Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0F0EE1E281D611F19EF60DACCE1D38B0.roa
File: 0F0EE1E281D611F19EF60DACCE1D38B0.roa (raw, json)
Hash identifier: qBl9L9Bk378k1fu85EnhnMnMn8dhkk9W8X4gLzfS7Lk=
Subject key identifier: 6B:EF:62:FB:BF:B3:F2:3E:82:CC:8C:73:BC:FB:59:A0:16:08:05:BA
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C5E2
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0F0EE1E281D611F19EF60DACCE1D38B0.roa
Signing time: Fri 17 Jul 2026 11:53:00 +0000
ROA not before: Fri 17 Jul 2026 11:51:48 +0000
ROA not after: Sun 09 Aug 2026 11:51:48 +0000
asID: 63099
IP address blocks: 45.192.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116194 (0x1c5e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 17 11:51:48 2026 GMT
Not After : Aug 9 11:51:48 2026 GMT
Subject: CN=6a5a179c-cf94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2d:c8:51:20:02:89:7c:6b:ff:5b:23:f1:9d:
58:4f:f8:be:c9:02:94:64:0d:10:23:00:56:10:fc:
04:ee:66:13:5a:ea:af:db:4c:91:73:d7:68:5e:62:
05:56:20:a5:60:b4:42:09:31:df:dc:7c:f8:17:8b:
64:ed:f0:b5:7e:e6:28:97:31:b9:9f:92:5a:01:4b:
28:3c:84:8d:e4:5f:a4:1f:80:00:d0:3e:17:28:27:
7a:ba:f1:89:97:fb:a1:44:33:04:5d:46:3d:0f:b3:
75:ec:69:e9:0e:46:0c:08:e1:6f:6b:1d:db:37:35:
71:fa:e0:d7:5e:5c:e1:6f:40:30:3b:7e:2f:06:19:
ae:c7:28:dc:f5:90:0c:a2:c3:5e:45:ba:5b:dc:35:
20:e7:10:66:36:d9:8f:b7:bd:41:40:f1:86:ca:82:
e7:33:57:74:f6:1a:d1:ec:dc:c4:1e:b7:75:2e:e0:
c3:f0:84:34:34:ff:62:01:df:c9:c5:2f:b8:3a:4b:
14:75:93:31:4b:d3:ac:29:fd:d3:21:23:89:44:ee:
34:b0:e1:ec:3c:19:ec:69:50:06:b8:bd:90:04:71:
a0:3e:f9:b2:2c:4f:a0:e2:f4:68:e2:b3:6d:a6:fc:
17:6b:1a:18:90:b3:c3:b2:96:e1:b9:48:0d:97:83:
33:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:EF:62:FB:BF:B3:F2:3E:82:CC:8C:73:BC:FB:59:A0:16:08:05:BA
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/0F0EE1E281D611F19EF60DACCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.192.236.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:03:67:72:77:da:58:77:a7:33:c8:19:88:d8:f5:66:30:37:
1c:9a:8f:c3:9b:1a:97:be:af:2a:3b:86:74:91:5e:c8:b3:24:
a9:68:54:e3:97:9b:68:37:b9:88:bb:1a:51:42:d9:51:08:10:
a2:2c:de:82:49:2a:46:9b:6f:6e:95:b6:68:41:4f:f0:62:66:
36:da:dd:7d:56:57:86:5e:8a:77:7a:9d:85:bd:3a:6e:f9:0b:
68:ee:a4:dd:fa:6b:a9:2b:db:00:d9:f5:5e:8f:ed:da:e6:03:
65:98:a6:18:e6:2c:d0:08:17:ca:ed:5a:98:68:c1:5a:8b:17:
b5:54:38:5a:0d:6b:b0:ac:e1:0a:73:58:f0:ee:3e:76:ff:e5:
99:f0:2a:62:5d:59:4b:96:db:33:14:7c:46:50:f9:61:c5:7e:
f1:58:fe:49:87:fd:57:17:aa:06:7e:e7:1c:31:aa:e9:96:4e:
34:b7:7b:5a:e3:06:b1:25:6d:22:17:06:31:68:0e:84:0d:93:
af:93:55:44:f0:28:51:c8:31:eb:d9:ab:9c:35:da:76:aa:9c:
31:3c:40:0a:49:fa:4f:a5:2a:a2:f5:a0:9d:ba:cd:95:f4:f9:
6d:e4:d4:13:3e:58:65:28:1a:b8:23:10:ec:19:be:ca:d1:d7:
75:1d:b6:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:02 2026 by rpki-client