Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/11B0C4D469BB11F194F89BC8CE1D38B0.roa
File: 11B0C4D469BB11F194F89BC8CE1D38B0.roa (raw, json)
Hash identifier: ZGf5cZqU4AeWw0yac6lldED69qiO4C3rghcCvIPyypU=
Subject key identifier: 09:EF:60:14:FA:09:7E:02:61:F9:F6:C5:AE:5F:5E:CA:D9:A2:BD:0E
Certificate issuer: /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial: 01BE65
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access: rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/11B0C4D469BB11F194F89BC8CE1D38B0.roa
Signing time: Tue 16 Jun 2026 19:39:20 +0000
ROA not before: Tue 16 Jun 2026 19:39:16 +0000
ROA not after: Mon 27 Jul 2026 19:39:16 +0000
asID: 20326
IP address blocks: 45.206.62.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:26:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114277 (0x1be65)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Validity
Not Before: Jun 16 19:39:16 2026 GMT
Not After : Jul 27 19:39:16 2026 GMT
Subject: CN=6a31a668-4528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cb:d2:d9:68:99:42:1d:c7:0c:3e:d6:2b:47:
26:c4:c2:53:16:dd:c8:cf:1a:54:d3:9f:74:6f:d4:
a2:41:83:62:13:71:29:fb:c4:c4:c7:c4:e3:da:58:
84:50:b3:d0:af:55:ac:62:16:d7:a9:82:e0:13:96:
01:f0:18:fc:67:22:10:0f:31:99:ae:eb:60:f8:8d:
81:c5:97:22:8b:7a:07:f0:ee:8a:cf:43:3f:9c:66:
82:87:84:66:8e:60:00:17:44:9c:e5:ba:92:82:1f:
0c:06:36:a6:e4:31:c4:67:b9:bd:5c:8a:20:55:8f:
f0:36:b7:17:05:95:4d:18:66:50:ad:ac:8f:10:02:
92:09:38:4c:49:6d:5f:33:3a:84:0f:40:78:2f:4a:
a7:46:ef:1d:4f:2f:d9:7f:ca:eb:dc:16:6e:0e:2a:
6e:30:a9:b5:10:76:15:20:73:30:7c:ac:e8:06:43:
73:83:ee:22:70:fc:a6:4e:96:df:27:3c:41:9c:33:
36:bc:2a:ea:c2:f7:fb:b7:b0:17:0e:03:bd:a1:1d:
5f:f9:de:45:50:b6:35:db:bb:c9:22:f8:63:67:f8:
b5:f2:ef:d9:b3:88:31:d5:0a:27:e8:f0:fb:fa:00:
31:64:e8:92:97:db:e3:c5:0f:d7:8b:40:a7:f9:39:
60:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:EF:60:14:FA:09:7E:02:61:F9:F6:C5:AE:5F:5E:CA:D9:A2:BD:0E
X509v3 Authority Key Identifier:
keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/11B0C4D469BB11F194F89BC8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
45.206.62.0/23
Signature Algorithm: sha256WithRSAEncryption
70:af:c4:ac:1a:46:7f:c1:2a:f0:6a:36:d4:a2:fc:50:a9:eb:
7c:c9:09:34:7c:77:3d:52:1a:41:85:70:c4:4f:32:a4:e9:13:
f5:d8:3f:65:83:76:67:56:54:04:c6:bb:30:1d:b1:ab:ac:9d:
6d:27:45:de:37:a1:81:b9:44:5c:c7:b2:a0:e4:07:9b:57:bb:
37:31:ee:a3:e0:9b:57:1d:d8:57:ba:2e:47:ed:89:1e:59:8e:
ea:c7:97:61:40:d9:ca:79:03:b7:eb:4a:a9:32:3a:c3:fb:48:
d5:73:24:3f:a8:55:8f:26:ef:c7:eb:17:45:2f:fd:33:96:cd:
a7:2c:2b:f7:c8:2c:b0:e2:50:28:13:95:af:9b:e8:c4:ea:36:
d2:47:cc:dd:e1:d9:93:36:de:5b:49:94:63:b5:74:1c:3f:18:
51:b3:1c:e1:1c:fb:1e:e4:31:46:e9:61:12:a6:07:18:44:cb:
d7:c4:d2:35:8c:58:09:2e:40:a0:d4:6b:e0:e4:1b:56:dd:7a:
f6:c1:a1:6f:f3:94:a6:81:c7:27:87:89:93:2c:4c:f8:47:d4:
8e:11:b7:7d:a8:7f:b8:d9:a3:6b:db:e4:9e:df:7a:ff:55:5c:
63:82:d6:58:09:f8:38:a5:24:43:f7:d5:df:8c:49:5b:94:ff:
b6:5e:5e:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 22:56:55 2026 by rpki-client