 (0x1c6c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 21 09:45:17 2026 GMT
Not After : Aug 29 09:45:17 2026 GMT
Subject: CN=6a5f3fb0-63ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:dc:e2:09:f4:47:96:61:ea:54:fd:87:e4:86:
d5:8e:54:68:44:35:9e:64:b3:9a:3d:42:5e:ea:1e:
1d:3d:37:7f:65:10:c9:70:be:bb:d2:c0:7b:b4:61:
fe:02:f1:7c:27:4a:4c:99:2b:21:79:a4:02:10:0e:
5a:2d:d4:a7:4d:2f:31:02:61:ca:53:e4:83:eb:e9:
7e:93:47:89:1d:4d:3b:aa:e9:36:3d:f8:e6:a6:ce:
3c:61:32:87:db:12:fe:8d:fd:8a:2c:f9:f0:49:6b:
39:e5:e6:8e:78:2a:f7:9c:bd:d8:58:41:66:fb:c3:
38:c6:4e:70:6f:e8:42:82:b2:94:91:d0:82:d2:8b:
b4:d0:8b:6b:97:19:a3:69:2b:00:52:ec:86:34:75:
bb:21:ab:5f:3c:14:15:10:b4:71:e1:d5:0c:ec:11:
41:36:06:88:f3:04:64:d7:84:65:ad:4b:15:20:ab:
cc:79:c8:32:dd:b4:f0:d6:c7:da:56:2d:08:c3:be:
4c:41:69:13:6c:87:4a:64:20:fc:72:b9:cc:c7:67:
a9:cd:8d:af:b3:03:b9:b8:2b:3d:a7:69:46:23:00:
5e:65:50:75:2f:36:f6:58:c7:dc:2e:b0:4c:3a:35:
ef:3f:d5:ed:8d:1e:49:96:c1:e2:ae:52:ac:17:02:
8e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:AD:78:58:30:DB:8E:21:01:95:A4:EC:DC:0E:66:90:49:52:5E:1C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/E31B64E684E811F1989E8BE2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.199.210.0-45.199.219.255
Signature Algorithm: sha256WithRSAEncryption
00:66:60:66:1d:75:99:1a:61:c2:ee:29:f5:76:97:4e:28:a7:
c6:4d:a7:ed:93:f9:69:91:88:a9:3f:78:e8:cb:7d:42:01:2a:
c8:43:12:d9:c5:5f:cb:36:5c:23:6d:1c:eb:1a:7a:4c:96:6d:
b8:a8:31:2c:8f:7d:65:8a:ae:28:1b:43:62:11:c3:1f:33:2f:
69:5c:81:be:f6:da:10:4b:b7:cf:33:7c:fd:c9:6c:9b:1d:1a:
d5:7f:8e:e3:07:1f:5c:83:51:32:06:c6:42:db:50:cb:af:7b:
9a:c1:02:39:6e:4c:b5:dd:d0:38:ef:4f:3a:4e:88:4c:44:37:
05:2d:6e:82:6c:ab:fc:30:61:fb:dd:11:fb:df:5c:13:bc:cf:
7f:33:f7:b0:8d:35:58:d1:1a:fb:22:1b:0d:ed:51:c4:0f:3e:
86:6c:99:f2:3c:98:15:1d:e8:01:d9:77:28:4c:8f:c5:93:dc:
01:bc:6c:ec:0f:27:a1:84:c5:df:42:46:fc:98:91:ff:eb:81:
0c:f6:cb:46:0a:83:ee:0f:4b:a9:75:e1:a4:8d:3f:e9:80:a9:
9d:1c:79:3d:5f:c4:02:30:dd:c7:3b:9b:91:bc:00:5c:27:52:
15:f0:bf:b6:39:94:4d:44:a3:ce:e2:7c:e5:45:bc:b8:b6:d5:
87:de:f6:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:01:44 2026 by rpki-client