Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0DF7DE9A6AE711F19B97ECF6CE1D38B0.roa
File: 0DF7DE9A6AE711F19B97ECF6CE1D38B0.roa (raw, json)
Hash identifier: y1bdfA8/dB2jlweZaYhoGJOPnkL7imCuo1rMU4CChkg=
Subject key identifier: DA:95:8F:9A:FE:21:62:51:96:EB:D0:AF:08:C7:96:E7:3F:C4:C7:4B
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BEEA
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0DF7DE9A6AE711F19B97ECF6CE1D38B0.roa
Signing time: Thu 18 Jun 2026 07:26:43 +0000
ROA not before: Thu 18 Jun 2026 07:26:38 +0000
ROA not after: Thu 23 Jul 2026 07:26:38 +0000
asID: 138910
IP address blocks: 45.195.240.0/24 maxlen: 24
45.195.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114410 (0x1beea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 18 07:26:38 2026 GMT
Not After : Jul 23 07:26:38 2026 GMT
Subject: CN=6a339db3-9d52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:22:76:7c:50:30:68:5c:be:86:12:bb:a9:21:
af:e9:fd:8c:a6:42:2f:f1:76:58:4d:56:4c:e7:0f:
ea:ca:ad:e5:fd:3c:99:29:73:4c:dd:3b:ea:7f:9f:
e5:e4:b2:3b:ef:14:b9:be:d7:9d:96:c1:23:fc:70:
68:3d:1e:51:de:36:c0:7c:36:9a:f7:50:7f:ea:ca:
3e:01:c8:b9:5b:5b:68:44:f9:33:c0:d6:a5:50:dc:
12:83:36:86:c1:98:d1:d9:7e:6d:45:63:12:52:87:
14:9f:61:55:b1:e4:d8:22:d8:aa:57:79:d7:ab:0e:
fb:e2:0c:22:f9:d3:df:77:31:d2:25:69:49:f8:7a:
5e:d3:07:90:37:51:b1:16:b4:8b:4f:76:61:7d:68:
c8:c9:b6:d8:6b:66:ae:60:4f:0e:7d:63:dd:50:20:
1d:05:e4:2a:4c:f1:b4:f5:d0:ba:40:52:b9:ae:8b:
4a:41:cf:0c:63:38:4b:9a:b4:5c:11:14:83:fd:a7:
4e:e2:dd:70:95:36:02:46:02:62:d1:46:08:5b:d6:
78:ce:03:09:e3:77:d3:67:21:69:70:9f:b9:a3:b8:
34:13:a7:2f:69:3b:58:98:a7:54:2c:64:86:11:7a:
07:b4:4f:8e:6e:59:2a:8c:de:7f:86:bc:f1:99:49:
ec:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:95:8F:9A:FE:21:62:51:96:EB:D0:AF:08:C7:96:E7:3F:C4:C7:4B
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0DF7DE9A6AE711F19B97ECF6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.195.240.0/23
Signature Algorithm: sha256WithRSAEncryption
06:4d:6f:ec:19:2b:6a:5a:37:10:e8:78:be:9f:c7:54:da:73:
04:95:5c:1b:34:22:d6:49:21:21:3a:53:d6:ee:43:95:c1:62:
80:f4:38:0b:7f:e7:a1:0d:0e:53:bc:e1:65:f1:f0:69:9d:9c:
33:8a:60:0c:29:fc:18:2f:49:99:ed:1f:33:10:15:3c:8a:31:
c2:e9:e2:44:18:35:f1:63:99:d7:f6:83:ea:54:3a:8c:ab:d1:
5f:30:bf:eb:21:eb:56:f8:7c:97:63:7c:13:03:20:41:b1:99:
ec:bf:43:e3:6b:00:95:53:3c:bc:c4:cd:8a:7a:fd:d3:5a:93:
25:de:0a:c9:88:54:74:b9:9c:46:ce:a0:67:e7:02:32:96:27:
5b:af:65:af:20:fd:59:56:48:26:47:fa:21:ce:ab:0f:f3:44:
4d:19:cf:3d:56:b7:3b:f2:33:c8:f6:e8:d2:a6:19:72:9e:c2:
b5:cb:72:52:73:ef:0a:a3:80:5b:86:3f:67:8c:f4:25:e0:4b:
4b:30:13:14:c2:ed:ac:47:97:b6:14:5f:33:68:9b:09:9e:e7:
76:95:e1:b8:76:2e:a9:86:8a:d0:2a:f4:74:1f:86:19:60:13:
43:9d:ac:2c:4d:31:c4:bd:66:64:d1:e1:d1:6a:79:d4:dc:61:
55:54:68:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:41:44 2026 by rpki-client