Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/102FE9BE7D6611F194CE87D8CE1D38B0.roa
File: 102FE9BE7D6611F194CE87D8CE1D38B0.roa (raw, json)
Hash identifier: ZwEJMqEQVA4R8tvpL4JkS+jGXKkfTj8G/hSDwi1IrOM=
Subject key identifier: 02:54:13:16:24:F6:AC:D8:B2:E7:64:15:84:61:DD:15:CE:6C:0E:E0
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01C491
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/102FE9BE7D6611F194CE87D8CE1D38B0.roa
Signing time: Sat 11 Jul 2026 20:21:14 +0000
ROA not before: Sat 11 Jul 2026 20:21:08 +0000
ROA not after: Mon 10 Aug 2026 20:21:08 +0000
asID: 141883
IP address blocks: 45.200.24.0/21 maxlen: 24
45.200.32.0/19 maxlen: 24
45.201.214.0/23 maxlen: 24
45.201.224.0/21 maxlen: 24
45.201.240.0/20 maxlen: 24
45.204.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115857 (0x1c491)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jul 11 20:21:08 2026 GMT
Not After : Aug 10 20:21:08 2026 GMT
Subject: CN=6a52a5ba-a344
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f7:39:8e:8c:d1:7c:df:b7:c1:fd:28:27:cd:
c0:a1:88:9b:2e:00:b6:6f:99:4c:62:b1:b9:e5:83:
c5:a1:b9:f6:2d:fe:5e:27:0d:b5:cb:7b:62:a7:dd:
57:09:be:0f:5c:dc:b7:3e:ef:c3:6a:70:65:06:8d:
bb:78:c9:26:89:46:df:7c:af:bd:f7:2f:f2:38:b0:
9d:0d:e4:e5:c0:6f:ec:f3:b4:5b:d2:fa:bf:8d:b4:
33:6b:4e:bf:26:65:79:3c:58:42:8b:a8:8b:66:5e:
f5:ca:c5:da:af:6a:7a:ea:f7:b1:57:49:1c:31:95:
d6:56:bf:ff:81:03:2a:a9:a3:dd:b3:3b:a0:bb:ac:
08:46:33:e6:ce:9b:32:0c:97:a1:17:a8:f9:73:cc:
cd:8b:db:69:04:97:0e:aa:0c:5c:14:54:67:33:12:
6f:4c:aa:15:6f:0c:09:cc:d0:9a:2f:0c:cf:8a:b7:
cf:b8:50:1b:f4:18:71:22:28:17:47:a5:e4:ac:45:
a7:fc:a4:35:0e:f6:30:75:c2:07:aa:48:fc:42:0e:
bf:49:82:fe:ca:9e:5b:72:c4:47:d3:9c:1d:b1:a2:
bd:24:58:ad:3e:34:06:de:17:03:fa:ce:00:97:07:
83:21:fc:5e:0d:1f:51:0b:45:b3:54:69:8c:62:de:
1d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:54:13:16:24:F6:AC:D8:B2:E7:64:15:84:61:DD:15:CE:6C:0E:E0
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/102FE9BE7D6611F194CE87D8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.200.24.0-45.200.63.255
45.201.214.0/23
45.201.224.0/21
45.201.240.0/20
45.204.0.0/24
Signature Algorithm: sha256WithRSAEncryption
52:d9:8e:97:6c:d3:b0:d3:1f:27:78:6b:77:3e:be:dc:35:5a:
76:34:37:3b:c1:cb:01:d8:73:44:e3:e4:6c:89:ea:26:a5:89:
c7:4c:7a:dc:1f:46:1a:f5:11:75:7e:da:ea:0f:02:8f:ce:65:
58:87:55:dc:45:8c:9a:1b:63:a6:dd:3b:ba:47:4f:dc:5d:55:
4f:d4:a4:a9:3f:1e:db:5e:20:76:93:e1:cc:ba:51:15:80:6c:
5e:f2:6d:85:31:1d:91:b8:45:44:d7:03:51:6c:05:e8:2f:f5:
8c:c6:99:27:f4:c2:46:a9:1c:8e:37:d8:d6:d9:69:a4:b2:e6:
db:41:3f:77:c0:53:f8:18:0f:cc:f1:df:24:a0:b9:a5:f0:5f:
6f:02:c0:22:ba:d2:e0:bf:6d:be:7d:97:54:3f:f0:56:6e:dd:
b0:ed:41:c6:14:ed:2e:de:d7:40:ad:33:92:36:ba:ba:83:15:
ed:06:1d:14:cd:7e:23:85:bd:b3:57:39:0c:9c:c8:e3:8c:7e:
a9:60:f6:ee:ae:00:78:02:d4:08:b6:66:5f:40:f7:db:fa:60:
c6:4a:bd:31:da:73:13:d2:32:88:5d:c4:3e:b0:24:4f:77:1c:
e2:38:6b:55:6b:c3:68:e3:76:b2:26:3d:58:92:ed:08:2c:9d:
09:f8:d2:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 23:42:36 2026 by rpki-client