Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0C0F0DAA717311F19780D9FBCE1D38B0.roa
File: 0C0F0DAA717311F19780D9FBCE1D38B0.roa (raw, json)
Hash identifier: rIweY3pSa4PkNdyyliyGEXy0hqbNxJFDyf5qU+aMzO8=
Subject key identifier: B9:E7:A0:47:40:D8:02:28:D4:73:F4:7E:23:8C:05:3B:35:78:7D:43
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C0BB
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0C0F0DAA717311F19780D9FBCE1D38B0.roa
Signing time: Fri 26 Jun 2026 15:23:57 +0000
ROA not before: Fri 26 Jun 2026 15:23:52 +0000
ROA not after: Thu 30 Jul 2026 15:23:52 +0000
asID: 401783
IP address blocks: 45.197.3.0/24 maxlen: 24
45.197.8.0/24 maxlen: 24
45.197.10.0/24 maxlen: 24
45.197.11.0/24 maxlen: 24
45.198.5.0/24 maxlen: 24
45.201.35.0/24 maxlen: 24
45.201.41.0/24 maxlen: 24
45.201.42.0/24 maxlen: 24
45.201.48.0/24 maxlen: 24
45.201.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114875 (0x1c0bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 26 15:23:52 2026 GMT
Not After : Jul 30 15:23:52 2026 GMT
Subject: CN=6a3e998c-fbaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c4:b6:32:2b:7b:71:ec:9e:3f:c4:9f:27:be:
65:af:bf:e8:1a:65:c5:0f:80:ac:e1:2d:1b:d2:fe:
3a:c0:31:19:d1:53:cc:bb:df:7d:ff:6c:02:8e:e8:
70:e7:b4:15:9c:d4:6f:7d:a3:99:c6:2b:7d:fc:8f:
ea:ed:95:d2:d5:cb:e8:cb:b9:5d:22:2c:92:ee:c0:
b0:c7:7b:f0:27:e3:4c:a5:2a:f9:61:5d:0d:84:90:
60:83:bc:b1:1b:07:be:3d:6b:5f:2e:7a:1b:7f:f7:
63:a2:73:81:46:43:35:70:eb:9e:16:e5:60:e2:fc:
e8:e7:80:48:c3:26:16:36:c9:24:de:59:d3:57:03:
e0:8b:98:a8:b6:3b:17:1e:f6:86:7e:f2:6d:b7:ce:
d7:db:e1:12:c7:cf:40:96:38:d6:36:44:9c:bd:76:
18:d8:12:96:f0:fb:39:b4:b2:b8:c0:5f:78:33:57:
6a:b6:65:98:e4:e2:60:90:33:09:24:86:26:05:61:
4c:11:d0:85:34:72:f1:47:10:0c:6c:8d:9f:22:03:
f7:39:49:26:23:89:ec:3a:19:2f:e9:3b:0f:a9:40:
19:36:b5:a3:8f:de:3c:7b:85:7b:2d:5f:c0:14:fd:
b2:d5:cb:76:d4:80:3d:e3:b3:99:0a:0b:59:5f:3a:
6c:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:E7:A0:47:40:D8:02:28:D4:73:F4:7E:23:8C:05:3B:35:78:7D:43
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0C0F0DAA717311F19780D9FBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.197.3.0/24
45.197.8.0/24
45.197.10.0/23
45.198.5.0/24
45.201.35.0/24
45.201.41.0-45.201.42.255
45.201.48.0/24
45.201.61.0/24
Signature Algorithm: sha256WithRSAEncryption
94:7a:77:f3:f1:4b:ba:60:2e:03:4e:55:f6:49:6f:53:b4:b3:
9b:87:5a:73:e0:c6:07:3f:11:69:8c:e2:a5:9e:86:71:a7:1e:
cb:ca:aa:b2:a7:0d:6e:4a:63:12:87:2b:61:0f:f2:3e:d0:e1:
2d:7d:f0:98:5e:fa:37:b0:78:d0:83:97:48:bd:4a:f0:6a:7a:
09:fe:e7:8f:fd:0e:2e:a3:23:45:f8:c4:c5:b1:28:85:b5:80:
c8:9f:03:65:fa:7c:e8:b7:f3:59:09:11:3c:5f:4e:a3:22:19:
d1:79:9c:dd:ac:59:42:ab:92:cf:98:a2:a8:4d:79:c2:a7:42:
57:c8:fd:52:fc:de:5b:6d:5e:39:e1:12:af:04:b4:d7:41:22:
75:65:dd:d9:2a:ed:36:1d:57:72:72:7a:e3:e5:e3:b1:91:68:
65:2d:e1:c4:a5:fc:e2:5f:46:25:ca:92:53:11:db:70:71:66:
cf:e0:df:48:05:99:0c:c3:ca:76:7f:2a:0d:7c:c2:3e:29:3e:
1a:0a:6c:28:93:de:c0:3d:9b:9c:c4:27:07:a4:48:a4:1c:79:
c9:29:5d:c1:40:38:be:2e:36:c8:87:5e:74:5a:c0:7f:95:1f:
09:96:b7:a4:66:31:bd:32:5e:e4:43:b2:84:e1:b7:5c:81:4e:
bf:9f:59:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:43:39 2026 by rpki-client