Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0DDE43946A5C11F183971BA2CE1D38B0.roa
File: 0DDE43946A5C11F183971BA2CE1D38B0.roa (raw, json)
Hash identifier: GmOIOkjipqz1CBCXSNdyhKU04hpuktBbrlYmcUlJ++w=
Subject key identifier: E5:70:24:21:58:D2:9A:A6:07:87:53:87:DE:BF:3D:81:B6:4A:4C:32
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BECE
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0DDE43946A5C11F183971BA2CE1D38B0.roa
Signing time: Wed 17 Jun 2026 14:51:43 +0000
ROA not before: Wed 17 Jun 2026 14:51:38 +0000
ROA not after: Sun 13 Sep 2026 14:51:38 +0000
asID: 142286
IP address blocks: 45.207.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114382 (0x1bece)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 17 14:51:38 2026 GMT
Not After : Sep 13 14:51:38 2026 GMT
Subject: CN=6a32b47f-da6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:55:0d:38:f5:03:75:66:f7:55:74:33:e1:03:
aa:7d:85:3b:ed:17:8d:de:a2:4c:57:2e:8e:85:e9:
5f:21:19:7f:e5:84:1b:6e:66:ac:78:1b:59:6d:f1:
74:b2:6d:4f:6d:ff:59:d2:47:2b:be:79:22:c4:7b:
97:af:7e:b1:c5:a0:94:c6:d1:a3:ad:30:d8:b7:8d:
8c:81:8a:f3:e2:be:12:4e:93:c8:70:88:02:5c:27:
51:22:d0:1c:65:42:bb:16:13:2d:e1:dc:18:f1:aa:
1c:5c:fb:9b:55:7e:14:d1:8f:32:73:38:3d:8f:49:
5c:d5:1f:9a:2c:c7:c8:23:a8:b6:4a:d3:c2:54:f2:
57:b7:0a:de:42:43:3a:54:38:15:06:48:4c:46:b3:
76:f6:ce:30:4e:0e:fa:08:5f:eb:8c:79:35:51:65:
f5:47:23:85:79:6c:2f:49:82:b4:f3:86:c2:f8:1a:
db:e0:63:5b:a4:d2:be:76:34:72:2a:aa:aa:31:dd:
6f:4e:10:8c:06:ec:57:4d:f9:44:c8:c9:f5:98:70:
00:fe:72:b0:d6:be:56:ab:c7:82:a8:f3:01:e5:a0:
9d:25:9c:e0:ee:51:f3:c5:77:53:04:a6:d2:85:75:
a7:28:97:ef:c1:00:c4:42:93:04:d0:1d:41:b9:81:
4e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:70:24:21:58:D2:9A:A6:07:87:53:87:DE:BF:3D:81:B6:4A:4C:32
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0DDE43946A5C11F183971BA2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.207.64.0/18
Signature Algorithm: sha256WithRSAEncryption
77:42:98:2e:73:39:43:79:25:23:96:72:a2:9b:62:1e:89:dc:
3a:30:56:95:17:52:b8:92:99:1e:7d:4b:51:26:3a:5b:da:d2:
d0:09:c7:d9:f0:91:f3:f7:f0:46:cb:f9:11:f0:bc:18:4f:0d:
ee:e6:d9:76:95:db:02:5b:27:c3:3a:d1:96:ab:6e:8c:46:f3:
56:de:c4:91:95:30:36:da:7d:0e:9f:ef:c7:c3:79:20:0d:b4:
05:cd:8b:33:e6:be:1e:40:a3:14:9d:eb:f7:95:19:c9:47:d6:
18:b0:fe:67:68:fc:24:00:00:32:0e:99:5e:36:ab:3b:88:7f:
9c:51:25:2f:64:9a:44:f1:a7:3c:95:43:c9:a9:f6:93:fe:df:
48:b9:24:87:bf:3e:46:27:52:f2:e3:21:25:b9:2e:d6:69:ea:
45:db:b1:12:73:e8:ce:54:57:5b:0a:ed:fc:03:1b:11:96:80:
3b:05:4a:fe:86:68:c2:04:b2:48:34:96:fc:0f:56:98:11:0e:
a8:7f:ae:65:69:8c:2b:0d:d9:ee:08:b8:73:87:b8:e5:ca:f9:
de:b0:53:b2:34:18:a9:2e:a7:89:fe:3b:00:2d:3a:0c:7c:d0:
6f:70:46:eb:9f:ea:86:13:89:7a:c2:45:77:c9:fa:9e:9f:9f:
5c:6c:d3:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:34 2026 by rpki-client