Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0016E14A75EB11F1BC87C3B3CE1D38B0.roa
File: 0016E14A75EB11F1BC87C3B3CE1D38B0.roa (raw, json)
Hash identifier: w1/wyfyUjQiZAQu1ul7OkXREo8jqYG4GIGXYqlbh4Hw=
Subject key identifier: 4A:DE:A8:B7:82:B6:5F:59:6A:D2:78:DF:09:00:04:84:AD:B0:35:6C
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C24E
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0016E14A75EB11F1BC87C3B3CE1D38B0.roa
Signing time: Thu 02 Jul 2026 07:52:41 +0000
ROA not before: Thu 02 Jul 2026 07:52:36 +0000
ROA not after: Sun 23 Aug 2026 07:52:36 +0000
asID: 263242
IP address blocks: 45.196.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115278 (0x1c24e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 2 07:52:36 2026 GMT
Not After : Aug 23 07:52:36 2026 GMT
Subject: CN=6a4618c9-e394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:cb:c4:09:0e:e1:ca:55:f5:0e:d0:6b:b2:33:
ca:a8:3a:1b:30:1b:2a:be:78:e3:34:7d:d1:d7:8e:
e0:78:1d:5a:41:c1:ac:06:59:7a:11:45:1d:59:4e:
8f:0d:34:d8:cd:8b:ee:fd:12:82:63:c8:52:11:0b:
bb:f2:62:2e:f7:bb:4c:a6:8f:b0:47:f4:75:33:15:
4e:83:5b:28:01:2a:ae:ef:57:ef:f8:a7:cc:92:86:
7d:20:af:cc:6a:5e:bc:15:40:29:b0:98:df:6d:5c:
49:f6:6c:c0:a4:3c:13:59:77:bb:27:1e:25:92:5d:
16:3b:72:44:3f:ef:da:99:10:a4:91:5b:59:b9:59:
38:04:ff:a4:40:86:1d:87:31:72:f6:5a:ab:32:e9:
41:e0:bd:34:dd:ad:03:61:21:3b:89:1b:ef:66:65:
01:86:1d:4b:2d:d5:d3:fa:7b:21:7a:c5:76:c3:cb:
08:d6:83:31:02:1a:ba:9c:d7:d9:67:c7:26:1c:13:
73:16:2e:5d:dc:7f:19:7c:87:17:e6:01:5b:36:15:
85:ff:97:a0:d8:1d:49:0c:47:71:f1:7a:03:2c:59:
ef:ba:9b:71:e0:1a:84:b1:33:32:68:9f:56:f8:46:
15:c1:1a:b6:f6:e2:24:d1:79:59:d2:a2:9e:36:fe:
43:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:DE:A8:B7:82:B6:5F:59:6A:D2:78:DF:09:00:04:84:AD:B0:35:6C
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0016E14A75EB11F1BC87C3B3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.196.164.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:7c:4c:e1:ed:83:a4:48:62:ad:e4:e6:35:ae:cc:3c:72:41:
b1:5b:a9:21:94:77:c0:89:d1:0c:c4:22:b1:22:c0:c6:2c:7a:
ad:e9:5a:be:9e:f6:7e:05:57:49:0b:53:fd:36:91:94:da:77:
ee:13:b9:ba:40:76:f4:89:9e:e0:7a:aa:dd:31:5b:2b:78:fb:
ae:ba:e2:92:4c:13:cb:d7:89:48:6b:d7:3f:38:2f:08:36:f8:
65:6b:e3:bc:1f:99:89:fa:a9:b4:6c:88:58:fc:f1:6d:11:3a:
5e:0e:06:13:d8:73:0e:8c:df:c0:73:0d:f9:31:61:71:96:ec:
06:fd:69:6d:63:86:9b:64:9a:65:46:8e:68:9a:99:aa:50:cb:
ae:ef:ec:33:46:de:28:48:d9:e0:bd:70:1b:b0:81:ad:d3:06:
3c:be:6e:51:c1:4d:7b:b5:f9:1b:cc:5f:8f:c4:65:b6:45:f4:
f3:82:ae:42:2b:de:09:f9:7c:8e:89:9e:d3:56:99:6f:df:4b:
f2:2a:11:79:5d:68:26:57:e7:c1:2c:13:fc:b6:9a:e3:71:4c:
14:fe:c0:d3:b5:0c:a0:89:6d:f8:79:0f:3d:b0:fe:b0:d5:00:
91:22:42:0a:83:bb:ae:f1:3c:ad:4b:0f:8b:41:cf:db:c9:ec:
e0:8a:e5:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:15 2026 by rpki-client