Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0B8D50E87D5911F18760A908CF1D38B0.roa
File: 0B8D50E87D5911F18760A908CF1D38B0.roa (raw, json)
Hash identifier: UzXwJJKDjYyPut/TpmUD3bQ9Rfg3LskUz7+kd61TwBc=
Subject key identifier: B7:94:06:DE:18:54:B0:06:6C:86:F7:49:BF:9D:82:D9:64:44:9F:B7
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C48D
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0B8D50E87D5911F18760A908CF1D38B0.roa
Signing time: Sat 11 Jul 2026 18:48:03 +0000
ROA not before: Sat 11 Jul 2026 18:47:57 +0000
ROA not after: Thu 20 Aug 2026 18:47:57 +0000
asID: 214413
IP address blocks: 45.194.87.0/24 maxlen: 24
45.194.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115853 (0x1c48d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 11 18:47:57 2026 GMT
Not After : Aug 20 18:47:57 2026 GMT
Subject: CN=6a528fe3-294e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f8:f1:51:3a:ad:59:32:22:fa:ed:78:20:43:
5b:a0:7b:98:d6:63:9e:ad:1e:33:0a:5a:a6:67:d3:
50:b8:87:f4:43:a4:3c:6d:c0:5d:8a:6a:f2:5a:6d:
ff:17:ac:11:ff:be:79:58:b4:a2:06:88:62:60:80:
cc:64:8a:3f:bf:66:4a:4c:2e:af:04:30:15:bf:3f:
52:a9:dd:35:5b:e8:8a:a9:08:65:d6:0d:08:cb:ce:
79:7f:56:a2:15:72:90:e8:fa:d8:33:09:dc:a3:09:
29:56:3b:a9:9c:0f:9e:42:5b:49:61:ea:2d:01:26:
9d:b1:37:bd:5f:20:ff:7d:80:4b:6d:0f:d1:84:2b:
15:1c:c7:2f:42:4a:79:db:72:b7:28:0e:51:06:e1:
a3:32:9a:98:7c:ad:11:74:17:80:1f:30:42:63:81:
64:75:08:c6:6a:70:69:2e:a7:1f:c8:8a:bf:fd:db:
55:26:75:fd:87:89:b0:34:35:ff:42:a0:42:e9:d3:
0e:25:85:c8:ad:04:dc:9a:8a:57:e7:0a:53:ea:61:
5f:d8:d2:6f:87:55:a3:20:53:b7:4c:a4:b7:ee:75:
25:12:9a:ea:aa:01:ec:37:f7:3f:72:68:73:66:98:
16:62:f9:f7:cd:20:df:9d:99:4b:a9:18:b7:b1:86:
91:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:94:06:DE:18:54:B0:06:6C:86:F7:49:BF:9D:82:D9:64:44:9F:B7
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0B8D50E87D5911F18760A908CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.87.0/24
45.194.95.0/24
Signature Algorithm: sha256WithRSAEncryption
17:76:2c:d3:bd:5f:35:f3:be:c7:48:59:0c:bb:85:af:3b:11:
51:2f:80:78:2e:f9:1d:b7:c7:d1:96:35:9d:be:76:d2:f6:df:
89:e6:5c:81:b1:c4:53:60:cd:de:9e:fe:f1:da:e9:cc:ef:1b:
5a:b0:77:f1:84:c5:91:66:56:a6:a1:1e:5e:25:36:6d:8a:64:
19:5d:ac:0d:ed:03:37:36:8c:0d:66:5f:61:b3:ce:67:ea:fa:
da:4c:93:c5:73:1f:10:1e:02:a8:8d:0f:75:cc:ab:95:6e:f6:
60:52:8f:4a:39:a6:1f:5e:4f:29:ba:43:6e:f0:82:9b:23:bc:
0e:46:84:a5:9d:e9:70:f3:f8:1f:01:cc:d9:4a:cc:23:62:c7:
60:28:e5:bb:37:94:fb:77:0c:f1:d0:2d:99:f0:b0:68:d1:dc:
2a:53:f1:1f:d2:e4:66:94:62:9f:db:bb:12:1a:db:c3:ed:b5:
e9:b0:1c:c3:66:78:bd:4a:aa:13:3a:64:ac:82:92:1e:bb:a2:
f6:b2:c4:88:59:6f:11:c6:e2:41:9d:f2:2c:b8:b3:58:03:ea:
c6:8d:70:7a:5e:4a:35:28:7c:28:64:85:1d:79:cb:9d:07:eb:
f6:38:40:63:c7:73:78:40:e4:6f:b7:dd:33:c3:5b:dc:40:86:
81:79:ca:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:57:18 2026 by rpki-client