Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/037889E8778E11F1B1A7EDA5CE1D38B0.roa
File: 037889E8778E11F1B1A7EDA5CE1D38B0.roa (raw, json)
Hash identifier: 6OCP0t/1QydqvoaKtxmNLQqSqy/8d6PfoarKYNk1MZQ=
Subject key identifier: BF:4E:DD:65:1B:E8:86:0C:4D:00:33:11:DA:7C:24:93:06:C5:14:B7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C2D7
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/037889E8778E11F1B1A7EDA5CE1D38B0.roa
Signing time: Sat 04 Jul 2026 09:52:06 +0000
ROA not before: Sat 04 Jul 2026 09:52:01 +0000
ROA not after: Mon 10 Aug 2026 09:52:01 +0000
asID: 271916
IP address blocks: 45.194.48.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115415 (0x1c2d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 4 09:52:01 2026 GMT
Not After : Aug 10 09:52:01 2026 GMT
Subject: CN=6a48d7c5-02f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1b:07:8f:9f:72:1e:41:2c:6b:aa:0b:97:08:
4e:bf:57:32:41:d4:bb:5e:4c:35:a5:09:e0:6d:8f:
ec:03:d3:53:d2:27:0a:31:bc:47:10:26:07:f4:a9:
4d:6a:3e:67:24:4f:b5:c9:42:d7:bb:76:00:bd:98:
39:2c:5b:00:d8:ba:2b:7c:d3:2b:0e:30:75:ad:8c:
e2:c4:35:a7:a6:1e:74:e9:a9:0e:2e:b9:ba:84:6c:
83:b4:ca:ce:77:d7:3a:24:22:32:84:01:97:b1:80:
15:2a:ed:14:82:ca:09:6d:25:28:bb:54:71:29:66:
98:80:fb:de:10:5d:ff:53:f5:6d:3b:ae:66:1f:c1:
6d:37:62:17:44:71:35:81:01:b9:89:66:fc:94:9c:
a4:cb:51:6a:98:b0:20:0e:7e:bb:b6:5d:86:5b:f8:
0a:2a:93:78:3c:1d:66:f5:f5:6e:26:26:10:98:8b:
ec:ec:76:4a:7a:8d:0a:ab:2c:ca:b1:b3:60:99:51:
a3:f1:d0:70:61:c3:09:69:d6:a4:2b:66:08:4b:bb:
94:67:68:eb:ff:da:8e:15:1f:20:89:30:7e:5d:2b:
34:c5:f8:ab:1c:f9:c7:10:68:7f:b4:a7:73:79:62:
05:42:d0:0c:a3:8b:ec:0d:e1:f2:65:14:ac:6f:19:
c8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:4E:DD:65:1B:E8:86:0C:4D:00:33:11:DA:7C:24:93:06:C5:14:B7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/037889E8778E11F1B1A7EDA5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.48.0/22
Signature Algorithm: sha256WithRSAEncryption
71:85:55:41:67:04:c3:5f:4e:fb:07:02:fa:c9:08:1a:cc:fb:
75:b9:18:06:40:5d:0c:27:67:41:36:70:43:9b:1d:ea:d5:03:
c8:b4:1d:45:88:10:f8:95:2f:a5:1c:75:4e:be:e9:3e:ba:79:
3d:a5:10:56:83:9c:b3:96:e4:b4:9d:9f:88:5a:9c:cb:b8:c3:
f6:74:3a:3d:cd:4a:71:01:23:94:ba:12:e6:be:55:07:59:f5:
2e:20:b5:d6:b7:53:c2:ce:a0:ad:a0:60:dd:dc:4f:e6:5c:37:
d6:ba:e6:59:d2:28:72:e5:5b:61:d7:29:49:3f:23:f9:38:1c:
a7:b8:58:90:e8:c1:b8:2c:8e:05:eb:2e:0a:a9:5e:b8:2d:29:
03:10:b8:2a:33:55:ea:6b:82:42:05:f7:2d:9e:ea:d9:74:f2:
b1:d5:1d:93:7f:96:a4:33:8f:18:18:c7:ee:d2:5f:23:f3:5e:
b8:94:78:17:1c:f9:4e:81:69:71:36:00:af:ca:df:8c:74:65:
89:77:4e:82:a5:8e:c8:9e:f3:67:5e:05:23:8c:6c:01:3d:fd:
4f:ef:0a:5a:70:37:97:01:a7:57:27:50:b2:88:62:86:88:e6:
22:fa:7c:5a:58:d5:ae:93:5d:31:35:a6:26:37:87:a0:31:b2:
36:df:73:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:44:05 2026 by rpki-client