Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0A5A891C69B711F1B7B576B0CE1D38B0.roa
File: 0A5A891C69B711F1B7B576B0CE1D38B0.roa (raw, json)
Hash identifier: cJOffmXxWPGAuzPLLY6209g0oQ7qJuHNAPTgHToFy+w=
Subject key identifier: B8:CD:A1:05:D2:3F:40:7E:1C:E9:53:C1:A1:64:85:54:32:68:7D:9A
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BE5F
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0A5A891C69B711F1B7B576B0CE1D38B0.roa
Signing time: Tue 16 Jun 2026 19:10:30 +0000
ROA not before: Tue 16 Jun 2026 19:10:25 +0000
ROA not after: Fri 24 Jul 2026 19:10:25 +0000
asID: 204741
IP address blocks: 45.195.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 02 Jul 2026 00:26:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114271 (0x1be5f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 16 19:10:25 2026 GMT
Not After : Jul 24 19:10:25 2026 GMT
Subject: CN=6a319fa6-a168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f6:bb:61:68:54:a4:ed:a1:ff:94:ce:47:35:
86:06:65:3e:89:e9:42:7a:77:81:e6:ca:31:7b:5a:
70:94:e0:98:89:09:48:b3:c8:ad:82:28:0a:92:76:
4c:db:7b:79:07:18:89:e1:a8:33:cc:0c:0f:c6:13:
ed:41:a2:1c:73:7b:28:66:d7:96:17:7e:b3:d8:12:
43:d3:37:50:2e:ad:81:72:ee:01:a8:23:df:39:c3:
e2:2e:0c:6f:01:b3:08:32:ff:9d:20:a8:0c:8e:f0:
a0:9e:05:94:be:06:2e:33:70:de:39:f6:21:b0:a9:
12:ff:dc:9b:9e:61:4a:78:fa:4c:94:a7:dd:ab:28:
f7:3f:a5:fc:6f:3a:20:bc:f3:a8:b4:82:14:d8:ef:
6a:36:56:6c:96:1f:e7:ae:33:5c:24:9f:8e:d2:58:
12:d5:dd:0a:1a:1b:f8:55:36:34:a6:5a:56:1d:20:
59:31:76:21:ea:35:ed:c4:c2:75:f4:de:64:2a:a5:
0a:24:6a:41:4b:fc:1d:c2:9b:e5:9a:54:c6:3c:7e:
ab:f6:98:cc:c5:c6:e3:89:ec:b2:32:3c:44:d0:b0:
98:da:bf:0d:59:82:e9:69:74:0c:3a:33:c8:b8:d2:
77:67:90:db:da:b7:64:2d:91:4c:11:c4:59:f3:1b:
ae:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:CD:A1:05:D2:3F:40:7E:1C:E9:53:C1:A1:64:85:54:32:68:7D:9A
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0A5A891C69B711F1B7B576B0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.80.0/24
Signature Algorithm: sha256WithRSAEncryption
88:bf:a2:06:30:74:dc:8e:3e:b4:54:72:34:3c:ee:01:9d:52:
97:b6:1f:08:83:00:f2:d6:4a:4b:25:d1:08:0f:5c:a6:90:ef:
6b:d5:4a:5f:1f:5b:08:83:60:d8:3f:22:22:be:e4:62:19:8a:
a9:bb:d4:37:75:0c:8d:03:9b:72:55:a4:64:9c:58:17:a6:c9:
49:4c:f4:62:0c:46:04:8f:c2:37:cd:1e:37:76:90:f4:fc:c5:
a3:2d:a2:a5:ff:89:41:17:4c:29:86:d4:7e:32:97:7e:24:7b:
ec:44:3b:9d:3c:a5:36:a4:3d:df:d1:6b:f5:8c:a6:0d:f6:e4:
f0:ad:d8:5d:b5:1a:42:4e:f5:d0:c6:2f:f0:73:32:f0:c1:fd:
b9:cc:c0:53:5c:7d:b8:06:48:3a:c8:35:e6:3d:f5:d9:3b:95:
70:a6:3c:27:7a:ad:d7:01:ea:26:61:a7:bc:17:79:2f:4b:49:
d2:77:55:4e:63:a0:13:e9:8d:5e:d2:d6:e4:46:d4:ab:cc:23:
ca:50:fc:d8:04:c9:7e:22:5b:b2:df:76:ad:31:98:cf:71:0f:
c7:89:df:88:ca:88:60:97:41:87:47:eb:b6:f2:d4:9c:ca:01:
81:9d:7c:bc:71:d6:4d:bb:25:43:4e:68:ff:07:fc:2e:b3:ae:
2b:6d:5a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 23:14:24 2026 by rpki-client