Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0CC7F1B46E3811F1BF0E8ADBCE1D38B0.roa
File: 0CC7F1B46E3811F1BF0E8ADBCE1D38B0.roa (raw, json)
Hash identifier: lOJBnJ+jFacQ++VGK+eudwhiJ4WEoY5v23wGQF08wDw=
Subject key identifier: AF:C7:00:FB:05:77:DC:3F:51:C5:57:AE:8D:F1:7A:81:10:8D:5F:5B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BF9C
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0CC7F1B46E3811F1BF0E8ADBCE1D38B0.roa
Signing time: Mon 22 Jun 2026 12:44:04 +0000
ROA not before: Mon 22 Jun 2026 12:44:00 +0000
ROA not after: Fri 07 Aug 2026 12:44:00 +0000
asID: 214049
IP address blocks: 45.194.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114588 (0x1bf9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 22 12:44:00 2026 GMT
Not After : Aug 7 12:44:00 2026 GMT
Subject: CN=6a392e14-9081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d8:25:65:f0:d2:f8:cc:5f:ef:02:51:9f:ed:
49:5a:77:ad:ca:4f:9d:25:31:66:c3:f8:c5:3a:2b:
8a:db:27:fc:13:0e:6d:58:19:ca:27:c6:12:f2:86:
3e:8f:3a:8e:36:cd:86:43:e9:19:2f:4b:9a:f0:4d:
3e:3c:33:52:14:7b:16:e5:ca:29:5a:9b:a6:9a:b6:
2a:c0:8f:20:36:17:0f:d0:2f:96:fb:28:98:d6:6e:
92:fa:ad:c7:fe:ff:c0:82:c7:64:12:6a:31:08:af:
cd:61:58:f3:08:d4:e7:a6:b9:48:7e:1b:82:1a:fc:
00:c3:55:56:10:82:c8:a3:40:07:71:5c:14:b8:06:
ba:18:42:40:0c:86:a6:6f:81:01:26:17:8a:37:ec:
ff:61:52:a4:f6:89:04:1b:8f:0f:6e:42:be:88:db:
7c:03:c3:38:07:c9:bf:0b:e9:5c:a2:bd:b0:41:3d:
a4:f8:9d:54:69:61:62:d8:23:bf:59:62:fd:45:7b:
66:fd:42:cc:a6:a8:61:64:e4:9b:fb:6d:35:e7:a7:
99:7a:52:20:7e:9d:a6:4a:32:75:78:9b:cd:96:ad:
53:e7:85:df:68:cd:7b:48:57:0b:06:3f:d3:71:b8:
b4:15:b2:d1:94:ed:bb:b4:f6:03:09:b5:82:a8:a8:
fc:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:C7:00:FB:05:77:DC:3F:51:C5:57:AE:8D:F1:7A:81:10:8D:5F:5B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0CC7F1B46E3811F1BF0E8ADBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.194.6.0/24
Signature Algorithm: sha256WithRSAEncryption
67:33:77:80:2d:d5:f2:94:15:dd:50:dd:ec:07:32:b1:99:91:
67:51:fe:78:8a:4f:80:87:b6:50:4b:65:8b:c6:53:09:45:65:
54:fd:96:72:94:1c:a6:ae:02:5a:73:8e:02:80:42:25:c3:a4:
60:f8:73:09:56:11:2b:0e:77:22:9c:b6:33:c8:0e:0f:30:bf:
60:2b:e8:1b:31:af:73:9f:68:01:a3:15:bd:eb:ec:b5:09:82:
5a:16:48:c5:ea:7a:b4:82:57:d9:85:de:9c:b5:4b:46:32:db:
2b:35:95:86:3c:df:3a:0f:4a:80:a9:31:5b:88:b3:74:2a:69:
66:3a:6b:e3:74:b5:e4:17:76:59:24:da:99:9e:93:2d:1d:e7:
4f:3e:20:4b:8a:fe:d6:a1:70:88:01:68:31:6d:3a:2e:db:19:
45:34:09:6b:5e:63:1e:80:50:05:59:ed:10:16:88:35:c3:ff:
fb:ea:0e:92:41:cc:db:d2:ef:e0:66:13:64:51:71:f2:82:00:
9b:09:94:c5:f1:43:10:fd:c4:19:38:fc:17:c1:c4:71:7e:3c:
05:e1:aa:19:93:25:36:1a:ad:10:3d:ef:8a:a0:45:d8:f2:22:
66:99:c3:5f:ef:1e:4a:4b:a2:82:7a:9c:55:b2:59:6a:2e:c8:
56:72:9a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:43:41 2026 by rpki-client